Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421/be4995b0-b898-388d-9bb0-5c57e7f69667.roa
File:                     be4995b0-b898-388d-9bb0-5c57e7f69667.roa (raw, json)
Hash identifier:          xNr1h64YamSW00FFH7FsbDcZQg7qLYB6MNr8u/OgXlg=
Subject key identifier:   3D:3B:39:D8:B2:49:EB:3D:74:85:85:CB:D8:57:CD:95:18:DC:12:7B
Certificate issuer:       /CN=c92ad66c-4838-4870-8655-a8598a840421
Certificate serial:       010D0C9F4328584F831BD103CA5AEBFA91BCDDC0
Authority key identifier: F5:FF:6B:2A:51:99:C7:0C:31:43:CD:73:F4:17:AA:67:5E:8D:C7:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421/be4995b0-b898-388d-9bb0-5c57e7f69667.roa
Signing time:             Thu 15 Oct 2026 16:42:23 +0000
ROA not before:           Thu 15 Oct 2026 16:42:23 +0000
ROA not after:            Wed 13 Jan 2027 17:42:23 +0000
asID:                     26503
IP address blocks:        72.1.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421/c92ad66c-4838-4870-8655-a8598a840421.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421/c92ad66c-4838-4870-8655-a8598a840421.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:83:1b:d1:03:ca:5a:eb:fa:91:bc:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92ad66c-4838-4870-8655-a8598a840421
        Validity
            Not Before: Oct 15 16:42:23 2026 GMT
            Not After : Jan 13 17:42:23 2027 GMT
        Subject: CN=c79d59c3-6e42-481c-a900-b66d81ddeebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:61:10:c2:db:57:b0:65:30:9a:4a:0d:e8:
                    5e:60:01:05:b8:c7:d0:97:a3:cc:6e:40:93:3f:d8:
                    ef:d4:e6:17:56:fe:5d:4f:41:09:90:9a:0f:3e:30:
                    fb:2f:e0:90:8d:93:c0:96:b3:7d:ce:ac:8b:c4:36:
                    15:6f:bc:92:74:d1:09:bc:41:7d:1f:0f:a4:4e:63:
                    13:32:88:d8:ea:27:d9:d0:84:2f:96:80:e9:2b:cc:
                    85:0f:9c:34:8b:38:a9:73:b8:0b:d1:4a:4a:96:94:
                    2d:a8:f5:8f:97:e2:3b:c5:53:ad:f4:10:5b:60:7e:
                    87:d9:eb:86:13:7f:4c:c2:69:a5:86:55:25:34:1f:
                    89:c9:ff:4c:09:8b:e5:09:04:4c:72:39:50:dc:8c:
                    f5:aa:98:42:90:83:5b:53:15:19:09:12:8f:ff:6c:
                    e5:d6:51:77:5d:53:38:51:d7:17:0f:89:84:ac:89:
                    ec:bc:15:13:ff:dc:9e:4a:c1:aa:dd:75:93:06:42:
                    43:35:ae:9b:4a:b7:47:9d:1f:e4:ec:b9:c1:ea:84:
                    01:de:a3:e6:51:e3:1e:1b:62:66:c5:2f:c6:f7:d1:
                    a5:25:58:4c:a8:3c:94:94:e7:60:0f:ae:6a:9e:7c:
                    15:c0:7f:58:48:2f:9c:03:1a:4e:3d:28:c8:be:2f:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3B:39:D8:B2:49:EB:3D:74:85:85:CB:D8:57:CD:95:18:DC:12:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421/be4995b0-b898-388d-9bb0-5c57e7f69667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421/c92ad66c-4838-4870-8655-a8598a840421.crl

            X509v3 Authority Key Identifier:
                keyid:F5:FF:6B:2A:51:99:C7:0C:31:43:CD:73:F4:17:AA:67:5E:8D:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c92ad66c-4838-4870-8655-a8598a840421.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:36:f1:27:c4:21:d5:ed:ad:29:0b:9f:94:23:75:97:fd:84:
         55:0a:61:34:35:40:db:1f:a1:71:d2:75:af:11:01:1e:40:61:
         85:5c:b9:e9:b1:17:2d:cc:ab:aa:22:bd:e3:99:5f:5d:e8:cc:
         3c:89:59:f7:c8:48:0d:9d:d5:61:25:e4:c4:d7:37:1c:21:f2:
         89:52:32:99:45:59:7b:b3:ad:0c:08:66:ad:78:6a:15:98:aa:
         a8:fd:9d:0f:b6:be:ff:89:a5:d5:ab:d9:f7:66:ce:81:e0:d8:
         c1:47:e8:1c:c1:6a:ed:27:a0:42:7e:6f:6b:0a:9d:65:82:e7:
         ca:1b:ae:53:90:77:bf:a2:df:3e:ed:66:ac:de:77:10:b3:01:
         10:ca:2b:a2:1e:56:4d:62:a2:70:33:43:51:fa:dd:3c:ba:92:
         75:48:62:e7:fb:c7:25:06:08:73:c2:2a:2b:25:65:42:0e:24:
         68:f6:e6:49:77:df:d7:0c:ed:0d:25:47:69:3d:a6:a6:b6:93:
         d4:0d:20:f1:11:22:1e:b8:a4:84:34:3f:49:bb:1e:50:b5:d7:
         3c:08:d7:1d:ad:52:19:2f:f1:79:93:59:1d:90:a9:aa:2c:fb:
         23:29:7c:48:10:f1:10:98:69:6a:f9:25:67:6c:7d:2b:81:17:
         d9:1e:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:33:34 2026 by rpki-client