Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa
File:                     a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa (raw, json)
Hash identifier:          +ZxoCTBHpSULTqIC6fxdKhfPOSepWnKU32Xf5dEzPLE=
Subject key identifier:   C2:63:0D:B8:27:D7:39:D2:57:55:27:1A:38:71:03:2C:71:04:16:3C
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584E7A64D8A33C5BD7B13CAE5380
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     31898
IP address blocks:        173.199.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d8:a3:3c:5b:d7:b1:3c:ae:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=ed65f711-144d-4acf-9152-1ca5c76276a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:63:6d:c9:c7:c1:41:5f:cc:58:27:e2:81:
                    47:b5:b5:e0:4c:6a:ab:c2:90:7e:63:c8:a1:f9:9a:
                    11:7d:98:16:ae:ff:2b:7f:d1:4a:19:74:00:9e:48:
                    79:88:d4:22:c4:67:5e:5c:1f:3a:01:44:81:bf:08:
                    81:06:b9:6a:32:3d:b9:44:63:c6:89:0d:2a:84:bd:
                    7a:19:80:16:29:40:97:df:93:84:ab:86:0a:27:1d:
                    36:36:2b:ad:71:46:38:3a:2a:c4:5c:ba:07:ea:7c:
                    de:8c:5d:5d:bc:8e:d3:30:87:37:15:c1:6f:28:4a:
                    f9:2f:a0:49:c3:3b:5e:73:31:9a:7b:16:8e:61:c8:
                    11:e1:fa:51:98:dc:99:e6:b5:4e:59:bc:8f:52:ff:
                    6c:61:03:19:e2:d9:0f:7e:9e:87:00:40:28:4d:ce:
                    3c:03:a6:de:60:1e:ea:5b:05:b6:bb:68:48:99:8e:
                    4e:9f:4a:9a:ff:f4:21:2c:f7:72:cf:48:ee:48:d2:
                    df:68:67:ab:30:bc:f9:fe:03:16:4d:6b:d5:f7:fa:
                    18:67:c7:82:9e:e5:55:04:45:d7:0f:fb:40:1b:39:
                    56:9c:22:1e:41:a6:b2:a3:b4:21:68:a9:35:f2:de:
                    72:22:ec:fc:c9:fb:e5:a4:13:fd:5c:6c:f0:71:fd:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:63:0D:B8:27:D7:39:D2:57:55:27:1A:38:71:03:2C:71:04:16:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a3c47a65-f108-330e-a1d4-d5a26a2607d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:9f:fc:2f:00:71:13:23:80:36:2b:75:f7:19:c1:ab:2b:f5:
         a5:8c:78:5b:3c:03:88:7b:01:e2:59:4b:44:23:2c:0f:79:0a:
         24:7e:43:63:cc:d8:40:b0:d7:8c:d6:bf:ff:aa:14:5e:be:46:
         c7:d0:91:bc:0c:6b:ea:2e:ee:11:26:8b:e0:19:41:d9:08:15:
         b7:22:9e:83:36:1b:e6:2b:14:40:c4:22:52:2e:91:2d:e7:82:
         04:9c:96:50:ed:a3:27:cd:45:2e:47:2b:bc:c3:31:73:f0:7b:
         7e:0c:8e:82:71:e1:fa:8b:1a:e5:98:1a:8c:5a:fd:72:37:ab:
         3c:1c:e9:5f:2e:b8:92:11:be:c1:f5:db:b0:a0:f1:18:55:b7:
         45:b6:2a:57:b7:b3:d2:56:20:d5:0b:72:30:16:0a:fa:b0:60:
         8d:2c:61:1a:95:e3:17:b9:41:a9:74:e2:c0:5b:b5:05:f4:77:
         fc:10:ee:78:e8:62:59:7a:54:21:67:0b:a9:1d:4a:cd:46:7d:
         3e:1b:a3:6f:c5:51:9c:8d:82:b0:5e:1c:1c:52:9f:2b:55:c3:
         70:11:a8:5b:a7:4a:28:e4:3f:08:d9:96:10:5f:76:4c:fe:f0:
         26:1e:34:07:d3:76:8a:cf:82:cb:2b:be:8c:e6:c8:52:e3:9c:
         ca:ed:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:54:12 2026 by rpki-client