Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa
File:                     af5b6246-c953-3c3b-93c3-790f63471378.roa (raw, json)
Hash identifier:          iJg/DoxkKg7SsaAKBpSf4CcwVRNF3Q13GIZbVngsEtA=
Subject key identifier:   9B:F7:64:22:D5:EE:50:EC:1D:2A:C1:B0:BA:50:54:55:51:AA:91:2D
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584EA79A65439E36B365A7EA8C00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14555
IP address blocks:        198.23.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:65:43:9e:36:b3:65:a7:ea:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6e4fd766-9911-4843-8994-4d5a6219fbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:dd:d4:57:e8:e1:67:1c:6a:4a:9e:f3:96:
                    ae:73:87:8e:25:3d:55:03:05:cd:99:93:b2:92:fa:
                    48:4e:31:17:2a:b1:5c:40:c5:b2:b3:dc:8c:d3:67:
                    d1:b7:bd:39:de:96:13:ed:b1:25:c9:74:40:20:9d:
                    d2:85:27:09:7d:2c:da:44:98:b1:e0:50:61:13:1b:
                    4a:e4:ad:e8:f5:d5:08:0c:22:32:08:14:61:89:4a:
                    44:a3:48:fb:a8:2c:2c:7e:45:88:5d:51:2e:f2:38:
                    d2:78:b8:1b:bc:ee:f0:e4:17:36:26:c5:00:88:83:
                    fc:11:96:20:61:ad:e3:5d:eb:8c:f0:c1:4f:b7:eb:
                    fb:5e:76:0d:60:7a:48:4b:75:df:26:ea:df:19:f5:
                    cf:a8:33:fe:f3:8c:87:37:32:41:57:ab:15:72:26:
                    a4:77:5d:1e:a9:e1:e0:05:f3:28:3c:e8:b9:d6:45:
                    10:7a:89:c5:a2:46:ab:7a:d2:86:fc:69:66:90:07:
                    0a:f0:88:de:d3:c3:e8:77:a1:b2:fe:40:67:db:02:
                    2f:d0:d3:c0:5e:5d:0a:51:2c:3d:7d:d2:75:ea:ed:
                    37:f9:33:ad:92:a7:76:b0:56:f6:b9:a5:bf:c8:cc:
                    84:81:1a:96:e8:82:b4:84:f8:60:c9:4c:54:8e:42:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F7:64:22:D5:EE:50:EC:1D:2A:C1:B0:BA:50:54:55:51:AA:91:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:83:68:f9:af:7a:bb:93:d5:15:0a:87:d5:88:99:61:30:
         0a:26:7a:b1:0f:b0:af:c7:b5:97:9a:14:bd:19:b9:f9:33:3f:
         1a:b5:86:6b:40:e1:78:3b:aa:a4:a4:51:a2:7e:24:cd:2f:81:
         c3:af:65:19:cd:68:e8:24:e9:f0:ff:f0:31:8b:15:f8:ff:83:
         7e:ca:c0:b2:51:36:99:40:99:4a:bb:ba:f6:da:fd:d8:fd:2f:
         df:20:bd:69:63:57:c9:52:34:e6:f1:48:f1:6b:8d:66:4a:27:
         e8:99:d9:99:ee:63:d6:14:cd:cc:27:5d:bb:79:7f:41:18:ef:
         36:9b:d4:ba:0d:35:cd:97:2f:fd:fe:fb:b9:d4:d8:95:97:08:
         2c:c3:c1:e0:27:56:2e:60:57:71:8d:26:90:4d:65:17:4d:cb:
         d0:a9:17:ab:06:ac:32:46:61:92:60:2a:e9:ef:83:7d:8a:3c:
         e9:2c:39:f5:5a:8b:12:80:46:af:5f:23:f2:c4:6b:b5:ec:18:
         f6:d8:79:97:ee:53:46:dc:3c:15:89:72:06:92:41:7b:9f:79:
         d6:69:f2:a0:69:fe:d3:47:c2:46:51:82:33:03:44:b1:97:f3:
         60:1d:d4:8c:ac:e3:3d:5c:ee:a8:da:9b:89:f6:63:04:bb:82:
         4b:f5:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:24:02 2026 by rpki-client