Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c92bee54-7f7d-322d-b666-2cb6ce7fa820.roa
File:                     c92bee54-7f7d-322d-b666-2cb6ce7fa820.roa (raw, json)
Hash identifier:          rT+6AS8Pdm29gsSpz46Axlm5lhV6qazKAHuW+/sd8Z0=
Subject key identifier:   50:15:40:3A:4D:CE:C5:C5:64:4C:B6:D9:DC:01:65:D8:74:FE:6B:71
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E9B0A56A658A136F6A5FF4E00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c92bee54-7f7d-322d-b666-2cb6ce7fa820.roa
Signing time:             Fri 24 Jul 2026 13:39:38 +0000
ROA not before:           Fri 24 Jul 2026 13:39:38 +0000
ROA not after:            Thu 22 Oct 2026 13:39:38 +0000
asID:                     395466
IP address blocks:        38.92.160.0/21 maxlen: 21
                          154.27.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:0a:56:a6:58:a1:36:f6:a5:ff:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 24 13:39:38 2026 GMT
            Not After : Oct 22 13:39:38 2026 GMT
        Subject: CN=bd1a9a33-3e76-4548-b462-5c4df9d33b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:65:ec:76:3d:13:b0:fe:86:a9:29:8f:0d:
                    20:84:60:81:62:d0:ae:00:4f:c2:ae:62:99:ae:e6:
                    0b:d9:68:9a:cf:50:82:81:84:e2:41:5c:36:16:1a:
                    9c:04:6c:4a:80:cb:a8:e7:45:c7:d0:0d:1c:1d:d4:
                    a5:50:dd:5b:fa:69:85:6f:4a:12:1b:8a:37:d8:c3:
                    b0:82:7e:6f:71:2e:69:d2:82:f6:1f:87:69:6b:42:
                    46:2f:c5:34:19:e9:42:26:4f:8c:15:15:de:f6:d9:
                    a0:33:eb:9f:ff:b7:54:e3:df:61:68:0f:98:a9:69:
                    4e:04:8b:42:07:ae:4d:78:1e:90:24:31:f5:45:04:
                    eb:d2:63:90:72:42:1b:17:db:ba:ae:62:d4:33:5c:
                    10:b6:e9:09:69:b0:e2:88:48:3a:a2:f7:27:59:ee:
                    6a:28:a3:0b:bf:c3:79:15:d7:64:8f:0b:40:50:28:
                    28:08:48:65:dd:c3:4e:f7:74:bb:0a:9c:62:80:31:
                    5e:55:0f:7f:ee:4b:3f:e8:c4:ae:a8:bd:48:45:d2:
                    20:57:e7:e6:c5:cd:dc:0c:01:60:0b:92:10:f9:72:
                    cb:48:fb:b4:e6:96:a5:4a:28:1c:eb:64:a3:58:5b:
                    8b:61:c4:cc:c4:61:74:69:48:31:62:14:fd:9f:2c:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:40:3A:4D:CE:C5:C5:64:4C:B6:D9:DC:01:65:D8:74:FE:6B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c92bee54-7f7d-322d-b666-2cb6ce7fa820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.92.160.0/21
                  154.27.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:47:04:6a:78:14:b4:e5:db:1b:12:e2:3d:c2:ef:c2:08:69:
         e1:89:58:e0:24:70:b1:d8:da:be:79:c9:84:96:ec:4d:3f:bd:
         ad:f4:03:81:b3:ac:77:88:09:15:3f:c1:17:28:5a:f8:9b:8d:
         33:ff:25:a8:d7:7a:d7:fe:58:a8:97:22:b4:df:5f:87:f1:c5:
         84:17:15:87:d8:fa:13:cb:a3:ed:52:15:d1:b0:04:12:d8:d0:
         ca:13:54:82:90:be:6d:e0:a4:55:f0:ae:29:4c:f1:9f:db:bf:
         7d:cb:19:17:dd:22:83:ad:ff:9e:64:d7:b5:8b:dd:72:57:da:
         40:cc:7b:73:cb:d2:bb:63:c6:03:b6:64:a6:9b:37:f8:96:18:
         c1:d6:29:db:f6:b5:bf:27:6c:8d:04:eb:8b:bb:a3:e7:7d:31:
         8f:83:0d:95:db:1e:74:09:02:7f:4e:c0:a5:58:8e:bb:4d:ce:
         8f:c1:49:9d:47:c0:66:b0:37:3a:b0:f1:49:ff:1d:d7:c2:04:
         5f:bc:d7:44:3b:5c:46:fb:3b:4a:7d:dd:7d:cd:6d:69:6d:59:
         be:cd:93:a9:5a:14:60:fe:b8:a5:6f:b0:fe:20:2b:68:bc:27:
         51:78:0a:f5:76:68:2c:62:e6:c1:75:43:4d:cf:bc:6e:1f:47:
         df:cc:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 00:16:25 2026 by rpki-client