Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/cfbdd5de-d953-3e5d-9915-37083c2062ba.roa
File:                     cfbdd5de-d953-3e5d-9915-37083c2062ba.roa (raw, json)
Hash identifier:          OnSNGJu2XIPrhtcVnXDMPjrBHp8p+z1tvhdwOBhe4CM=
Subject key identifier:   0E:42:AE:28:78:7B:5C:48:75:E5:9D:67:68:84:2D:A4:31:C0:20:90
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584F5A33072EA58C8782E9DDD0F0
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/cfbdd5de-d953-3e5d-9915-37083c2062ba.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     54997
IP address blocks:        192.5.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:07:2e:a5:8c:87:82:e9:dd:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=c8a073d0-0e56-4cb8-a041-f08b04abaa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:6d:61:c5:73:8b:34:b3:39:2a:54:80:1f:
                    e7:45:39:f9:f4:10:14:16:ea:5c:53:61:f1:a9:b9:
                    bb:45:8e:da:a3:f0:3f:ba:3a:ef:bd:1b:83:56:1c:
                    a0:41:80:1c:5a:82:59:f8:e6:6b:de:9b:e4:a1:ae:
                    a9:8b:cb:82:91:be:84:f0:96:9b:28:0b:98:6d:47:
                    7a:9c:cf:63:1f:e4:d0:a7:76:bd:8c:fa:d4:19:14:
                    44:f6:ba:c8:b5:0a:2e:32:ea:ba:ad:6d:d1:17:55:
                    05:0c:3c:10:f8:ad:7e:66:13:00:fc:44:a5:66:0c:
                    f5:89:c4:80:6a:67:43:7c:c0:ed:df:fd:2c:17:df:
                    49:39:34:e6:49:f5:32:20:3b:9b:d3:43:6a:5e:65:
                    73:82:46:d6:fb:b0:19:47:ee:73:59:4d:10:ca:0b:
                    bb:10:84:1f:80:00:38:a5:98:92:10:69:a1:f4:42:
                    3f:4e:ed:0a:80:57:5f:b2:d5:4b:67:b4:0d:d1:24:
                    73:5a:73:85:33:58:e2:fc:e5:0c:67:d7:39:a2:42:
                    29:c4:e1:78:2f:d9:09:7d:63:bc:f7:b2:c6:5f:b6:
                    5e:ec:31:0c:7e:71:ff:a9:f8:63:cb:38:6f:8b:3e:
                    1d:4d:0a:a5:53:a9:13:40:fc:18:92:88:2e:77:14:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:42:AE:28:78:7B:5C:48:75:E5:9D:67:68:84:2D:A4:31:C0:20:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/cfbdd5de-d953-3e5d-9915-37083c2062ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:93:26:1d:27:cb:bc:0e:3c:28:9f:96:e6:03:58:a1:bf:
         a3:70:27:7f:29:0c:c2:d5:5c:23:21:bb:e3:86:db:2a:fe:8c:
         bd:19:79:06:77:4b:50:0a:53:26:b6:17:12:35:d7:95:d2:2f:
         8f:7a:19:28:9e:04:bc:9d:ed:fd:bb:2c:bd:0d:99:71:fd:04:
         43:ed:59:a9:f1:c4:17:6e:c4:10:76:31:b6:1f:fc:dd:3e:be:
         a2:3d:a6:c3:f7:90:5e:e1:bd:8a:91:1e:dc:10:4e:a6:c6:80:
         7a:06:77:bb:94:17:99:fc:eb:0f:7b:c0:4d:89:93:eb:b4:f5:
         fa:ae:7b:f0:63:63:76:3e:78:7e:be:f1:68:86:04:50:ca:f5:
         b6:af:54:3b:fa:3a:00:62:46:8c:06:f9:dd:b7:2a:55:b8:d8:
         c4:9c:9c:c1:48:1f:56:d6:6d:49:35:e7:44:d3:b1:bf:4e:9d:
         2b:0d:40:39:65:35:b3:e8:d2:ae:7e:20:1f:16:f1:4f:09:e7:
         e7:43:5f:cd:4d:8f:6f:00:15:d5:30:8b:76:b1:6e:1c:c9:12:
         53:c1:48:6c:ae:f1:04:9a:14:bb:95:bc:cf:4b:34:b7:50:60:
         0e:50:d6:3c:3d:e1:46:97:93:a1:12:a7:c8:30:2b:c5:77:8a:
         87:e1:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:02:38 2026 by rpki-client