Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/11cee1d9-72b0-33ee-8a5a-5853a7220542.roa
File:                     11cee1d9-72b0-33ee-8a5a-5853a7220542.roa (raw, json)
Hash identifier:          cNmfIBPVC97HHTwk/yJ1++D9RfVOprWrmtZT5OsCjV8=
Subject key identifier:   1A:58:91:96:C4:C5:51:5B:20:BF:5A:91:84:12:6C:39:2C:89:79:38
Certificate issuer:       /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial:       010D0C9F4328584B1D9C2B3A0F6A9F01854B6080
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/11cee1d9-72b0-33ee-8a5a-5853a7220542.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     46320
IP address blocks:        193.47.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2b:3a:0f:6a:9f:01:85:4b:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=efc25108-c56d-4c50-ae4b-6afc5b4ff246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:bc:1e:92:19:ba:99:66:2e:96:21:b1:07:
                    37:80:c2:5a:19:60:c3:ed:d6:42:87:f8:81:9f:af:
                    f8:07:e9:ef:af:14:00:52:48:44:19:8a:c1:69:1c:
                    9e:96:17:e4:9b:0b:07:6d:6a:01:a9:af:2e:8f:36:
                    8a:51:14:b7:ac:87:2d:9c:5d:0f:7d:7f:5a:3a:13:
                    bf:d0:97:5f:d6:cc:19:ff:9c:40:c7:95:39:d4:2a:
                    ee:0a:35:41:dd:19:e4:d1:46:0c:7a:41:10:fa:b2:
                    2b:27:6c:37:1b:bf:eb:03:d7:8a:2d:8f:9b:20:2f:
                    60:ff:2f:75:3c:4e:d2:73:2b:73:24:59:16:89:81:
                    f2:16:10:d0:f5:5a:19:08:96:1a:3b:c5:06:4b:36:
                    8d:8a:c7:42:5b:ba:09:23:c5:a8:29:b7:1f:fa:be:
                    d0:56:9c:64:44:e7:16:3e:b1:12:04:be:22:05:a5:
                    58:e6:9c:bf:c1:23:80:4f:54:2a:6e:2d:b0:6f:55:
                    b6:39:e6:f5:39:58:af:3b:00:dd:64:fc:4d:b8:d3:
                    35:02:99:7a:e9:92:74:79:00:0a:ec:18:f9:a0:06:
                    68:1f:e3:42:d6:90:a9:ce:67:1b:c6:f6:8d:90:02:
                    a9:ac:5c:e0:b4:fd:de:ae:23:b1:10:9e:0f:eb:cf:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:91:96:C4:C5:51:5B:20:BF:5A:91:84:12:6C:39:2C:89:79:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/11cee1d9-72b0-33ee-8a5a-5853a7220542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.47.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:97:d9:c4:92:45:ec:aa:92:38:05:df:19:14:64:0e:bf:
         17:10:4f:4e:fb:dc:e5:1a:34:a5:ff:a6:46:4e:92:69:64:aa:
         19:3c:39:0f:35:70:fa:23:b1:ce:4b:17:77:90:38:98:60:75:
         c9:29:70:97:87:ec:1d:17:15:c7:49:fb:99:fb:e4:77:ae:9a:
         64:18:42:5e:b7:45:19:e5:5a:2e:62:bd:36:5c:54:28:82:9c:
         d6:5a:3a:35:bb:03:db:d0:c5:b2:f5:d9:af:fc:68:59:1f:21:
         75:90:3d:ff:7c:6f:cb:79:d5:d2:b3:12:46:ff:02:79:db:38:
         80:1b:6c:b1:91:49:9e:dd:94:5a:84:db:2f:46:6d:78:6f:4c:
         15:2a:a2:58:83:b0:d1:e2:ab:11:73:a7:d8:f5:4b:3b:01:68:
         e2:5d:dc:7d:06:80:1b:b1:ce:4d:c3:bb:7a:88:8b:68:34:2e:
         f2:9f:d9:bc:95:30:1f:e8:30:e7:5b:cb:f3:74:00:a8:1e:dc:
         b6:dd:0a:45:9d:c1:d3:1d:f4:c9:2a:0b:58:2c:03:47:14:0f:
         8a:cf:4b:6a:6b:33:fc:e2:cf:e2:18:ba:82:e8:1d:13:8b:25:
         c0:17:f3:20:e3:5a:b5:e9:b3:09:7a:53:e6:94:db:db:cb:b7:
         35:ca:58:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:05 2025 by rpki-client