Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2f36988-cd58-366b-be04-85d10baaf08d.roa
File:                     e2f36988-cd58-366b-be04-85d10baaf08d.roa (raw, json)
Hash identifier:          kR3zQYm1fJVbBSCVulYFHDQywbMsOYgMHTcWPJk4f4g=
Subject key identifier:   E6:B9:F4:91:2C:82:18:F7:73:0D:27:BA:A2:D5:90:F1:E8:73:70:A9
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA230D2F395290DD3462B00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2f36988-cd58-366b-be04-85d10baaf08d.roa
Signing time:             Sun 19 Jul 2026 18:24:17 +0000
ROA not before:           Sun 19 Jul 2026 18:24:17 +0000
ROA not after:            Sat 17 Oct 2026 18:24:17 +0000
asID:                     11404
IP address blocks:        172.92.0.0/16 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:30:d2:f3:95:29:0d:d3:46:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:17 2026 GMT
            Not After : Oct 17 18:24:17 2026 GMT
        Subject: CN=eaec0cfe-7ce8-4674-b76e-a3b916fd3784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:af:a5:82:82:4e:b6:45:6c:ca:33:14:1f:
                    07:67:ca:86:ec:3b:97:a1:4a:6c:5f:81:2e:0a:dd:
                    7a:be:92:b3:ca:f3:6d:30:90:ed:df:d7:ed:60:93:
                    ec:41:33:90:9a:88:6e:de:97:ee:4d:c8:b9:ff:4e:
                    a3:df:d0:26:81:63:af:36:0d:df:a3:9b:85:78:ab:
                    b5:13:4f:67:08:66:c8:35:8c:c3:a4:26:43:a7:5b:
                    a0:1b:07:a6:b5:12:d4:2f:00:59:e1:e6:69:b0:09:
                    40:94:8e:4f:e2:c1:f6:5b:a0:ee:c0:d8:c5:2d:2b:
                    92:0f:c1:33:05:3a:c1:87:64:3e:1d:25:55:f1:c1:
                    f7:cc:d2:b2:e0:c1:75:26:fd:d7:7e:eb:39:3d:b9:
                    dd:ac:ce:ff:26:8c:41:7b:14:39:19:d0:12:dc:e7:
                    b1:d0:4f:6d:34:72:f1:b6:71:4c:1d:7d:ca:48:f3:
                    45:8a:a5:12:94:7b:3e:a3:1e:db:8b:4d:d7:c0:46:
                    69:84:4f:65:61:9b:ba:bc:86:68:f4:eb:a1:ca:b4:
                    43:03:d9:41:4a:87:12:1a:8d:5a:39:48:f2:37:ba:
                    ba:91:be:c3:46:16:14:a5:df:78:61:8b:40:45:c0:
                    0c:dd:f0:e3:06:3f:d1:f4:9e:ed:57:ce:ba:9f:0d:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B9:F4:91:2C:82:18:F7:73:0D:27:BA:A2:D5:90:F1:E8:73:70:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2f36988-cd58-366b-be04-85d10baaf08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e2:86:be:b9:4f:a1:d0:a6:e3:a1:83:35:6e:60:80:b1:72:
         eb:60:80:08:7a:b6:d8:dc:95:ba:98:07:31:97:3f:51:61:e5:
         8f:2d:7e:04:96:a8:84:c9:bb:ee:c5:28:4c:0d:49:78:65:cd:
         79:27:66:30:ae:20:ea:fe:d2:45:f9:fd:b0:ea:a3:ce:53:78:
         fb:18:b4:7b:78:57:85:8e:ab:e4:88:da:c2:96:1c:5a:f6:9a:
         f6:fc:6b:8d:d2:42:db:ba:33:0c:29:44:91:ac:f1:1c:c4:fd:
         97:f2:6c:20:34:f9:b1:f0:62:49:87:82:1d:c4:05:d2:e9:a5:
         27:b4:83:14:ba:65:aa:82:d6:4a:aa:9a:8d:4f:b0:7a:3c:9b:
         b6:d9:db:35:21:e1:9b:83:5b:7d:ff:00:ca:38:9f:a7:98:f2:
         76:21:8f:9c:cc:07:24:ca:c2:8b:45:f6:c3:b1:e6:f7:98:80:
         30:26:0c:a4:1d:81:b2:b4:87:57:e4:22:d3:56:2f:91:e1:4c:
         32:af:15:e3:9a:10:c4:fe:74:a4:14:77:ce:c8:ed:d3:11:18:
         7e:54:64:18:c3:b1:d6:f1:69:b2:59:3a:97:fd:1f:0d:c3:84:
         7a:2f:27:a1:09:c7:2f:24:ba:3e:9a:41:35:c1:2e:65:dd:97:
         1f:a1:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:49 2026 by rpki-client