Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa
File:                     e9372a00-f021-34bf-9340-b56939c57a53.roa (raw, json)
Hash identifier:          ZuULO4YU+5owQknMvrpYMlMPkg1zYysdaReMCM6J8aw=
Subject key identifier:   3F:E6:8E:14:76:96:FA:5E:95:C6:DC:17:3D:26:5D:17:32:6D:94:56
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584E8F54EC138FE8DF5DC56FA480
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     401772
IP address blocks:        198.29.31.0/24 maxlen: 24
                          2602:f9e7:10::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:ec:13:8f:e8:df:5d:c5:6f:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=b7d1c5ef-80c8-4361-9892-ed801503c888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:35:bc:14:b9:b2:1c:2b:9e:76:79:bf:ba:
                    97:6c:00:d2:56:c3:01:e6:ea:f4:de:6c:ef:c3:6b:
                    00:f2:a1:52:99:da:92:f9:5a:5b:64:51:0c:df:4e:
                    c9:c1:87:8a:a2:f7:a3:0d:68:27:91:eb:13:d8:40:
                    c8:09:e7:5c:d2:d8:23:c3:2c:70:32:d2:8b:ba:d0:
                    00:7b:0f:be:0f:2f:45:2a:89:70:c7:2b:aa:b4:ca:
                    f3:aa:ec:a3:ee:09:0b:e8:a6:b4:4c:67:79:dd:b8:
                    94:dd:88:61:82:d0:68:c2:0e:23:89:1f:91:34:37:
                    3c:e3:fa:52:71:ee:1f:ca:50:fa:22:82:e9:db:62:
                    2e:02:ca:1a:21:01:47:dd:9f:5b:76:02:78:27:df:
                    72:b8:ff:7c:40:67:3c:72:d4:82:90:36:83:06:22:
                    32:7a:aa:7f:b7:ad:6e:99:7e:d5:83:60:c8:dd:7f:
                    31:4b:aa:71:78:4d:ed:6a:89:0c:10:9d:52:66:5f:
                    53:72:5a:15:36:a9:d9:5e:b2:72:fc:12:8e:c9:f7:
                    2e:92:f4:9f:03:85:7c:82:4b:e8:ed:39:28:2f:f6:
                    dd:09:66:13:6c:f9:f8:dc:4d:2d:05:4a:ae:78:b6:
                    2b:01:ad:ba:06:b3:16:97:d5:5b:aa:fa:0c:a9:cd:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E6:8E:14:76:96:FA:5E:95:C6:DC:17:3D:26:5D:17:32:6D:94:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9372a00-f021-34bf-9340-b56939c57a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.31.0/24
                IPv6:
                  2602:f9e7:10::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:ff:8d:86:12:6a:39:0f:9a:c7:1d:a6:2f:e0:fc:8b:e6:
         75:18:47:f4:5b:f4:1d:3b:61:e7:ea:83:ff:eb:71:62:28:be:
         c6:a8:28:1f:99:81:62:0d:b3:a9:25:e9:bf:17:de:7a:03:ed:
         3e:06:9e:fc:00:01:42:7c:f9:da:3d:76:72:18:ea:35:32:ab:
         3e:72:1d:35:0d:50:a9:ae:43:5d:a3:34:a0:18:df:60:ca:04:
         de:8b:53:f8:e2:aa:ad:81:8b:cd:48:3a:cb:79:00:ce:8d:0c:
         78:6e:8a:01:be:ab:37:c2:b0:d2:9d:9a:16:64:10:b9:81:64:
         d2:cc:92:a1:95:1b:2a:f4:fe:63:5a:90:e8:54:a0:ff:1a:03:
         c3:33:18:43:ca:18:9d:e9:23:9c:32:ce:67:15:fa:3c:c1:9d:
         e1:83:32:2a:c2:da:2c:dd:1b:47:13:16:68:ea:d3:4a:6e:0c:
         ea:70:f1:bf:ff:85:6d:e8:2c:cc:d1:27:2b:d0:53:f2:8b:d0:
         41:85:b5:63:34:0a:77:dd:ef:b1:d3:d8:10:68:7b:30:2b:89:
         fe:76:28:2e:5a:68:1b:0b:50:e2:6c:d5:68:0d:a9:37:81:73:
         c8:20:bd:c4:86:64:40:99:36:0a:3f:6e:cc:5c:d8:4d:21:79:
         ca:69:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:14:08 2026 by rpki-client