Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/03c7ae6c-7e86-3c03-a1b7-6ad6c4fcfa60.roa
File:                     03c7ae6c-7e86-3c03-a1b7-6ad6c4fcfa60.roa (raw, json)
Hash identifier:          kn15qeMMKJat4KggX3FOIw7DxdTcABL4iSgeG4Rt4CQ=
Subject key identifier:   9B:F2:3A:01:59:A3:3D:0F:54:E0:EB:79:37:BA:66:DD:40:BD:03:9A
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F4328584B64CE63B8D4FFA709D5F18FBC
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/03c7ae6c-7e86-3c03-a1b7-6ad6c4fcfa60.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     19331
IP address blocks:        91.85.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:63:b8:d4:ff:a7:09:d5:f1:8f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7eb222c6-88ea-401a-b98d-3bd91bd9e20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:7c:a8:4d:6e:7f:07:05:db:1b:ba:27:7c:
                    93:cf:92:f1:ad:2f:1e:dd:2e:b0:e4:bd:e2:c8:b2:
                    b1:07:80:a1:a7:7a:72:a4:9f:27:69:23:1e:a6:6c:
                    3b:6b:2b:56:ef:ba:3f:02:ae:da:26:0d:c6:92:20:
                    23:1c:6c:66:97:02:d8:71:18:af:2d:ed:42:dc:e5:
                    7f:16:53:b1:cf:0e:2f:53:c8:5f:1b:56:eb:47:23:
                    e7:6b:ba:7b:cb:c0:61:5e:6a:ce:7a:c4:c4:ef:09:
                    93:61:c1:8f:f2:c8:f9:2d:cd:29:3e:49:bd:1f:ad:
                    88:54:d8:e6:a6:48:83:4b:57:17:ce:27:87:81:c1:
                    e8:42:2f:c6:dd:57:25:5c:98:a9:a2:47:93:e6:56:
                    f7:c3:50:83:5e:d9:97:fe:e1:41:40:ff:79:02:05:
                    f9:0e:45:a5:f1:3e:36:42:99:36:47:09:be:45:8d:
                    92:07:8c:e0:04:bd:03:09:71:d3:3a:36:f2:e8:7e:
                    40:1c:4f:8e:5f:4d:f4:b0:f4:65:23:27:e6:15:9d:
                    22:33:0a:47:6a:d7:69:23:ae:98:1c:e5:01:55:a2:
                    4d:90:21:9a:14:0b:1d:83:1b:13:92:a0:61:a5:9b:
                    b8:70:6b:71:2d:e9:5b:ab:3d:b0:19:16:ac:3c:7a:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:3A:01:59:A3:3D:0F:54:E0:EB:79:37:BA:66:DD:40:BD:03:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/03c7ae6c-7e86-3c03-a1b7-6ad6c4fcfa60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.85.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4d:6d:c2:77:c3:ea:68:0b:a6:1c:18:6a:8b:d7:84:8d:13:
         77:c2:58:1d:cc:30:9b:aa:75:11:97:4b:85:ae:ff:d9:df:d8:
         12:ff:a0:a7:f9:b7:7d:c4:a1:98:57:c5:82:63:5c:d1:60:23:
         5f:5b:26:02:e9:0a:59:0d:82:19:4b:b8:55:47:bc:9d:a2:7f:
         8a:23:e1:de:0e:e9:66:b7:ac:31:98:9a:09:90:7a:df:2b:f7:
         24:4d:cd:6d:d2:1b:4f:ae:5b:22:fa:a3:05:f6:e5:df:95:a1:
         a2:2f:80:fe:9d:2d:eb:72:7a:09:71:eb:7c:01:a8:40:6b:ea:
         07:a2:de:7a:6e:46:4a:68:1d:0c:70:ff:bf:89:ec:e5:5d:48:
         5f:1e:5f:82:94:05:82:be:35:7a:55:c6:f9:4a:e1:b1:83:ed:
         d4:b4:5a:c3:88:e2:e2:4a:8e:a1:5c:4d:31:31:23:3e:0b:0c:
         bd:aa:22:5e:0b:0a:f9:fb:b1:cb:d7:07:f8:1c:b9:0f:55:aa:
         56:36:8c:18:9e:3b:98:25:44:b5:6f:7e:25:42:df:17:b3:31:
         21:9b:96:51:db:94:d5:cf:1f:33:53:ce:ac:12:1e:f7:44:aa:
         e2:1e:19:65:e3:c2:33:26:2a:c5:4d:5e:c9:fc:c7:b7:4a:90:
         1a:07:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:33 2025 by rpki-client