Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/fcdd057d-d79e-3d75-92f0-c20627f77705.roa
File:                     fcdd057d-d79e-3d75-92f0-c20627f77705.roa (raw, json)
Hash identifier:          QQW1kesZoIFO08UrEFjlqt4Hxn9oXLr5wR1vLlDvm3o=
Subject key identifier:   5E:E1:F9:2B:29:2F:4F:DC:0A:47:AD:04:22:32:B7:1B:F6:8A:6E:59
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584F90A32A8DD0D39ECDEDF11680
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/fcdd057d-d79e-3d75-92f0-c20627f77705.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     395117
IP address blocks:        47.19.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:2a:8d:d0:d3:9e:cd:ed:f1:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=eec31388-0e4b-41a8-9478-1bd01c1b6f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:ec:c4:c1:98:c6:16:7d:e6:90:d2:06:e1:
                    ad:43:7a:4c:e3:b8:92:8c:9b:50:1e:6b:24:06:9f:
                    d1:ca:1c:98:e1:24:c8:bf:9f:32:21:c5:7e:57:b1:
                    3f:0f:dd:cd:3c:72:c4:f0:86:f9:a8:9f:e2:fe:97:
                    26:f3:44:8d:90:69:c4:a6:d6:e0:ea:26:1d:44:5e:
                    39:76:54:fa:14:ad:25:65:60:eb:27:a5:8a:5a:a3:
                    93:1b:8f:88:6c:5f:75:15:2b:d0:45:fd:3d:af:3f:
                    58:8f:b0:6b:e2:98:85:ba:b0:81:67:08:73:4d:f3:
                    b7:9a:99:47:22:c2:4d:c7:42:d7:50:65:d2:be:b1:
                    34:6c:98:e0:4d:42:97:65:2e:5d:c4:ce:d1:fe:4a:
                    31:fa:00:bb:ce:f3:7d:1e:c7:51:08:9a:e0:94:1c:
                    3a:2f:56:a1:48:53:1b:16:10:09:80:b5:9d:ed:0a:
                    15:67:34:7e:10:2a:8c:8d:3c:45:f7:dc:de:99:be:
                    d4:0e:43:44:c2:5c:3c:37:66:c7:64:c8:58:49:ed:
                    41:9b:4d:ac:85:29:51:61:3d:19:b4:16:5e:f5:13:
                    d6:b5:7b:5e:e6:17:a1:dc:96:fc:2a:9c:85:09:30:
                    c2:68:ec:8a:1d:fe:cc:a9:29:e1:6b:3e:47:1d:c0:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:F9:2B:29:2F:4F:DC:0A:47:AD:04:22:32:B7:1B:F6:8A:6E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/fcdd057d-d79e-3d75-92f0-c20627f77705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:23:05:d3:56:6c:29:0a:36:49:20:7b:02:40:2a:f6:90:e4:
         0f:6f:f1:3f:ee:37:e2:b1:a0:64:72:d2:a2:16:33:da:02:e2:
         1d:78:74:d3:23:62:66:c4:19:74:20:c9:b6:8d:0a:79:b1:92:
         27:29:66:36:8b:38:02:a0:b2:cb:b6:0b:69:04:6a:13:a9:d0:
         57:e8:a8:82:e6:ff:14:42:56:e6:79:8e:6a:6d:ed:a9:8e:c5:
         17:ea:bf:5e:d5:c4:4f:31:0e:9f:09:33:83:a7:ad:05:13:6a:
         31:6e:6b:c9:d0:56:a5:ef:90:c1:9e:1f:fd:68:a4:b4:fd:86:
         5e:cd:f1:d0:55:f4:af:1e:f2:76:39:e3:cf:d3:41:a5:67:eb:
         d9:52:66:3d:16:22:66:4f:d4:43:88:9b:7f:10:67:8b:bf:73:
         a0:aa:5c:79:6f:79:3d:62:15:3a:e4:83:c8:f6:58:26:94:29:
         ec:de:cf:0b:a3:d5:4b:9f:55:ee:3f:e7:31:5e:4a:5f:29:91:
         d1:23:3d:c2:c9:f8:3b:e0:d2:46:73:5e:22:a9:12:26:13:e1:
         e9:63:e9:c8:ad:25:02:a1:a3:68:d6:52:9a:34:87:36:6a:c9:
         c0:8a:9d:19:e0:0f:5f:99:d7:24:e9:e6:fa:f7:48:26:14:6f:
         bd:99:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:46:39 2026 by rpki-client