Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa
File:                     5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa (raw, json)
Hash identifier:          6JWQkikl+t3BETfIGEd0SVwQM7kN9xQvzW98smtS/Hs=
Subject key identifier:   6B:65:9C:22:56:B3:66:86:A8:47:40:2D:37:AF:3C:33:3A:51:DF:4B
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F4328584EB6E1A24DAA9594838DB81080
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     54054
IP address blocks:        192.48.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a2:4d:aa:95:94:83:8d:b8:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=b6f3469e-8bef-47ec-8333-17a40627c8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:6d:25:85:85:8e:57:82:e1:60:33:6d:b5:
                    49:46:53:d6:87:ea:02:ee:38:3e:21:e8:f7:6b:d0:
                    32:b3:12:4f:18:79:34:06:3e:42:7a:a9:29:b1:bf:
                    4d:4e:da:92:23:6e:43:ec:6e:78:f4:f0:06:37:03:
                    6e:d2:7c:a8:19:29:96:59:70:4d:a1:e7:1a:f5:4b:
                    5e:29:05:22:08:3c:28:40:0c:19:9f:92:7f:e8:18:
                    36:92:51:82:6b:15:23:9e:ae:4d:6e:d7:df:53:72:
                    4c:c6:74:93:aa:de:ee:cf:b3:95:64:82:22:b1:71:
                    f0:5f:98:35:4b:25:10:56:e0:db:18:4c:3a:98:26:
                    d4:da:21:6e:fe:af:db:bd:66:ac:22:57:54:10:87:
                    71:65:95:d6:4f:64:9a:1a:64:7f:81:e5:e5:08:ad:
                    96:c0:15:e9:c0:2f:cd:9c:df:56:4e:93:89:88:06:
                    2e:28:d6:55:28:e6:f2:f3:d3:d2:86:0a:ac:f8:de:
                    66:89:04:7c:cd:de:40:87:d3:82:3e:1d:6e:29:86:
                    49:16:f0:61:7f:fc:61:ba:73:ba:f4:83:a7:3e:53:
                    e5:c6:e3:f1:03:36:93:d1:72:ad:85:0b:5e:41:9a:
                    2b:3d:e3:30:ea:c2:61:ad:41:1c:d3:92:72:9f:e7:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:65:9C:22:56:B3:66:86:A8:47:40:2D:37:AF:3C:33:3A:51:DF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/5b7505ae-0f34-3626-bc11-49f8ec61daa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:44:61:f3:3e:d1:f5:0f:e2:ae:db:44:51:f5:4c:6e:42:ae:
         a7:85:85:86:f2:7c:8a:69:f2:0c:92:0d:0f:e6:f5:bb:8f:a0:
         62:f2:2e:7c:7b:21:b5:05:68:5a:0c:18:8e:b8:4d:5e:eb:3c:
         e1:1f:57:ab:65:49:0d:14:5f:d5:1f:47:ce:6e:fe:2c:61:ea:
         e6:2e:94:c9:06:2c:b4:af:dc:12:1b:24:96:a2:fc:ec:6f:aa:
         83:e8:88:fd:7c:9f:e1:2d:19:e9:07:f9:ff:09:1c:55:5c:fc:
         79:1a:13:9d:d2:af:95:fa:e9:91:d8:ac:80:e9:77:0c:27:57:
         0d:60:d9:24:1a:b3:c0:d7:47:4f:bc:7f:14:d3:05:53:59:02:
         c0:07:07:77:ca:f1:a9:fc:68:0a:19:c9:8f:0b:f5:84:bd:8a:
         be:46:7b:33:7f:2c:4f:ab:de:5a:8d:eb:85:d4:41:09:be:52:
         e4:3b:9c:a2:27:c9:3a:7e:b9:a0:32:42:ae:9b:15:6f:2d:f2:
         09:d5:10:0c:1a:ea:7f:99:33:3b:68:3f:ee:0c:65:97:26:03:
         4b:82:81:59:f7:e9:eb:c7:d4:39:6d:95:eb:eb:d2:4e:4d:39:
         c5:73:96:69:27:42:f1:2b:0f:2d:6a:b3:a6:30:9f:30:eb:d0:
         67:9b:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:07:25 2026 by rpki-client