Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93d492e3-1ae7-3c80-96d1-c57d5bb4c5c8.roa
File:                     93d492e3-1ae7-3c80-96d1-c57d5bb4c5c8.roa (raw, json)
Hash identifier:          9d/71RIDlkN6yRZsGa3QydvAXw2pa5ni0cBX4DaMAik=
Subject key identifier:   BD:96:E2:70:AD:F3:D9:D6:3B:A6:EC:04:8D:20:59:5E:C9:E6:C6:9D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFD43B4969DF12419EBE2AC1C
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93d492e3-1ae7-3c80-96d1-c57d5bb4c5c8.roa
Signing time:             Tue 26 Aug 2025 22:56:42 +0000
ROA not before:           Tue 26 Aug 2025 22:56:42 +0000
ROA not after:            Mon 24 Nov 2025 23:56:42 +0000
asID:                     31898
IP address blocks:        192.22.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:43:b4:96:9d:f1:24:19:eb:e2:ac:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 26 22:56:42 2025 GMT
            Not After : Nov 24 23:56:42 2025 GMT
        Subject: CN=8efc3ac5-9724-425e-9cc3-b39a54e459ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:19:fd:de:0d:4b:82:d3:07:87:e2:8a:14:
                    5c:06:d4:e5:69:00:ad:fd:52:6a:4d:09:c7:93:a8:
                    af:3d:45:1c:9a:e4:f3:89:8a:d0:10:a5:c1:f1:b9:
                    4d:ea:a2:14:4f:03:57:7a:c6:3d:f3:dc:34:94:bd:
                    96:d7:cd:54:e9:ff:e6:d8:e9:64:11:33:89:ff:c2:
                    67:8a:af:26:ee:04:95:48:67:63:f4:5d:a2:c6:cf:
                    67:59:93:9f:d9:79:85:a2:8c:05:2e:30:be:d4:c9:
                    8d:3d:9a:d5:9d:33:b5:e4:57:e5:a8:78:53:84:22:
                    83:a4:ba:df:cc:22:cb:f5:46:65:18:c5:a8:22:5c:
                    72:b8:3a:b6:67:5d:88:0a:95:cd:49:be:10:73:16:
                    cf:38:28:f4:0f:35:76:51:9e:9b:dd:6d:19:53:62:
                    97:e3:68:3c:55:10:b1:17:06:ec:1a:d6:cd:05:60:
                    ca:27:71:24:df:39:03:36:eb:9c:4c:de:41:be:a8:
                    d1:fb:43:77:fb:42:1c:9d:61:10:25:99:dd:a7:13:
                    d0:82:b3:fd:f4:64:14:a1:aa:c9:e5:ae:b9:9c:f2:
                    d9:b0:a4:43:0f:8b:7d:ce:5a:59:7f:e9:17:2d:90:
                    d2:76:5e:4c:97:f3:22:a4:5b:e0:ec:8f:49:ae:ae:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:96:E2:70:AD:F3:D9:D6:3B:A6:EC:04:8D:20:59:5E:C9:E6:C6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/93d492e3-1ae7-3c80-96d1-c57d5bb4c5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.22.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8b:df:d2:dc:19:6d:c1:4e:32:b6:b8:59:c9:a9:ec:d8:7d:
         ca:3b:20:14:a8:67:6f:99:e9:b9:a8:98:67:01:92:74:45:47:
         54:04:ee:6c:6c:40:5d:32:c9:ed:66:20:a8:c7:7e:4e:ea:d7:
         84:12:1b:9d:2b:df:cf:af:99:5a:b4:88:52:89:ee:96:f0:39:
         ff:3a:aa:e9:ad:42:1a:ba:58:8e:b0:a4:a4:c0:cb:69:61:91:
         c4:b1:32:0d:ce:a5:db:0d:58:6c:9e:09:eb:8e:a6:57:89:c4:
         e4:7e:a0:7c:b0:36:f6:94:41:bb:69:5a:cf:22:b8:42:8f:02:
         58:09:1e:c8:a7:64:be:45:97:60:b6:fe:f9:da:71:97:0a:f1:
         84:50:36:69:1b:02:a7:8b:ac:c1:52:73:73:d7:c5:ae:73:d2:
         1a:0a:49:6f:85:ec:12:1a:7e:83:5f:01:32:07:61:5b:27:b8:
         aa:38:40:bb:68:20:6b:0c:37:04:46:e3:41:22:ec:16:4c:8d:
         f5:90:96:a1:58:8c:fd:14:d3:ef:29:59:fb:de:6f:63:d1:5b:
         fb:34:0b:83:e6:42:9d:59:39:b6:a8:c6:c6:08:3d:4f:2b:97:
         be:7a:ad:a2:fb:8b:98:a9:3f:b2:01:4e:89:f5:36:bc:62:ae:
         c5:22:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:28 2025 by rpki-client