Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
File:                     23aa5ada-e8c6-3774-8704-d313c1478c4a.roa (raw, json)
Hash identifier:          WpSTN2gBpLx5Jy62xUPKsKd5SiZWmbApDDZr4gOzU8Y=
Subject key identifier:   A8:36:EA:7D:98:73:27:A5:DD:92:0B:55:C9:AB:72:02:35:A9:05:AE
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F4328584F7E7DAF961BB830C5FE8503C0
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     19331
IP address blocks:        192.199.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:af:96:1b:b8:30:c5:fe:85:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=a31dbf8a-0544-434b-8588-6f5cb348b4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:59:b5:b9:07:6c:a2:2e:88:78:e9:64:13:
                    ef:70:2e:27:f3:9c:90:65:61:ba:ef:61:f9:3f:93:
                    53:29:15:ba:2f:67:fa:ce:42:dd:54:2a:3c:cc:6b:
                    07:08:f7:93:eb:74:27:dc:be:59:83:01:01:f0:f6:
                    57:d5:c2:ed:d6:77:ec:e7:d6:b4:aa:d8:43:fb:e1:
                    9d:f6:87:ae:ec:97:59:80:85:23:54:e5:2b:7f:34:
                    e9:d5:ec:bc:02:27:9a:00:21:ea:32:94:5e:53:46:
                    ad:a7:a6:85:4d:0f:64:ab:6b:ee:77:26:07:b4:b9:
                    18:4c:87:58:30:fa:1e:44:94:4a:6d:6e:fb:9a:77:
                    56:26:a5:a2:4d:4f:44:e7:00:05:86:2e:d4:a4:3f:
                    9e:8f:c3:c9:17:3d:a7:db:24:b9:19:46:94:1d:5f:
                    92:3b:ba:0b:0d:96:7e:41:2b:57:06:d9:69:23:b0:
                    2f:55:2b:67:5e:61:74:c2:74:b1:1d:fc:3e:2e:49:
                    94:b5:48:fa:8c:6a:e3:9b:29:0d:bb:48:de:1c:bc:
                    cd:49:0e:0f:13:52:61:40:db:81:52:15:d1:0b:69:
                    77:26:74:1b:fc:22:07:79:8a:c1:ad:4b:a4:44:51:
                    75:68:0e:06:59:44:b2:cb:1b:71:d8:82:f4:e8:73:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:EA:7D:98:73:27:A5:DD:92:0B:55:C9:AB:72:02:35:A9:05:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.199.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:18:b8:d6:e3:80:81:23:8d:7a:d4:18:89:b7:7d:fc:f8:0c:
         69:80:4b:3b:9c:4d:c6:04:35:ab:82:77:c8:49:48:03:56:cf:
         46:ea:25:11:45:cf:7a:0d:34:e7:f1:fa:98:1f:db:29:13:31:
         1a:e7:60:ff:2c:cf:fe:ef:74:97:d2:9f:f4:5f:8a:d7:78:b5:
         ad:da:05:5e:c1:53:ef:a2:e6:62:cf:60:33:b3:17:e8:bf:66:
         fb:87:4c:a3:c3:a7:16:50:d9:da:96:87:40:e8:bd:84:0e:9e:
         d7:46:8b:d5:03:0e:b2:6e:bf:28:d4:7f:b6:a1:36:e9:f0:50:
         60:30:70:c6:eb:88:d8:be:e6:bd:79:08:17:a5:b4:7f:a0:72:
         63:fb:4d:0d:2c:53:db:8f:0f:29:75:13:f9:52:63:a0:c3:15:
         fd:dd:d3:47:f5:ad:f5:a1:35:94:ce:8a:b0:08:ad:3d:5b:0d:
         f5:3d:2e:ad:13:19:35:73:3c:73:33:13:f4:0e:4e:8f:83:13:
         7f:94:c5:b0:37:80:e3:ce:0f:d4:25:cb:48:cb:d8:19:b4:25:
         4b:eb:19:49:f8:ed:88:e7:d9:bd:24:6f:e0:03:9c:2f:27:e9:
         61:fe:19:e9:b4:15:38:31:af:88:92:1f:ea:d0:cb:58:a3:5b:
         e9:17:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:38 2026 by rpki-client