Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/e8e477b1-67fe-3411-82e1-4db13b33f717.roa
File:                     e8e477b1-67fe-3411-82e1-4db13b33f717.roa (raw, json)
Hash identifier:          cAIWQYB1nQXgc5ODcbc9+fvRcEODhuU4GQnEDVH2/3E=
Subject key identifier:   CD:4F:A8:ED:69:15:23:0C:0F:92:3F:00:E0:05:BB:D8:B6:A8:DB:52
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F4328584EDC91E99B6764074EAE736680
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/e8e477b1-67fe-3411-82e1-4db13b33f717.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     19331
IP address blocks:        199.195.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e9:9b:67:64:07:4e:ae:73:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=f54e1f19-87af-4443-b17c-1b3affd88f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:f3:4c:03:4f:7b:e0:04:f9:aa:8e:bd:1d:
                    a2:fc:ab:3e:b2:a1:10:8b:f4:fb:d7:06:7c:8b:e1:
                    4b:14:de:33:27:8b:2a:16:e8:d1:61:5a:7f:e4:f8:
                    f7:3c:7d:30:54:38:43:01:b2:fe:e7:b5:d3:08:d2:
                    34:30:61:a7:04:75:90:88:54:28:39:86:20:90:a5:
                    77:f7:5d:0c:b7:73:b6:b0:cf:3a:cd:69:d2:64:b6:
                    35:a4:63:aa:9d:e6:b2:b1:f1:13:73:f0:bc:91:23:
                    61:4c:b6:06:d7:fe:46:82:25:de:7b:03:db:2e:b4:
                    e1:e4:b9:e0:e9:eb:4a:68:24:48:2a:ab:4e:1d:b6:
                    0f:1a:8c:8a:6e:43:b8:31:5f:a5:4f:f4:be:94:a1:
                    f6:7f:80:23:69:19:01:f8:9b:4a:d3:ec:c0:16:d1:
                    c6:0b:0c:1c:85:4a:81:f5:75:2d:50:8c:bf:1d:42:
                    20:29:57:2c:4d:0c:16:e8:6f:3e:3e:a4:44:15:72:
                    f0:95:5c:ec:2c:21:6e:1c:53:3d:d8:c9:e7:14:51:
                    26:cf:bc:d4:1a:8b:6d:45:93:44:a3:f8:c8:70:8a:
                    65:d6:ee:c8:db:34:58:47:eb:37:5a:e3:ac:ce:0d:
                    d5:ac:e2:cf:52:79:38:41:83:97:6a:3f:46:03:29:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4F:A8:ED:69:15:23:0C:0F:92:3F:00:E0:05:BB:D8:B6:A8:DB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/e8e477b1-67fe-3411-82e1-4db13b33f717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:ca:ee:6a:36:ec:2a:97:21:99:83:ef:85:7c:d0:05:e6:
         ce:90:4d:af:f3:f0:8e:7b:85:ff:87:a9:16:4c:11:2e:fb:63:
         1e:2e:71:24:4a:e7:a1:c3:77:9f:03:29:27:4b:3b:30:fb:06:
         6b:e7:cb:44:f8:9c:74:4a:05:ba:6e:7c:45:56:43:cb:4f:a8:
         57:48:56:20:42:32:eb:ff:1a:07:e8:1f:3c:8a:fa:b8:95:f6:
         53:2d:23:3b:bb:47:57:22:6e:2c:22:6d:50:1b:30:a1:f2:e6:
         2b:35:20:11:bb:08:e1:0a:09:49:c4:bf:b0:9e:8f:66:da:0f:
         06:6e:f0:61:5d:1e:c9:dd:88:67:7f:ff:02:7d:8f:63:f7:56:
         35:4b:e9:b2:c5:8d:f6:bf:d4:42:25:cb:5f:04:d1:93:10:d0:
         9b:db:36:20:2a:da:13:9e:e2:2d:3f:01:59:de:71:2f:90:de:
         72:4a:01:e0:80:26:9b:d9:11:55:01:17:e1:ec:c7:80:0c:9d:
         d1:1b:3e:d0:75:3e:20:72:ec:26:2f:eb:e4:40:5d:15:43:b5:
         2e:96:43:5c:07:f4:b2:d5:e1:91:05:c5:28:ef:02:0c:18:48:
         63:2a:74:53:87:d1:80:91:84:1a:aa:eb:88:d6:91:53:f1:01:
         ee:ea:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:56:58 2026 by rpki-client