Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/4c663947-cdb4-31f7-9ec5-f6133eeee712.roa
File:                     4c663947-cdb4-31f7-9ec5-f6133eeee712.roa (raw, json)
Hash identifier:          mB9G7V/ILuXs8vqy3owE/0+Y7CvwCCHSCcNiIfKgIhA=
Subject key identifier:   94:C6:01:1F:A2:E9:C9:F6:48:E2:F8:31:5D:E5:AB:96:D3:F9:8D:FA
Certificate issuer:       /CN=48376997-5b17-4e52-923f-f46bcbd7b94e
Certificate serial:       010D0C9F4328584F4975630DDFFC97FC3F49B900
Authority key identifier: E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/4c663947-cdb4-31f7-9ec5-f6133eeee712.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394971
IP address blocks:        192.136.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:63:0d:df:fc:97:fc:3f:49:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48376997-5b17-4e52-923f-f46bcbd7b94e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2caca19f-1cfb-4ad8-a98a-051ebb8c6b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:a4:ab:2f:9c:73:d9:24:96:f1:f5:26:46:
                    e9:81:8a:90:08:b4:35:7d:f8:54:f9:08:ab:c2:77:
                    0f:85:c2:1b:ca:5e:c7:8a:31:79:1c:c5:06:90:7c:
                    ce:51:c9:9a:65:3d:40:39:96:f2:21:8e:5b:cf:e5:
                    45:38:1b:8a:de:32:7d:d8:ad:63:24:36:74:9b:dc:
                    05:56:ce:b8:0a:9a:d6:34:19:f5:02:12:64:08:bf:
                    cd:49:a7:06:af:f8:80:03:e7:30:f7:da:55:4a:27:
                    f1:7a:0c:5c:a0:22:a4:01:5d:82:13:86:7b:da:9a:
                    a8:89:cb:71:c0:93:29:d7:47:fd:08:77:83:6d:3d:
                    68:3d:6f:e1:a2:18:57:d0:df:c5:ad:11:43:cb:dd:
                    a7:ab:08:74:48:15:98:01:3b:73:fa:26:84:af:19:
                    f9:d3:2b:99:43:77:49:5b:48:77:89:e2:fe:d5:1e:
                    0b:2f:ac:5c:cb:e2:a8:93:e3:bd:8b:b8:10:29:81:
                    1d:cb:55:9e:00:63:45:70:9d:35:c5:10:df:87:ed:
                    b6:34:c8:f3:c4:ed:ba:8f:09:84:f7:52:35:10:3e:
                    9e:dd:b9:68:d7:48:3d:2a:f7:fa:db:e2:e7:f3:5f:
                    28:b5:df:54:f1:97:d4:f4:8b:1f:45:27:c3:01:9b:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:01:1F:A2:E9:C9:F6:48:E2:F8:31:5D:E5:AB:96:D3:F9:8D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/4c663947-cdb4-31f7-9ec5-f6133eeee712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9f:1c:ed:25:13:9f:53:fc:d9:9f:30:cd:b5:80:d2:38:97:
         7b:c6:ce:62:4c:3e:b9:f9:fb:10:57:82:20:c4:8b:fd:db:19:
         44:1a:2e:91:51:bc:76:64:9e:f4:cc:6d:f4:e7:d7:6d:b9:7b:
         ac:1d:fa:97:94:e8:6f:4d:84:bf:b4:7e:84:b5:b9:31:0a:84:
         cd:13:bc:80:bc:f7:9e:6e:14:c0:7e:5a:44:38:69:40:e6:86:
         fc:b6:33:b0:72:f3:fe:5d:4e:50:69:c1:46:16:a3:69:67:f4:
         ff:a5:81:8b:c2:f0:7f:ac:ae:63:e4:12:27:fc:77:2d:02:8d:
         05:6e:c3:b8:82:0b:57:75:26:46:14:eb:20:25:36:09:98:bd:
         57:8b:77:a4:e0:f3:2d:48:b0:a2:c3:ad:ae:72:ba:e6:87:6a:
         3a:61:1d:91:4a:79:7c:5c:d2:82:35:c5:bf:e1:a4:e5:cf:91:
         6d:6e:00:72:70:78:a0:c0:81:22:80:41:e4:7d:f3:ec:76:1b:
         90:25:79:0f:67:2d:f5:3c:67:e6:8d:05:b6:76:e8:5e:75:84:
         7a:c7:8f:91:81:6d:75:9d:72:83:23:8a:2b:0c:61:a7:53:cb:
         1b:b3:18:ee:96:e9:65:52:68:af:f9:2b:76:62:01:41:8a:8c:
         1e:2e:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:04:14 2026 by rpki-client