Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa
File:                     4ceb54a7-225f-32e0-81d7-109b70ac65de.roa (raw, json)
Hash identifier:          NOZyWm8Hwp7PVYadGoqDpKDgUKgFtylW5knxT+/VUIM=
Subject key identifier:   1A:7B:ED:52:EE:27:E2:99:F0:EE:FA:B9:15:E5:00:60:69:E5:0C:DD
Certificate issuer:       /CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db
Certificate serial:       010D0C9F4328584F03A778E095BEC147A1C41800
Authority key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     402074
IP address blocks:        208.92.236.0/22 maxlen: 24
                          2602:f85e::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:78:e0:95:be:c1:47:a1:c4:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=1acbb750-1b1d-4f81-b292-f7056832751d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:dd:cb:e5:c0:ee:c3:55:c2:f4:54:c9:6e:
                    5f:27:7c:e0:ab:3e:db:f9:1f:16:92:3f:4d:d8:1a:
                    6d:8d:ab:f0:d5:7e:17:be:ab:2c:71:fb:0a:66:a2:
                    d8:fc:a8:20:d5:26:75:39:cf:48:09:8a:32:2d:27:
                    f7:81:ab:d7:38:6a:ce:4c:49:98:07:33:7b:3e:a8:
                    97:28:5a:b2:fe:ed:bb:08:01:f0:1b:f2:67:e1:f1:
                    88:92:dc:5c:bb:4d:83:63:28:c3:f0:30:01:0a:68:
                    2a:6f:e1:69:ee:13:5c:81:f1:55:c3:42:6b:cb:c9:
                    84:91:8a:b6:d3:bb:64:e7:f9:8d:ee:dd:15:13:4a:
                    2e:2e:77:77:26:84:be:13:7e:60:34:41:47:9e:9f:
                    80:2f:5f:d0:c3:35:1a:15:5a:42:a7:68:04:63:92:
                    df:ee:09:fa:ef:91:10:0d:ea:b0:e6:df:94:84:54:
                    04:b4:f2:62:ea:4f:6b:5d:00:a2:62:46:31:90:fe:
                    d2:0d:31:47:ae:60:f5:48:a0:6d:af:92:8d:9e:c5:
                    7e:d9:2e:a3:16:a2:72:09:7f:c2:78:95:c3:e5:8f:
                    6d:0b:71:71:41:b9:4d:65:c9:3f:c9:94:bc:86:d5:
                    84:77:34:c1:f1:a7:63:7b:6c:f4:f1:22:c2:27:8c:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7B:ED:52:EE:27:E2:99:F0:EE:FA:B9:15:E5:00:60:69:E5:0C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl

            X509v3 Authority Key Identifier:
                keyid:78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.236.0/22
                IPv6:
                  2602:f85e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:18:57:d1:99:1e:c3:79:ad:50:24:29:4c:a6:49:80:d2:ed:
         76:71:1d:01:0d:75:00:31:b4:2e:42:8e:9c:b3:2c:b0:40:35:
         ee:3a:43:4d:53:44:1f:08:e6:18:3a:bf:80:82:00:a7:3f:44:
         a4:c8:44:49:97:0a:b3:10:95:c2:cc:7a:08:e2:c9:76:fa:2e:
         dd:ce:86:0e:c5:9a:91:d5:ac:06:94:fd:f6:9a:5e:d3:42:7b:
         3d:0c:8e:4d:52:4c:29:99:ae:60:26:5d:6f:b0:95:ce:89:13:
         c0:89:dc:a4:a9:a0:f7:30:91:49:cb:98:0e:f8:ce:03:3a:46:
         7e:42:31:34:b4:bc:e2:46:8e:69:71:07:ed:39:3b:c9:6e:9f:
         16:ae:9d:98:f3:05:74:c9:0f:76:fd:c9:cc:f3:35:ad:5d:0e:
         6b:fe:75:67:61:24:7a:37:88:47:dc:98:6a:4e:bc:ad:bd:23:
         35:d8:03:2d:9f:5c:d9:cc:fc:b5:30:4b:9a:b0:a8:5f:13:bb:
         80:71:b0:9c:71:7f:32:9d:3f:8b:b9:bf:03:c8:80:21:e5:d1:
         99:63:c5:2e:7d:d7:6b:26:6b:ac:5a:3d:f4:96:3a:d5:04:90:
         6f:69:cd:32:66:12:a9:a0:1a:96:ac:fe:9f:9d:0c:b1:c6:50:
         e9:f5:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:25:49 2026 by rpki-client