Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa
File:                     a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa (raw, json)
Hash identifier:          p+4FyxWXe/iD/hU9CxCVj+OUZ+GA/6zoXxYpmmRj7PM=
Subject key identifier:   68:03:99:BC:A4:D1:2D:EB:2F:0F:F9:4C:81:AD:D3:58:A2:C7:2C:54
Certificate issuer:       /CN=da2a5577-6855-4d86-a3f1-a04b562e9c06
Certificate serial:       010D0C9F4328584EBB11CD51F437A99445A02940
Authority key identifier: 48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     32248
IP address blocks:        162.250.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:cd:51:f4:37:a9:94:45:a0:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da2a5577-6855-4d86-a3f1-a04b562e9c06
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=2102e9dc-f535-4c08-8a59-d4955e6bca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:6d:a0:9a:7e:09:da:60:26:47:1a:20:47:
                    21:c9:af:40:d1:30:c7:44:f8:8a:14:0b:35:2a:2d:
                    a1:ab:ad:b9:0a:de:00:46:ca:6f:35:53:0b:67:56:
                    33:bd:ec:0b:f4:7d:8b:39:7e:5f:5a:0c:65:7b:f1:
                    0d:c7:a7:a9:00:ca:ad:96:b9:df:30:ca:2c:2b:be:
                    b3:cf:49:20:26:b8:24:a8:87:d7:a9:36:44:f7:4e:
                    9b:f2:0b:2b:b7:99:f8:dc:52:6a:2c:17:ae:61:f0:
                    e8:95:14:ee:21:91:14:32:d5:10:2d:cb:66:b0:3a:
                    70:0d:86:dc:35:54:b9:7f:7e:62:6a:90:d6:cc:15:
                    d3:3d:85:dc:c8:10:3b:6b:c2:be:1e:d3:19:ff:73:
                    4c:63:88:77:a4:3e:5d:3e:fd:6c:16:f8:12:24:7c:
                    fb:e1:14:73:ca:e1:b4:4e:b9:fe:83:b5:4a:f9:99:
                    50:5c:e8:85:b6:7e:33:33:0f:d6:6d:13:a4:7c:90:
                    c5:79:b6:5b:8c:ed:5a:76:6a:25:70:04:8f:a8:ca:
                    e1:77:cb:27:9b:92:e2:ba:ec:3a:0e:8f:9e:75:5a:
                    f4:f9:10:51:0d:83:09:8a:0a:42:71:55:e0:0a:87:
                    e5:5a:ee:7a:70:c5:f0:97:61:49:d4:e9:08:3d:75:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:03:99:BC:A4:D1:2D:EB:2F:0F:F9:4C:81:AD:D3:58:A2:C7:2C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl

            X509v3 Authority Key Identifier:
                keyid:48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:54:c5:1a:21:73:0d:b3:1c:45:11:1b:93:64:e3:6e:50:
         ae:38:6a:0c:b3:93:68:cf:93:d3:26:c8:b3:07:54:6f:25:bc:
         51:49:70:42:56:55:b3:d3:40:c8:95:83:a3:5a:34:a2:59:8d:
         95:d4:31:39:e8:f0:7a:ad:73:ad:1b:2f:e8:ee:1c:1b:fd:74:
         2a:89:fc:08:b3:4a:54:a5:e2:20:bf:f6:50:51:f2:c9:0e:f0:
         66:8d:27:a4:38:67:9a:d9:ab:f6:da:0f:b3:c5:f2:d0:af:b4:
         b6:59:2a:19:8a:63:36:bf:b8:39:7f:33:2d:19:34:73:a1:84:
         5c:45:96:2f:d7:b1:93:fd:b5:4f:8d:06:40:5c:b6:4b:a9:74:
         a0:6c:a2:90:65:e4:ea:97:83:28:27:b2:44:03:b5:95:ff:0d:
         1a:65:31:b3:30:cd:aa:d7:83:09:a2:2b:8f:16:27:0b:36:b3:
         c3:57:33:56:28:db:ee:3c:37:31:66:47:d4:06:41:bc:94:48:
         47:03:ef:be:a5:e3:87:31:0b:6e:98:aa:62:4e:d5:13:8a:72:
         86:ff:45:11:f1:e8:69:0f:95:cb:36:00:e5:24:72:07:c2:2b:
         28:8b:15:5d:d5:ad:71:2e:38:cf:60:c9:6c:48:9a:0f:4c:a9:
         51:3b:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:52 2026 by rpki-client