Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7922.roa
File:                     AS7922.roa (raw, json)
Hash identifier:          ACff2w7ftInNpU105gKFkQSo4EJ59qED5smuD7Y5Mjk=
Subject key identifier:   A7:80:CE:19:1A:A6:51:37:56:A3:B3:41:E7:D8:9A:80:D3:95:A5:C4
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       5C1F769DB9D8DC10E2B653A0B77EB3333127DCA8
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7922.roa
Signing time:             Tue 29 Sep 2026 11:36:20 +0000
ROA not before:           Tue 29 Sep 2026 11:31:20 +0000
ROA not after:            Tue 28 Sep 2027 11:36:20 +0000
asID:                     7922
IP address blocks:        204.93.173.0/24 maxlen: 24
                          205.234.162.0/24 maxlen: 24
                          205.234.234.0/24 maxlen: 24
                          216.246.7.0/24 maxlen: 24
                          216.246.28.0/24 maxlen: 24
                          216.246.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1f:76:9d:b9:d8:dc:10:e2:b6:53:a0:b7:7e:b3:33:31:27:dc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 29 11:31:20 2026 GMT
            Not After : Sep 28 11:36:20 2027 GMT
        Subject: CN=A780CE191AA6513756A3B341E7D89A80D395A5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1d:e4:b7:58:a6:a6:8e:4a:b8:9e:a5:b0:0c:
                    4e:b9:dd:75:2f:0e:95:8a:9c:87:6e:6e:74:ab:a2:
                    e0:80:db:00:65:64:87:cf:e2:84:00:01:d5:a8:90:
                    9f:30:4d:16:ac:3d:41:ba:09:f2:d7:76:f5:5d:11:
                    45:36:9f:e9:bc:bc:33:81:b0:5c:37:d0:72:29:fc:
                    91:29:16:1a:90:4e:0f:57:e0:c8:72:6f:b5:5b:ea:
                    43:42:50:3b:d4:50:45:d7:fb:5b:18:47:d5:54:81:
                    b0:d7:1a:b3:ab:34:c6:9c:fe:57:27:20:17:8f:4a:
                    7c:3e:fd:21:8f:44:b2:dc:3b:8d:cf:8e:6f:e8:19:
                    98:2f:82:4c:44:d2:aa:4f:8d:16:29:79:64:77:8b:
                    82:65:5f:aa:cc:3d:a0:f7:a3:e0:a6:56:60:45:21:
                    bc:11:7a:73:fc:12:2f:38:14:c4:9e:db:ed:66:b6:
                    b7:a2:ac:c9:0b:d0:f1:16:bb:86:ae:89:15:b5:f7:
                    8e:1d:8b:ed:17:a5:68:df:90:58:e8:0b:67:ef:95:
                    7c:6a:4f:55:f1:96:9e:6a:da:03:b0:5d:02:0d:4c:
                    a0:92:97:ba:92:25:17:cc:6a:17:d6:b6:07:72:75:
                    e9:4c:fa:15:ca:c0:c5:3b:af:27:86:b0:78:27:1d:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:80:CE:19:1A:A6:51:37:56:A3:B3:41:E7:D8:9A:80:D3:95:A5:C4
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7922.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.173.0/24
                  205.234.162.0/24
                  205.234.234.0/24
                  216.246.7.0/24
                  216.246.28.0/24
                  216.246.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:63:39:6e:9b:d3:f8:76:13:c8:e9:b6:4d:e9:2c:64:02:
         40:1a:6f:9c:95:04:e3:3e:2d:ce:6c:56:99:58:b8:9d:77:20:
         29:c8:e0:82:43:c7:f8:2f:39:8f:73:d1:83:9d:dd:06:5e:c8:
         04:57:cc:ff:f5:b7:8e:2b:28:73:9a:f4:5e:d6:d7:8d:d5:d4:
         ac:b0:b3:52:69:51:c0:53:b2:46:54:24:b1:d1:11:e3:dc:6c:
         0c:a4:fe:fa:fa:ff:c4:db:ab:ee:ef:03:64:31:00:16:7c:06:
         bd:1c:96:1f:09:78:8d:ed:08:ff:65:91:cc:76:0d:91:48:2b:
         73:4c:37:31:9c:fe:d2:e3:81:04:50:97:bc:a7:2c:82:80:86:
         37:67:61:c2:26:7c:6f:23:b9:9e:1d:3f:05:bb:12:61:6d:c5:
         f2:33:75:d3:98:bb:1a:49:a7:33:2c:c2:76:ac:9f:c1:b5:b0:
         7b:7a:07:82:a1:2b:02:86:18:02:02:a6:3b:7d:02:e8:64:d4:
         b6:97:b9:2d:fb:5f:3d:7e:a7:0f:41:a5:93:72:ea:8d:27:96:
         42:45:2a:16:a9:b6:07:8c:0c:94:4e:9c:7c:bf:ce:ac:36:e6:
         cf:73:ec:f8:87:37:f9:07:af:19:9a:91:a1:8c:6d:1d:be:9e:
         b8:ce:72:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:30:20 2026 by rpki-client