Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/e4f78479-b26c-38b5-83a5-2566317d6a19.roa
File:                     e4f78479-b26c-38b5-83a5-2566317d6a19.roa (raw, json)
Hash identifier:          W1GeE1KGr3/bs5XTMlL0vheMhYI0TRptfGO7Z4kSlVs=
Subject key identifier:   D3:B2:39:ED:F1:2A:51:71:59:B6:DA:83:C1:A8:60:D3:62:57:2B:40
Certificate issuer:       /CN=9f50a32d-67f6-4911-9d39-4147e96f09f8
Certificate serial:       010D0C9F4328584FAA90549B22521A1A1A648040
Authority key identifier: 0D:90:E2:47:71:F5:A4:7D:42:D2:9F:B2:51:2F:9C:25:ED:20:A7:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/e4f78479-b26c-38b5-83a5-2566317d6a19.roa
Signing time:             Thu 29 Oct 2026 19:53:41 +0000
ROA not before:           Thu 29 Oct 2026 19:53:41 +0000
ROA not after:            Wed 27 Jan 2027 20:53:41 +0000
asID:                     54413
IP address blocks:        199.167.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/9f50a32d-67f6-4911-9d39-4147e96f09f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/9f50a32d-67f6-4911-9d39-4147e96f09f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:aa:90:54:9b:22:52:1a:1a:1a:64:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f50a32d-67f6-4911-9d39-4147e96f09f8
        Validity
            Not Before: Oct 29 19:53:41 2026 GMT
            Not After : Jan 27 20:53:41 2027 GMT
        Subject: CN=879f4b41-8c10-4dec-a348-a22f25bb7a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:3a:09:9c:26:a5:87:dd:d9:30:51:f7:32:
                    fa:45:69:65:0a:a3:2d:e5:9a:26:ed:67:af:2c:68:
                    08:e8:a9:d6:89:ac:e3:75:67:71:71:a9:f4:45:3e:
                    2b:01:5c:23:9f:0a:2f:14:00:23:ac:e3:a3:0c:23:
                    1f:50:c5:13:5f:d2:c6:66:4b:5a:4a:f6:7f:cc:d6:
                    04:b5:a3:49:8d:76:34:86:b8:03:0c:2b:76:62:26:
                    bc:80:d4:87:e5:c0:bd:f8:e1:91:f3:59:ad:9d:a1:
                    f5:f5:7f:5c:da:af:3d:d9:f4:cd:ee:ec:08:f9:ff:
                    87:bb:bc:a2:90:87:c2:40:d1:48:55:22:45:bd:94:
                    fd:c9:62:ea:41:e7:3e:d5:19:7b:94:69:f3:31:ae:
                    0c:ad:96:db:81:0d:9e:17:7b:fc:bb:95:01:12:67:
                    d8:60:04:42:95:b2:39:7b:52:53:67:db:a5:20:2a:
                    0f:b0:b9:8f:3f:08:48:f5:d5:b4:8e:e8:53:ef:c1:
                    fc:bb:b1:45:f1:c3:31:a5:3e:7d:05:28:e8:3c:ad:
                    a4:78:f2:46:fc:4b:a9:75:ec:9d:9a:f4:d0:7d:fd:
                    18:76:24:8d:82:85:3c:33:75:1f:cb:d3:94:8a:5e:
                    33:20:2d:4b:6a:58:c7:da:88:e5:e6:d8:a9:1d:30:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B2:39:ED:F1:2A:51:71:59:B6:DA:83:C1:A8:60:D3:62:57:2B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/e4f78479-b26c-38b5-83a5-2566317d6a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8/9f50a32d-67f6-4911-9d39-4147e96f09f8.crl

            X509v3 Authority Key Identifier:
                keyid:0D:90:E2:47:71:F5:A4:7D:42:D2:9F:B2:51:2F:9C:25:ED:20:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9f50a32d-67f6-4911-9d39-4147e96f09f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:38:83:c7:1c:c8:74:0f:d9:f9:5f:6b:c2:2a:82:6c:87:d0:
         9f:7e:51:55:bf:41:7d:d0:b7:3d:28:b2:17:2e:54:0b:b0:8b:
         7e:af:8b:b5:73:32:a8:d2:1e:54:f1:97:c5:c4:8a:63:0f:28:
         4f:92:35:cd:98:72:ca:6d:61:79:ed:aa:2f:0f:2f:74:ef:24:
         94:d4:b4:7b:54:b0:25:31:72:40:d5:dc:80:77:09:d3:90:6e:
         91:fe:8a:3e:3c:c7:0b:f3:a9:77:b0:71:ca:71:fb:b8:ba:22:
         8b:e9:38:40:14:2d:a3:5a:d7:7b:3a:cb:2a:71:f4:42:68:14:
         9f:4b:66:13:b2:51:80:b8:9e:0c:e3:69:1a:61:3b:b1:2f:ba:
         a2:f0:b5:b4:40:90:d2:3f:21:9d:17:2f:01:9e:7f:7d:5d:39:
         94:e9:ad:96:cc:0c:98:0d:20:b3:9b:b9:45:82:d8:34:a0:a5:
         9a:1b:ee:63:53:91:36:54:87:56:63:79:75:99:c5:a7:1c:1c:
         11:0e:e0:8a:5b:75:9a:6f:3d:87:07:9a:32:c3:c5:7e:19:77:
         f6:0a:e4:3c:8b:9b:9c:6b:27:3e:ee:3f:77:68:03:ee:88:e7:
         cf:d8:f2:81:d5:f0:2e:7b:a7:40:f4:55:51:88:72:9a:85:08:
         67:77:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:45:16 2026 by rpki-client