Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d09794e7-c8fe-3abd-86db-026017be6c6f.roa
File:                     d09794e7-c8fe-3abd-86db-026017be6c6f.roa (raw, json)
Hash identifier:          64+rNX4odNWpYlhjozdhmENZkTQAzyGqJLDznuYZF5k=
Subject key identifier:   56:C0:D7:01:68:F6:55:74:1C:4C:53:F8:87:D6:85:DA:BC:95:CE:93
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE423352FEF1F7F9F96BF5D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d09794e7-c8fe-3abd-86db-026017be6c6f.roa
Signing time:             Wed 19 Aug 2026 18:03:45 +0000
ROA not before:           Wed 19 Aug 2026 18:03:45 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:35:2f:ef:1f:7f:9f:96:bf:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:45 2026 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=f8155ce0-6ef8-479f-bb84-8ecab4c164dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:e6:86:ab:a1:8c:60:83:42:5e:69:91:0f:
                    16:94:cf:d3:1f:cd:64:76:fd:f9:1e:81:52:66:7e:
                    86:50:bc:34:4a:38:d9:a1:25:e0:30:99:d0:4e:60:
                    ee:4c:d4:43:d0:47:72:82:c5:6e:69:a4:ea:40:4b:
                    63:48:4a:49:2a:59:ba:2c:e9:9b:d7:7c:23:79:7c:
                    83:ac:ed:f1:5e:a6:80:35:23:9d:58:49:45:35:dd:
                    36:e3:ae:0a:d8:3e:06:ce:f0:41:32:7e:79:ae:63:
                    53:9d:8c:2b:07:bc:7b:dd:8c:4c:cb:10:4b:8f:49:
                    d0:2c:ba:fd:61:2f:47:24:c4:a3:b0:8d:64:89:eb:
                    40:5d:39:49:d1:f1:06:33:52:87:d7:82:bb:8e:9c:
                    9e:df:d0:fe:6b:d5:07:84:14:bd:2d:64:15:e1:f3:
                    db:de:98:2e:8f:56:8c:68:0c:05:df:c5:7f:36:4e:
                    ff:61:c9:59:90:ca:30:af:48:4f:52:b8:4d:ae:9c:
                    84:63:70:87:22:32:8e:5a:61:85:c3:89:7c:1b:ae:
                    a8:f9:4f:d4:cb:95:59:ce:84:0a:53:98:19:df:ca:
                    a4:90:7c:c2:15:37:52:00:d1:a1:78:b3:46:8c:6c:
                    f5:a7:4a:3c:15:3e:75:d7:31:57:5b:94:47:2e:24:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C0:D7:01:68:F6:55:74:1C:4C:53:F8:87:D6:85:DA:BC:95:CE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d09794e7-c8fe-3abd-86db-026017be6c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:81:5a:2a:86:25:ba:6d:64:24:ff:56:43:6f:57:bb:ed:
         a7:fa:f5:c8:be:1a:1c:09:2f:3d:06:13:50:e9:92:99:49:c7:
         5a:84:94:0d:da:c6:01:a5:d6:cb:cb:aa:6d:82:b5:1b:1e:38:
         48:68:7f:4e:d6:56:87:27:ec:6a:ec:87:34:20:a1:72:ae:e3:
         f4:50:89:00:ad:75:5f:65:4b:53:d8:58:4b:1e:a5:34:d1:96:
         f2:74:e5:40:e3:26:e6:50:c0:6f:fd:8a:b1:94:55:b5:5e:9d:
         55:c4:38:cc:87:b4:e0:d0:9a:ab:96:92:55:a9:d4:83:8d:44:
         05:b3:bb:b5:eb:ee:8f:3f:9f:e1:6c:41:dc:2b:d1:c5:4e:fd:
         e8:50:c1:cf:8d:60:7f:48:ed:be:e1:b5:8c:9d:2f:52:ec:f9:
         15:07:b6:ee:bf:36:d4:e7:06:91:34:9d:e8:35:32:8e:84:b1:
         1c:7c:01:5f:88:7a:7d:18:e1:db:a5:7b:48:0f:ed:d7:71:b1:
         20:5a:b6:b6:42:96:6f:64:48:dc:58:cb:6e:6a:72:13:f9:ef:
         03:df:73:67:4f:8e:f3:21:85:68:43:d1:f5:c3:50:4b:52:82:
         6e:9e:38:67:ee:a5:62:25:eb:6e:ff:5d:1b:73:56:fa:b2:a8:
         44:ec:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:34:08 2026 by rpki-client