Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa
File:                     aff81813-3cd1-36c9-97ca-eaec48ce378a.roa (raw, json)
Hash identifier:          pHv18kzPJXCx9wSJeNwXRuZ3QXiQVpaNax8PfexLIzY=
Subject key identifier:   A9:34:EE:F8:79:C0:F4:D7:E8:B6:BE:F0:21:FF:C3:E3:D7:16:6F:29
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584D91C0124A70A0A49EA44A4900
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     36692
IP address blocks:        198.41.8.0/22 maxlen: 22
                          198.41.8.0/23 maxlen: 23
                          198.41.8.0/24 maxlen: 24
                          198.41.9.0/24 maxlen: 24
                          198.41.10.0/23 maxlen: 23
                          198.41.10.0/24 maxlen: 24
                          198.41.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:12:4a:70:a0:a4:9e:a4:4a:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=33bcdf8f-aa29-4ac9-b2e6-53c8269115ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ad:2b:1a:49:7a:fd:22:21:c1:fb:0f:82:a2:
                    ef:b1:8d:78:3e:aa:0b:ee:eb:cd:bd:8f:60:39:fa:
                    de:e6:cb:54:69:5b:1f:8a:1e:e3:0c:7e:1f:f8:eb:
                    95:ef:ae:b2:64:63:bc:cb:a6:f2:b2:ac:6f:23:d8:
                    98:f1:fb:38:00:00:54:cf:cb:e5:64:8f:e0:18:a9:
                    bc:db:74:56:60:35:a3:3c:d0:d3:43:47:99:1c:9c:
                    4d:f3:00:4a:d2:9f:1a:2d:52:78:68:99:6c:8c:34:
                    4e:90:4b:08:08:cf:4d:f9:35:4a:cf:10:f8:86:c0:
                    d5:f6:f5:8d:24:87:9b:f6:fc:41:be:1e:0b:68:79:
                    6e:5c:28:53:d2:77:38:19:7e:cd:0a:75:ef:7e:e3:
                    d9:3f:bd:0a:ef:bb:ee:03:ef:2a:53:dc:46:6d:97:
                    0d:f0:9e:c7:4e:86:d3:0c:90:66:c1:2b:f7:e6:7e:
                    46:d3:fb:73:c8:2d:a0:2e:53:ca:4c:5c:06:71:1e:
                    55:f5:75:44:6a:00:c3:5d:56:61:b5:1a:d7:b2:a4:
                    36:4d:0b:a5:10:04:36:8a:07:fa:9c:35:ed:4d:ff:
                    1a:b5:8b:49:18:47:b8:6d:32:0e:e9:e9:d0:96:8e:
                    3f:b2:8f:92:ff:9b:d3:5c:06:f1:ab:a8:9a:bd:8b:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:34:EE:F8:79:C0:F4:D7:E8:B6:BE:F0:21:FF:C3:E3:D7:16:6F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:48:21:0b:45:cb:86:e6:de:a0:54:cb:fc:9a:d2:6d:86:5c:
         71:a6:e3:69:9d:0a:8b:62:53:ab:76:99:f0:98:39:90:a9:d0:
         55:c3:25:51:89:93:a0:fc:96:7a:6e:f4:e0:b4:99:6b:9b:a4:
         f3:b3:32:95:b1:03:fd:38:77:f4:ee:f8:bf:49:57:a7:bf:b3:
         7a:0f:49:e5:cf:14:81:63:8a:ef:9c:89:04:9b:5b:65:9e:31:
         6c:a3:29:f7:dd:fb:34:1b:62:70:91:d0:5b:65:59:6f:27:3f:
         46:42:2d:37:44:d5:df:f1:98:44:62:72:76:72:ac:74:a5:be:
         98:b4:43:73:76:7d:6e:62:d4:f5:c7:ec:1c:08:12:7a:80:4c:
         ba:b8:aa:f5:29:2b:f0:66:8c:72:29:30:3a:25:df:86:15:64:
         58:0b:a8:ac:ab:52:20:29:52:2e:b2:b9:b6:91:e2:15:80:99:
         a2:a6:3d:bd:ae:0c:3b:a7:1d:4c:0d:ca:41:98:80:cb:a5:a8:
         a8:92:42:7d:4d:c4:e1:60:06:4b:72:76:d9:e3:ae:1f:22:62:
         5c:14:f8:07:08:ba:25:e6:66:73:96:a6:b9:17:7b:fb:2f:0f:
         ef:9c:62:34:16:8e:41:d3:b5:64:54:51:aa:9c:87:cb:62:ca:
         ae:ed:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:56 2026 by rpki-client