Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/58fb0752-8888-3f45-8e83-4781b693e7d6.roa
File:                     58fb0752-8888-3f45-8e83-4781b693e7d6.roa (raw, json)
Hash identifier:          t/dCNTjWEGwdAYgj1ABnDDnBmzrw0OBEBz66HVKRoPs=
Subject key identifier:   5A:07:56:F6:E4:9F:0B:B9:02:85:4D:DF:E5:C2:B4:27:A8:68:2B:AD
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F4328584EDC91EA87388B98F63DA0BF00
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/58fb0752-8888-3f45-8e83-4781b693e7d6.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     19331
IP address blocks:        168.245.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ea:87:38:8b:98:f6:3d:a0:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=f1cf84a0-9dae-48e7-90db-f01ff0a5aa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:6b:22:65:fc:ca:01:11:e5:ec:d9:72:9e:
                    ca:5f:d3:96:ae:99:f5:54:1a:17:0b:3e:3c:f3:66:
                    bf:4e:85:13:de:fa:87:c4:92:de:77:74:aa:a8:c9:
                    95:d2:4a:55:90:24:14:0f:b1:19:58:58:f4:46:31:
                    25:52:30:d2:11:80:b6:3a:0e:b9:5f:ec:06:ed:9c:
                    3e:71:0d:3e:ce:d8:53:31:b6:e8:14:5b:c9:35:c5:
                    99:21:62:79:13:5b:72:20:34:11:66:35:0a:c6:19:
                    66:38:15:3d:c9:3c:1d:d8:5f:a8:1b:5b:6d:4e:78:
                    83:9e:fe:ef:a1:97:04:c4:cd:eb:c3:7a:15:f1:a9:
                    05:60:6d:0c:b0:bb:58:3c:65:f5:bf:c2:d8:9b:a5:
                    3d:eb:f3:38:a7:bc:5f:95:a0:8c:61:7e:6f:8d:ec:
                    eb:39:1f:2a:c2:8d:1c:1d:c0:ba:42:d2:ca:1d:9e:
                    74:8c:57:60:fe:44:65:34:ea:92:49:43:03:ca:f8:
                    0a:2d:7e:71:33:bc:03:b3:23:06:c0:e8:d8:4e:7d:
                    f1:6c:c2:ae:04:fd:49:c4:44:2e:b3:7b:c1:f8:8a:
                    7d:35:97:f1:c2:fc:c2:7a:d1:5a:49:47:e4:65:5a:
                    27:99:6a:bb:af:91:88:6a:b2:fe:1b:79:f8:1f:94:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:07:56:F6:E4:9F:0B:B9:02:85:4D:DF:E5:C2:B4:27:A8:68:2B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/58fb0752-8888-3f45-8e83-4781b693e7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:37:27:ee:58:66:3f:9c:2b:72:23:77:40:bd:ee:38:52:eb:
         45:1a:da:3a:05:27:94:a2:a1:17:38:cd:bc:44:52:9b:3d:e2:
         ea:8a:13:0d:2a:4c:dc:87:ff:27:a4:1c:fd:97:cb:c3:73:b5:
         0e:0b:7b:b2:ab:b3:d5:85:7a:1f:6f:e6:ef:64:66:3d:34:48:
         2a:ef:13:6d:61:45:42:54:b1:40:7d:8b:b4:cc:43:17:ad:1b:
         e5:96:48:d7:b8:3d:09:f5:ec:2c:5a:fd:ae:44:81:c5:4b:39:
         6f:31:86:21:6f:79:cd:99:fa:87:7d:37:43:8a:ac:f2:cf:ce:
         c7:f3:fa:ab:46:c0:ec:77:a8:01:69:19:17:f4:0e:c3:18:59:
         3e:17:0b:61:3e:12:5f:e4:63:b8:8d:69:c1:80:dc:da:0c:c2:
         89:fd:59:11:14:9f:b7:a9:8d:d0:a4:4d:55:fc:a6:ed:34:63:
         15:60:3d:5d:1a:32:97:9b:ed:d7:f4:4d:fd:fb:af:ff:37:3b:
         5d:8f:a8:34:4a:15:8c:ad:11:df:49:e4:8f:d5:d8:4e:21:f8:
         de:c3:1c:22:24:46:ef:c5:32:57:91:71:89:4a:05:46:14:74:
         0c:5c:4f:5f:62:58:c1:84:6b:dc:25:35:ae:7f:ee:e6:d8:64:
         dc:40:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:27:54 2026 by rpki-client