Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9f6d5f3f-fc8b-31cf-badd-0ebc6cd7da4b.roa
File:                     9f6d5f3f-fc8b-31cf-badd-0ebc6cd7da4b.roa (raw, json)
Hash identifier:          S4LSXC0kx+Z4kOUf3SSpSlQsfe9lMhfNkgOJXCHrb9g=
Subject key identifier:   FE:F6:A5:9B:1B:94:F0:66:09:BD:24:0D:75:E1:C9:A3:82:AD:96:8B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EC371B2FF3A63532D9FF45FE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9f6d5f3f-fc8b-31cf-badd-0ebc6cd7da4b.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     64267
IP address blocks:        172.96.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b2:ff:3a:63:53:2d:9f:f4:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=39f91c81-2458-41dd-9253-ab754bd1bb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:83:af:f2:1c:18:43:54:0a:0c:a4:8f:f5:
                    ce:3c:06:e9:50:9f:04:c8:06:6f:cf:6d:77:14:ff:
                    ad:d2:c6:6e:59:5d:74:4e:b9:ef:c7:99:ff:3e:0c:
                    5f:71:71:0d:03:28:a8:51:0a:36:f0:68:a5:d6:6f:
                    61:cf:5f:d2:38:ee:ba:64:e5:ab:3f:3f:89:48:06:
                    82:4a:34:48:de:00:e7:f5:ad:15:f2:35:bb:1c:67:
                    90:40:61:05:e3:c2:96:2b:d9:e7:26:6f:7b:20:f0:
                    db:d2:88:3b:0f:5b:25:3f:0e:58:a5:ff:5b:b5:23:
                    b9:12:ce:87:61:65:b8:22:09:f8:c6:7b:a5:dd:ef:
                    24:a9:66:5b:24:21:a9:47:4f:0d:8c:25:5a:66:69:
                    57:b8:01:ef:5b:ce:c7:79:83:05:3d:00:23:91:5c:
                    57:39:00:3c:cf:b4:2c:45:68:3f:24:2c:0f:7a:55:
                    5b:c5:e7:e5:de:40:be:d0:a5:65:20:c9:7d:12:f1:
                    d1:a3:cf:c4:03:5c:2e:9e:eb:87:f5:4b:68:5d:5d:
                    77:ad:ac:36:63:da:04:e8:55:14:d8:fb:b6:7c:74:
                    57:4b:c7:44:bd:68:0b:bb:1f:26:52:ca:89:30:f8:
                    8f:f9:ef:5b:be:fe:98:a0:d7:6e:e4:41:63:2b:d3:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F6:A5:9B:1B:94:F0:66:09:BD:24:0D:75:E1:C9:A3:82:AD:96:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9f6d5f3f-fc8b-31cf-badd-0ebc6cd7da4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:00:80:c7:e0:1d:c2:aa:b2:0d:ac:89:19:32:f0:0d:54:
         45:82:ac:37:77:2e:f4:df:be:55:f0:ab:73:5b:20:2d:12:38:
         91:93:ea:d3:83:1f:c8:6a:fc:b8:ed:fc:0e:90:cd:b6:13:b4:
         e0:45:f3:86:1e:b4:7b:40:16:f9:f9:9c:56:f0:b9:6c:7a:66:
         e4:27:d8:79:b9:3d:93:22:f2:fe:6f:c8:6a:39:07:3c:43:d1:
         b6:1f:d6:83:a9:60:c0:86:b4:7d:4c:7c:f1:10:0c:1a:a3:4d:
         69:65:22:d9:5d:d7:3e:21:da:ad:58:33:e5:55:01:ac:87:be:
         77:f7:0d:1f:8f:fb:fb:6f:d9:fc:57:71:5c:3a:76:15:f2:94:
         12:8e:4c:76:f2:15:88:51:46:2d:35:9d:c7:a7:e7:0c:b9:bc:
         cc:0d:f9:36:af:e1:86:ac:80:77:fa:cb:6a:0f:8e:c3:5d:79:
         0c:d1:4d:21:c0:ad:c5:3a:68:40:c3:e4:7f:8a:e8:b7:76:86:
         54:a3:9d:b1:9b:cb:25:a6:e1:3d:10:7d:74:6c:06:44:f7:d0:
         f0:3f:11:61:44:bf:5e:97:e8:24:77:ea:7a:1a:84:3c:86:e5:
         96:21:56:a5:ed:0a:4f:3c:5c:6a:dd:e4:81:3d:38:ae:a4:79:
         cf:7e:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:07:06 2026 by rpki-client