Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a48372dc-e476-3a39-9f00-3c66d7385fbc.roa
File:                     a48372dc-e476-3a39-9f00-3c66d7385fbc.roa (raw, json)
Hash identifier:          hEa6VAvhZ/7Rt6IwZ2ps70eHrI+OT8D0w3V68DuLuYY=
Subject key identifier:   6F:8E:4B:47:E3:56:74:BC:F9:0A:9E:CC:3F:D1:EA:6A:53:12:73:23
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584F0E0BF79DD889B0C8282C0958
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a48372dc-e476-3a39-9f00-3c66d7385fbc.roa
Signing time:             Thu 03 Sep 2026 18:20:53 +0000
ROA not before:           Thu 03 Sep 2026 18:20:53 +0000
ROA not after:            Wed 02 Dec 2026 19:20:53 +0000
asID:                     402265
IP address blocks:        204.19.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:0b:f7:9d:d8:89:b0:c8:28:2c:09:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Sep  3 18:20:53 2026 GMT
            Not After : Dec  2 19:20:53 2026 GMT
        Subject: CN=19ce4300-5247-47af-a55c-bf04f7b2c0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:c9:30:58:03:13:87:8b:9d:30:e1:1c:c1:
                    aa:6a:42:eb:93:4e:18:b6:14:9e:f8:df:a5:0d:11:
                    85:af:63:ed:19:07:7c:a1:23:4c:23:c7:b5:cb:93:
                    f1:8b:e2:a7:f3:0f:0c:d4:74:93:c5:0e:41:6f:e0:
                    cf:ca:d9:ee:8f:ec:fd:8c:67:6e:6f:f4:56:9c:c8:
                    53:ce:f1:69:3a:7b:b2:55:e3:f5:47:49:18:da:87:
                    1c:ff:4d:7d:16:49:9b:b4:de:11:70:38:28:a8:54:
                    4f:d7:d4:f0:01:e1:f5:67:8c:d0:0b:67:f8:7a:91:
                    7d:a0:98:a8:e1:ad:e1:ef:44:27:d1:50:ef:c2:f8:
                    2a:08:a4:80:b0:23:7a:30:70:36:35:fe:37:38:f2:
                    27:22:9a:14:68:f4:5c:aa:ea:83:16:0b:14:26:9d:
                    c8:c8:61:fd:30:71:3c:eb:02:e7:be:59:61:e8:e6:
                    a6:e0:fe:d8:79:f8:09:7b:54:78:44:bb:3c:cc:1f:
                    5f:d1:f3:ce:9f:c8:43:3e:0e:5d:4a:09:67:4a:be:
                    8d:d6:14:b5:54:6a:e0:55:57:85:67:14:c7:34:b0:
                    bc:d1:fd:bb:33:4e:ae:e2:31:1c:40:62:78:9a:6d:
                    1f:20:33:fd:96:cd:1c:99:1f:89:22:22:7c:c9:38:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8E:4B:47:E3:56:74:BC:F9:0A:9E:CC:3F:D1:EA:6A:53:12:73:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a48372dc-e476-3a39-9f00-3c66d7385fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:5e:49:3d:ba:c7:59:7d:ac:15:92:23:23:21:0f:bb:a4:
         28:d2:12:91:0f:3a:02:ad:51:bb:02:d8:f5:c8:6b:80:74:0d:
         fe:77:b0:fa:ce:75:a7:f0:e6:e6:c5:29:0b:27:50:3a:5a:1d:
         49:a0:9a:2b:55:55:5c:0b:41:ca:69:61:49:00:0f:47:98:10:
         31:96:67:ce:69:27:ac:87:d9:a3:02:f4:51:44:b9:d9:54:d0:
         d4:b4:51:7c:44:30:f7:fa:bd:d2:38:e9:8a:8b:4c:8c:2a:21:
         3f:c0:f9:1b:4f:a5:de:95:09:d3:cf:4d:90:a6:e8:53:ed:12:
         ef:03:99:3d:d1:ed:7e:d4:41:a8:39:f0:0d:3f:3d:2d:d0:3d:
         b2:a5:b5:44:18:d6:90:24:2d:d2:57:5b:07:7d:85:f8:28:75:
         74:6a:74:90:d0:4b:d1:c6:cd:c7:08:d9:04:dd:99:64:fe:4b:
         69:2a:3e:96:95:5b:0e:e4:44:ea:37:76:47:41:86:e5:16:43:
         a9:f1:9f:0c:0f:09:d0:af:6c:30:d8:93:0c:54:dd:cc:e0:32:
         38:d1:4e:95:f1:95:73:87:b1:26:8d:86:ab:64:4f:12:cd:c6:
         75:6a:cd:41:2a:3a:cf:f9:fa:54:84:60:ab:da:5b:fb:f5:eb:
         24:6d:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:26 2026 by rpki-client