Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa
File:                     9b5be190-61be-3524-9a29-a7fac18f508a.roa (raw, json)
Hash identifier:          K+Sv0+5psnEL4IgKYT7Y9E5m7R6HYe//5NKIrersoQQ=
Subject key identifier:   3C:3B:7E:D9:EE:AA:F4:4F:66:B1:78:65:2C:A7:C2:EC:07:F0:38:B3
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584F82ADB3EFA60ED775EEE0A740
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     212384
IP address blocks:        199.48.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b3:ef:a6:0e:d7:75:ee:e0:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=dc90d37d-c536-44d3-9d0c-ae50259bbc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:02:e7:f4:27:1d:ef:c0:ad:5a:d3:77:07:
                    fb:ab:32:34:fb:8c:88:53:05:dd:59:b5:39:41:ff:
                    9e:3e:4d:be:cf:3f:5b:32:19:e6:ff:9a:a5:1f:64:
                    28:2e:78:91:88:99:19:37:27:12:dd:3a:23:17:fb:
                    9d:b7:bc:5b:16:16:d8:f0:85:6d:91:a5:e2:1f:00:
                    8b:60:bb:4a:57:ef:50:54:8a:73:ae:31:d5:1f:5c:
                    aa:e5:54:b6:bf:8a:3e:9e:4c:bc:dc:8a:63:41:b7:
                    c2:d1:30:4c:92:ea:b1:e0:f7:b0:1b:38:da:a0:7f:
                    c3:a0:2a:4a:f9:20:22:2f:e6:67:87:8e:18:ea:e0:
                    5b:fc:f7:30:0c:96:68:cf:09:39:ab:bc:14:37:22:
                    0e:21:96:2a:e5:e3:2f:68:ae:76:89:77:ba:b1:9a:
                    5a:5c:23:5c:4c:95:2a:53:d1:05:6f:5a:28:68:d8:
                    2f:1a:c5:90:f5:d9:50:c5:ff:0f:84:f8:cf:ab:49:
                    00:c6:bc:a7:fe:57:6c:b0:a1:a1:03:1b:d4:a4:b6:
                    be:37:1d:22:e6:20:ab:ab:c3:48:bd:11:8a:71:d8:
                    92:b7:97:d3:8b:ad:a7:a6:5e:8c:e8:ea:b2:f0:2b:
                    fa:3b:49:13:d3:12:6b:a0:63:0f:93:99:01:4a:33:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:7E:D9:EE:AA:F4:4F:66:B1:78:65:2C:A7:C2:EC:07:F0:38:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/9b5be190-61be-3524-9a29-a7fac18f508a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:67:17:de:15:e1:fb:14:3d:be:0c:68:29:a1:fc:75:5d:3b:
         c3:03:89:dd:08:ea:61:73:9b:eb:82:fd:a0:aa:7a:dd:14:8a:
         7e:36:1f:61:b3:07:42:3d:7d:87:37:1d:7c:72:37:64:56:c6:
         9b:a5:f4:65:1f:f1:d0:02:d3:31:1f:25:1d:90:23:c1:ba:ed:
         8b:90:3c:d4:f1:70:4d:60:21:f5:39:bc:33:6a:39:f2:54:e6:
         4c:88:df:c1:51:ad:e4:6d:a3:fa:eb:a5:cd:7d:02:10:ec:73:
         c5:7b:55:2e:d2:b6:3c:3a:6c:c1:b5:5c:42:cf:2d:6e:cb:50:
         df:98:2e:56:6b:12:f5:44:4e:63:d5:d1:d4:22:35:6d:49:49:
         86:68:9d:d6:9b:fe:3b:c7:b1:0f:68:29:5a:30:da:ba:9d:44:
         dd:20:99:d3:6d:12:44:28:7e:9c:8f:b0:e6:7d:1f:d7:70:a7:
         91:53:ef:66:08:ad:17:f9:de:0e:08:ad:d9:b2:7e:70:1e:bd:
         fe:a9:7f:b9:2d:4a:15:c9:00:4b:00:bf:a3:ea:ff:ce:5f:ed:
         11:1f:d7:88:0f:0e:15:d2:15:da:b8:ef:1d:65:84:5e:e0:91:
         36:1d:63:d0:70:11:09:75:09:56:db:de:48:f5:28:89:65:93:
         d9:d1:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:24:13 2026 by rpki-client