Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/484e0efb-0dbc-3475-95c8-a514a0a4ab8e.roa
File:                     484e0efb-0dbc-3475-95c8-a514a0a4ab8e.roa (raw, json)
Hash identifier:          ucC+P1es4ozhJfW5a+DE904peFohTlu4zoReVtQCnWA=
Subject key identifier:   11:68:B7:B6:CB:0C:4E:A7:89:9E:17:B5:BE:6C:C2:6D:50:FD:BD:3D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5CFD53BE93BF19064E3F95A0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/484e0efb-0dbc-3475-95c8-a514a0a4ab8e.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     7203
IP address blocks:        23.82.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:53:be:93:bf:19:06:4e:3f:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=c48bdb08-71fe-4246-b880-a7269706c9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:c7:f7:44:f6:1f:69:f4:2e:98:b0:0f:21:
                    d6:cd:e3:aa:36:d0:97:43:d7:58:a5:79:da:d6:79:
                    e5:7e:00:96:e6:51:bc:bf:f2:38:8a:89:47:a3:05:
                    11:11:01:72:4c:e0:09:6a:4e:4f:97:e7:66:b2:f9:
                    3d:4a:61:6f:5f:fb:e2:e2:cc:2c:de:97:ee:cf:6c:
                    ab:b5:7d:9f:97:66:94:e7:04:85:f3:29:97:07:47:
                    46:b3:18:43:88:2c:6e:1d:45:b0:a4:e1:ad:06:66:
                    0d:ce:f9:52:61:bb:d3:f3:b1:0a:36:2b:6f:d8:1e:
                    81:0d:c5:bb:3c:6d:d0:82:25:0c:c6:68:b7:aa:ec:
                    f5:14:99:ca:ac:08:6e:a0:d1:a3:38:68:12:9d:d0:
                    7a:6d:0f:1e:4c:11:7a:64:ee:c7:65:fd:1c:9e:e7:
                    01:c4:93:10:b8:ab:12:29:d6:f4:f2:41:aa:a5:30:
                    28:bd:60:1d:01:c3:0b:a0:6a:86:ed:05:81:3a:b8:
                    7a:aa:80:8c:16:1a:fa:ae:76:29:bf:b7:29:ce:50:
                    e9:1b:42:90:0b:c5:d9:9a:71:70:c1:3e:3c:bf:0f:
                    4a:49:cc:2b:b4:e3:fd:11:f3:e4:fa:54:e0:6b:c5:
                    81:64:fa:02:af:ab:ba:75:f0:b1:7f:45:44:79:f9:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:B7:B6:CB:0C:4E:A7:89:9E:17:B5:BE:6C:C2:6D:50:FD:BD:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/484e0efb-0dbc-3475-95c8-a514a0a4ab8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.82.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:69:b5:cf:7d:2e:4e:d7:3a:44:f9:a5:f7:c0:a5:14:ea:45:
         f5:1a:c6:c7:fa:d7:bc:8d:08:cf:c2:b9:5f:8c:07:d6:1c:01:
         1d:aa:1d:1b:3b:2c:4c:c6:f9:9f:67:3b:4f:b5:da:b8:96:87:
         84:ae:0d:72:dc:25:87:0c:53:2c:01:50:8e:a6:2a:8e:41:6b:
         b1:0e:ea:44:2a:dc:e2:b9:c4:be:6a:14:17:6b:18:13:ae:57:
         05:94:b4:1f:68:cf:62:65:26:73:22:76:61:1d:0f:7a:0c:38:
         df:a2:3c:bf:25:64:85:a9:57:2c:40:59:1d:8f:64:03:e1:08:
         4b:9d:80:8a:bb:06:4e:74:2f:88:5c:87:92:32:0d:de:ec:9c:
         05:f6:ca:61:ad:75:0d:3e:86:fb:ea:01:fa:4d:bd:c7:f7:aa:
         11:fe:0a:65:af:0f:85:92:03:7b:c7:e4:8d:f0:22:1e:ea:74:
         0b:3d:32:cf:75:d8:f3:3d:c1:4b:c8:52:55:c0:2a:4a:e7:2b:
         23:27:f1:df:08:35:8a:fe:9c:2f:22:55:50:50:3e:cd:5b:ce:
         83:5d:7a:bb:73:4c:4c:09:27:c0:73:c0:84:67:92:fb:69:80:
         c9:4e:75:c3:b9:08:ba:7c:17:d8:a2:be:9b:5d:9f:c0:ac:28:
         be:8b:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:08:45 2026 by rpki-client