Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/fac5067a-e8f9-3870-a54b-675d0e6c220f.roa
File:                     fac5067a-e8f9-3870-a54b-675d0e6c220f.roa (raw, json)
Hash identifier:          2IjUSWE7q2x/RpRa6NspA2Oyq6C1wDdZoYG5iXki+tM=
Subject key identifier:   27:24:7D:22:D0:95:E7:A0:9E:AC:45:A4:C2:69:FA:4B:28:75:B1:B1
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584B1D9C2507DC36793A03B605C0
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/fac5067a-e8f9-3870-a54b-675d0e6c220f.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     26548
IP address blocks:        192.169.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:25:07:dc:36:79:3a:03:b6:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=be83c358-0790-4b8a-b0d6-3d39fc885319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:d9:81:6d:3e:e9:7c:2d:c4:8e:95:9b:b9:
                    5d:e9:41:6d:74:43:e1:03:71:5d:70:e9:57:2c:ff:
                    11:e3:f2:07:b3:5c:12:91:c9:b5:49:d7:8d:96:e2:
                    76:32:fb:85:18:8c:3e:12:cd:96:21:f1:58:16:51:
                    6f:01:e2:6d:34:13:58:bc:8d:46:a7:ad:8a:de:7c:
                    f2:a0:22:64:cf:f5:90:36:2f:d1:16:94:0a:89:0a:
                    6d:df:cc:3a:c1:2b:8d:21:c5:26:ea:e9:85:b0:c3:
                    93:f4:98:40:38:79:11:86:79:8b:77:98:16:02:fe:
                    0c:f8:45:00:4f:7c:91:8c:4f:d2:67:a8:60:d8:db:
                    4c:b9:c3:4e:bd:60:a6:14:46:5f:50:e4:19:90:54:
                    79:4e:de:fd:73:d0:94:b1:4f:e5:37:d2:00:43:23:
                    03:63:60:db:17:0d:0a:4d:fc:34:a0:dc:9c:4e:9d:
                    f2:1b:c6:cb:2d:82:f4:83:0e:79:1e:d0:c3:33:ca:
                    a7:a0:f6:6f:1b:b1:e4:3d:df:c4:75:ad:01:ad:a7:
                    82:ae:37:a6:f2:7d:e7:4f:7b:46:80:c8:76:b7:20:
                    61:58:ad:f5:9a:a6:7a:85:01:6f:34:19:9c:d8:d0:
                    af:26:15:93:3a:65:17:2d:6a:19:81:49:c3:5b:3d:
                    4c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:24:7D:22:D0:95:E7:A0:9E:AC:45:A4:C2:69:FA:4B:28:75:B1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/fac5067a-e8f9-3870-a54b-675d0e6c220f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.169.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1f:f2:50:06:9d:01:64:44:de:b2:83:be:db:ef:82:a8:88:
         fa:49:e0:5f:08:a7:4c:86:fc:44:43:0a:dc:ef:5f:35:fe:f6:
         a2:2b:f2:cb:38:6f:a5:39:33:5f:be:4d:00:71:e1:80:a3:7f:
         a1:52:48:fa:7d:28:d4:1e:0a:76:c9:a9:ec:90:15:3d:7a:51:
         50:78:2f:cf:74:cc:53:b5:b5:e8:94:16:85:e0:bb:46:c6:2b:
         0f:f5:63:25:92:12:a7:2a:a2:fb:3f:cd:41:3a:de:1f:81:e3:
         7d:eb:5c:fb:be:8a:d1:52:09:68:8b:8b:cc:e6:a5:f4:be:0d:
         e0:0a:75:a6:60:49:c0:d1:3f:e8:d4:8a:60:17:d8:6b:ba:2c:
         a6:38:31:88:04:54:b8:3f:14:5f:eb:17:d2:5c:e4:0b:d6:cc:
         d6:f4:b7:7a:c8:17:57:8e:36:6a:e2:4d:9f:34:36:a6:df:3e:
         8e:12:37:b6:d5:31:c7:5a:ee:a2:5b:99:1f:68:8a:fd:12:87:
         9d:ed:af:b3:94:6c:54:ba:73:4a:33:b0:f5:16:38:00:b2:66:
         7d:33:ec:ce:52:88:a1:f6:1e:03:91:4d:29:82:e1:bd:7f:df:
         5c:ea:52:22:17:97:22:5c:24:bd:39:9e:54:29:1e:80:7f:4a:
         c6:c1:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:30 2025 by rpki-client