Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4dc199e4-dab9-304a-bf72-b2433dc49238.roa
File:                     4dc199e4-dab9-304a-bf72-b2433dc49238.roa (raw, json)
Hash identifier:          pGCqhhd1S5vezM67QzM+qrV+po3yhlWkPO3sZzg4UTs=
Subject key identifier:   7F:7D:4B:5B:BE:6F:21:E1:A6:D4:31:0E:EB:58:C5:3A:EF:BD:3D:23
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA7D082EB2DE6F02881BE0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4dc199e4-dab9-304a-bf72-b2433dc49238.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        151.101.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:7d:08:2e:b2:de:6f:02:88:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=7af17587-71b8-4d11-a58d-860a4d3a0fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:1d:e6:e0:cb:57:63:cb:40:c7:a7:ed:ca:
                    45:19:4a:fa:fe:54:0a:a3:a5:bf:ce:f1:e4:da:ae:
                    54:a6:0d:7f:15:81:ff:4a:72:33:7d:ba:19:21:ce:
                    17:9f:0d:4d:97:89:dc:fd:21:50:c8:80:05:88:a9:
                    aa:c1:40:73:e7:58:da:1a:b9:39:ba:7e:8f:cb:eb:
                    40:be:fc:36:97:fd:3b:16:21:4d:4d:fb:c1:61:50:
                    bc:b2:7f:ca:c5:f3:c6:af:08:c1:6d:1b:34:b6:26:
                    bd:fb:29:58:34:5e:db:82:d9:8c:5c:08:b9:12:29:
                    d0:47:f4:09:c9:24:66:5c:9e:3c:8f:c0:df:c2:75:
                    e8:f5:15:8e:18:ac:20:e8:fd:99:11:e3:bd:6e:3c:
                    25:65:c7:6c:6d:30:e9:c7:2f:4c:db:41:86:40:32:
                    20:8e:26:16:18:79:47:8a:02:9e:5c:36:07:ac:68:
                    17:53:a0:12:1e:8b:b5:d0:99:b8:b8:e8:2e:28:33:
                    6a:f8:b9:48:7c:08:8b:bf:c5:fa:a3:1a:16:30:36:
                    ca:f8:b4:c0:5f:3e:75:10:2d:a7:fc:02:0a:f6:c1:
                    86:dd:d9:b6:2d:9a:2a:00:10:0e:ec:bb:42:45:14:
                    0d:76:cb:bc:e9:36:22:5e:bd:14:ad:cd:90:3d:d6:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:4B:5B:BE:6F:21:E1:A6:D4:31:0E:EB:58:C5:3A:EF:BD:3D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4dc199e4-dab9-304a-bf72-b2433dc49238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:93:d9:45:77:42:1f:39:18:d5:8b:3b:cd:f5:72:97:77:a0:
         63:cf:76:c5:5a:61:bb:27:e3:8c:3f:d2:ad:51:8c:fc:72:f1:
         df:0b:bb:2a:b1:09:f8:a0:89:f4:8e:2a:09:cb:32:cb:03:69:
         fa:90:df:20:28:31:da:b7:c6:1b:2f:a6:e9:65:5c:67:41:a1:
         1d:0a:6d:ec:4d:64:cd:15:37:eb:b8:73:53:61:54:09:b4:0b:
         39:b8:e8:b0:b0:55:2d:ed:e0:f7:01:6c:d3:d0:87:c9:7e:7a:
         91:cd:d2:c1:d7:5f:d9:68:d4:29:d9:98:4e:1f:78:5a:c4:37:
         5d:85:c2:dd:92:9c:c5:30:39:13:29:f7:91:b7:44:47:91:e2:
         06:32:22:8b:6b:4a:99:75:9d:9c:9a:40:4d:cf:d3:a0:3b:64:
         f4:d3:70:5f:5f:71:be:57:ce:62:7c:c6:c6:f6:a6:e8:d0:7d:
         c2:83:d7:85:ac:ad:7c:33:42:f9:a3:24:ce:6a:40:f7:aa:17:
         08:b6:03:49:bb:3d:7f:63:ce:09:5f:56:d8:f6:86:f9:52:20:
         48:50:cd:32:2c:93:9e:66:64:65:55:4a:2c:3f:d4:ec:d8:88:
         93:34:b2:75:d5:ae:57:55:22:3b:89:70:a4:c1:f7:95:05:50:
         da:58:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:32 2026 by rpki-client