Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/625d221a-10d5-352f-bace-782df0f15722.roa
File:                     625d221a-10d5-352f-bace-782df0f15722.roa (raw, json)
Hash identifier:          ktmtQpqS4tRFrQZQnC+l0lXspQ25IVGtQdvI9qGGMBk=
Subject key identifier:   76:0C:38:1E:BA:32:DA:2B:FB:21:0B:6F:0F:6F:CD:49:AF:B4:15:C4
Certificate issuer:       /CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
Certificate serial:       010D0C9F4328584F71ED99CCBFA89F586D54A640
Authority key identifier: CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/625d221a-10d5-352f-bace-782df0f15722.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     21681
IP address blocks:        198.145.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:99:cc:bf:a8:9f:58:6d:54:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bc9f14-b382-49d7-83c7-57ffd2164eea
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=853aec2c-c5be-4bc0-9922-6df391be3737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:09:40:16:38:a2:c2:ad:3c:b2:8a:64:ef:
                    b1:53:1a:de:a9:92:26:62:a7:74:d7:7a:de:67:12:
                    ec:37:13:14:d3:0c:d5:3c:69:fd:9d:1e:68:a9:7d:
                    07:60:b1:a5:37:c7:d2:6d:8d:b1:f0:26:29:00:34:
                    04:c3:f8:52:56:2c:42:3c:bc:3b:c4:15:4a:6c:4d:
                    57:64:47:d7:54:a9:48:28:5f:b8:89:e2:ea:a6:fc:
                    9b:46:73:07:ec:64:23:3c:62:8e:84:04:ce:a5:02:
                    21:8b:c8:30:4b:10:05:be:c3:6f:3b:0e:bd:b3:a0:
                    93:b0:d5:24:c4:05:a4:68:6a:43:9e:5e:42:bb:0e:
                    08:fd:9b:0f:ed:67:71:39:ca:66:ff:75:1d:fd:ee:
                    f3:e3:fe:74:db:84:5a:55:76:1c:ab:a0:d8:57:83:
                    2d:35:6c:1b:89:13:ac:e9:90:ea:5f:10:05:32:0e:
                    5a:02:11:77:28:13:ec:51:ed:8e:40:c4:4d:c8:fb:
                    be:19:85:59:c7:2e:d4:8d:e2:01:b2:a5:ae:ea:2a:
                    fa:7e:83:e8:66:c9:2e:bf:0e:82:8e:71:5c:82:c5:
                    c6:4c:51:04:dc:15:bd:d0:bf:c7:78:ad:c2:d6:f7:
                    80:dd:ad:d9:99:03:a9:aa:66:76:8c:fe:76:bb:68:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0C:38:1E:BA:32:DA:2B:FB:21:0B:6F:0F:6F:CD:49:AF:B4:15:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/625d221a-10d5-352f-bace-782df0f15722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea/47bc9f14-b382-49d7-83c7-57ffd2164eea.crl

            X509v3 Authority Key Identifier:
                keyid:CB:93:C8:F7:73:55:9C:E8:AE:6B:79:E3:8E:7E:B5:DA:2A:8C:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/47bc9f14-b382-49d7-83c7-57ffd2164eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:88:1c:49:ba:22:f9:d6:c0:42:f0:19:ac:e6:db:b7:43:de:
         b8:c3:45:4e:46:71:03:50:ea:fb:ce:d8:3a:c8:e4:b1:3c:40:
         46:21:06:60:55:53:2b:27:f0:f1:4b:0f:f9:c1:f0:26:48:e9:
         28:11:ad:be:8a:45:d3:14:96:f7:b8:93:e6:04:1b:74:ea:e1:
         43:8f:02:7f:60:73:29:af:2a:d8:6a:54:1a:21:f1:7c:b8:0f:
         04:c2:a3:87:d6:a1:b1:dc:c2:4b:45:89:fe:71:da:19:5f:6b:
         98:2f:18:00:db:ca:9e:d7:c3:f1:0f:41:63:3d:e8:c6:07:86:
         40:48:9c:88:3a:7b:4a:ad:15:45:7b:b3:ee:b6:a0:e5:6a:d2:
         85:05:d1:38:d8:b6:31:24:d1:9c:fa:5c:35:5e:95:cd:ba:ed:
         0d:54:c8:72:6a:7d:d5:24:c5:2a:81:b6:e7:8b:f9:a8:d9:3f:
         fb:12:0c:74:ff:6f:49:7e:5b:01:c3:a6:5a:5f:68:8e:f2:ed:
         01:28:d2:20:fa:c7:19:f7:23:ca:ee:21:fd:b4:1d:67:d7:be:
         ea:4e:ae:c0:76:78:c4:8f:65:fa:e6:b8:88:70:05:e6:92:ac:
         25:98:1a:6a:13:a2:aa:fb:96:19:ab:16:c1:73:a3:ea:f1:ce:
         8b:45:ec:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:42:01 2026 by rpki-client