Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5e98b96a-a4de-39e6-a33b-dca30cb3af56.roa
File:                     5e98b96a-a4de-39e6-a33b-dca30cb3af56.roa (raw, json)
Hash identifier:          Q/i4tufMTfFLjooP6ojKqJnHgF7MedoRUT1Qwrsqmlc=
Subject key identifier:   C0:F1:D8:51:8C:0F:7C:86:6C:EB:C2:71:88:18:4B:B5:C4:B1:66:01
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5B97FC6F1872CADF29D05600
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5e98b96a-a4de-39e6-a33b-dca30cb3af56.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     393886
IP address blocks:        23.19.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fc:6f:18:72:ca:df:29:d0:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=a7790882-1d67-4db6-9ee7-5144f3b4bf12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:1b:02:ec:c5:3b:b4:c0:a0:0e:16:98:8b:
                    c5:ac:b1:e3:e9:c2:e1:0b:79:fb:0c:8a:bf:ee:42:
                    c9:01:0f:a8:a7:3f:61:0c:ed:ae:0b:a1:c6:2e:2d:
                    3d:50:47:20:b8:c7:f5:1f:a3:e1:63:98:23:7d:f6:
                    df:45:8d:84:58:45:1c:5f:a9:90:35:0e:2e:1e:95:
                    b2:3b:95:51:4e:fd:f8:9d:25:0d:ab:a4:ff:ac:38:
                    53:df:4a:b0:25:75:4a:ba:da:50:92:6a:e3:ea:6a:
                    56:15:2a:84:da:a0:94:d3:50:bb:11:a2:99:1f:13:
                    e7:72:10:9d:c1:25:b9:b1:e9:57:15:01:d4:8c:e8:
                    52:35:3b:9e:b9:14:57:19:37:90:19:34:70:5f:c7:
                    08:7b:24:c5:f8:97:f1:d8:c8:12:b4:63:e2:7b:45:
                    93:30:27:91:ae:9d:6c:98:ba:c5:fd:f3:f8:0e:ba:
                    15:34:9c:18:96:95:09:4e:94:fe:94:2f:0f:00:5e:
                    68:b2:c5:c9:43:e4:53:43:64:19:59:87:5e:89:98:
                    da:33:27:fa:0b:f9:f0:fd:b5:91:25:ca:26:e1:b7:
                    ff:f1:1c:2c:2c:8b:26:93:e4:7d:41:2d:04:31:53:
                    82:b4:78:71:5d:f1:8d:88:b7:a4:9b:20:91:22:44:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:D8:51:8C:0F:7C:86:6C:EB:C2:71:88:18:4B:B5:C4:B1:66:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5e98b96a-a4de-39e6-a33b-dca30cb3af56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:bb:5c:1e:3d:78:61:4d:89:c3:6a:98:9e:15:9d:49:8d:
         a0:2c:4b:7a:4f:c5:76:d0:39:28:c7:aa:18:55:10:4d:7e:0e:
         eb:9f:47:a8:bc:d7:c3:c8:fa:45:41:8d:ed:7b:f1:40:98:98:
         79:f3:99:dd:62:17:9e:e6:98:0b:e3:fd:94:5c:df:8a:ce:26:
         17:fd:39:1e:56:95:89:c5:3d:22:c8:e6:cd:a2:be:9d:6c:1a:
         4a:62:a7:cf:a3:c8:92:73:1d:2f:8e:d7:a9:2c:c4:4d:57:53:
         d9:82:77:92:a2:de:51:6b:ef:a8:c1:4c:d1:ba:12:b8:73:c9:
         55:c1:76:ec:8a:24:03:3a:a2:14:14:41:46:31:1b:cc:c5:a4:
         65:8a:62:c7:90:02:79:62:f7:b2:82:73:01:0e:b4:58:b8:12:
         9b:6b:1b:2d:f1:06:3c:8c:2e:ad:0d:fe:4b:f2:c9:39:aa:54:
         45:b4:48:43:c0:fc:7e:1f:d7:0e:70:12:bd:5b:80:6b:d7:26:
         4d:16:db:73:44:89:82:d6:d8:24:f0:66:51:4e:c1:e2:60:cc:
         11:ca:01:84:35:62:46:62:90:05:11:f7:09:47:43:e9:1a:8f:
         23:90:aa:b7:9c:68:85:66:2d:d0:ab:12:54:78:c3:73:40:ae:
         28:68:06:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:26:36 2026 by rpki-client