Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/448413e2-c061-37b4-8032-98f3e37c5970.roa
File:                     448413e2-c061-37b4-8032-98f3e37c5970.roa (raw, json)
Hash identifier:          hHyczTgmK5jgZc0nKzTad361nRaOUkdse3zp9CRYvsI=
Subject key identifier:   BC:3C:CA:F5:83:FF:58:C6:90:CA:F9:EE:D8:F8:A4:FC:85:48:DA:D1
Certificate issuer:       /CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
Certificate serial:       010D0C9F4328584ED001F825CD8C4EAD92C33400
Authority key identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/448413e2-c061-37b4-8032-98f3e37c5970.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     46626
IP address blocks:        192.75.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f8:25:cd:8c:4e:ad:92:c3:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=9fa4c5ad-5842-4a2b-91f6-c52357eef87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c5:7a:78:11:cf:7c:80:fa:be:f6:d5:c4:f2:
                    e9:ff:70:32:63:e4:e1:44:cf:f8:98:f9:38:6e:07:
                    e5:db:73:22:38:09:81:d5:c7:94:79:89:63:d2:79:
                    51:4a:0e:5b:b3:01:95:53:16:45:d8:c3:be:f2:a7:
                    ad:d7:73:2a:20:ae:07:5d:3c:80:77:3f:d1:db:d3:
                    ca:db:74:18:4c:7d:6f:91:8e:be:e6:c5:83:05:97:
                    9b:c9:7f:69:06:bb:bc:7f:e3:c7:ab:cf:13:cc:e5:
                    d2:12:5c:9a:41:cd:d3:b6:c7:5e:ba:e6:5d:9b:6a:
                    15:fa:e8:41:48:28:1d:17:37:98:fb:fd:a9:81:a9:
                    10:11:d2:29:dd:6a:86:b1:98:0a:18:2e:44:13:fc:
                    b5:dc:cf:e0:01:fe:c9:48:e4:4c:39:ea:e3:51:13:
                    35:19:1b:50:95:90:89:c1:ef:e9:92:63:30:5b:79:
                    76:95:a9:37:04:50:7b:b5:1e:e5:41:ee:4a:c0:86:
                    5a:b8:57:29:12:9e:eb:46:7c:1e:44:04:54:7e:86:
                    d1:8d:6a:d8:d8:cd:28:1a:3d:2d:57:a8:f3:0e:76:
                    b8:de:2e:16:60:b6:6c:38:42:cb:67:cd:62:3a:46:
                    1f:67:15:a9:24:67:3f:70:3b:f9:72:db:0c:ac:c6:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3C:CA:F5:83:FF:58:C6:90:CA:F9:EE:D8:F8:A4:FC:85:48:DA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/448413e2-c061-37b4-8032-98f3e37c5970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:4f:f9:8a:bc:27:00:04:92:ee:92:6b:50:14:ff:ba:9c:
         2f:b5:eb:80:91:92:e3:e0:7c:16:6b:4d:83:58:dc:77:25:14:
         f7:39:e9:4b:9f:8a:9d:6d:a2:ac:22:08:40:e1:1e:15:01:c0:
         d7:7b:0a:7b:95:1e:3e:3b:27:a8:7f:81:7a:b4:73:77:ec:82:
         43:0f:a5:f8:65:ef:23:03:bd:96:95:d8:e6:de:6d:76:6a:60:
         6e:4a:61:c7:17:4e:05:a3:27:9b:c8:a6:18:89:9b:2b:24:4e:
         80:d3:02:a1:c7:d1:f8:a7:20:9f:4a:d9:7d:c0:97:4c:87:b9:
         0e:1c:ca:79:d9:62:65:cd:6f:e4:21:bf:67:ef:85:27:bb:7d:
         78:03:29:2e:13:e8:4d:a7:fa:d3:07:fc:27:c1:82:cc:92:58:
         7d:de:1a:16:12:1f:28:84:eb:08:d3:dc:eb:e7:9a:1c:55:07:
         5f:96:d5:0a:7d:a3:e9:67:3a:07:4e:f1:cd:09:48:d5:35:86:
         45:54:2a:91:19:36:59:e6:29:f0:44:4b:12:29:0d:d1:df:55:
         17:a3:34:46:69:d1:6f:7d:21:50:c9:c6:b1:35:28:9c:6e:18:
         7b:a6:4d:94:e8:df:3c:ae:9b:d0:73:e5:b8:ef:78:fb:bb:12:
         49:9e:e7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:43:53 2026 by rpki-client