Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf/7e3c16fd-3b6f-3359-85b4-5c3e69583a7b.roa
File:                     7e3c16fd-3b6f-3359-85b4-5c3e69583a7b.roa (raw, json)
Hash identifier:          GIpMh5b4cJU46uh1bNipQM7VhWZEqAR8P9Rhz15mz+c=
Subject key identifier:   E2:92:AE:ED:84:1B:AF:CB:5F:75:54:CB:DA:41:03:B1:6F:F4:7D:19
Certificate issuer:       /CN=bf06f3ad-30fd-4ec6-b416-804957150bcf
Certificate serial:       010D0C9F4328584FA8A5F322D6A2E3ED6D1BA8A0
Authority key identifier: 07:EA:1D:E2:57:63:34:E9:EC:DD:0A:6E:ED:B8:88:1A:5B:C3:AC:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf/7e3c16fd-3b6f-3359-85b4-5c3e69583a7b.roa
Signing time:             Thu 29 Oct 2026 03:25:37 +0000
ROA not before:           Thu 29 Oct 2026 03:25:37 +0000
ROA not after:            Wed 27 Jan 2027 04:25:37 +0000
asID:                     41171
IP address blocks:        156.9.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf/bf06f3ad-30fd-4ec6-b416-804957150bcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf/bf06f3ad-30fd-4ec6-b416-804957150bcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:a5:f3:22:d6:a2:e3:ed:6d:1b:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf06f3ad-30fd-4ec6-b416-804957150bcf
        Validity
            Not Before: Oct 29 03:25:37 2026 GMT
            Not After : Jan 27 04:25:37 2027 GMT
        Subject: CN=53f2f360-0d18-4df5-91ec-de43ecac4af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:f2:f6:7f:32:b4:78:14:95:55:31:a2:92:
                    27:d0:94:9a:dd:0c:ba:86:96:14:0a:4c:35:e3:95:
                    9b:78:8a:2c:bd:20:ff:fe:48:0b:d4:ee:b6:db:82:
                    01:41:a7:4a:63:3a:fd:43:88:67:65:dd:16:9e:8e:
                    2b:77:81:83:fc:93:80:5b:ca:b4:2c:49:cc:a8:4b:
                    62:4b:47:bf:25:09:3c:e5:f6:52:d3:fd:b7:01:9a:
                    fd:01:64:62:d1:33:c3:56:ae:55:02:8e:38:b9:f7:
                    3e:9a:d7:14:4e:68:d8:6d:74:e4:ab:76:52:1a:8c:
                    1b:1f:f3:34:b7:ff:f4:18:f5:bc:4d:9c:a6:62:aa:
                    40:19:ee:c9:ba:4f:35:b4:35:89:ba:ee:45:56:54:
                    92:1b:df:ef:ee:e1:c9:d0:44:22:3c:ee:60:d0:f2:
                    52:22:0d:37:b3:dc:b5:94:ea:59:88:ff:d8:54:06:
                    c8:36:c0:53:1e:e4:af:0e:fb:d9:c9:6c:9f:88:e7:
                    d2:9f:b1:20:8a:57:cd:d4:ca:4b:0c:45:9a:13:10:
                    c4:b2:35:df:7d:5f:16:82:58:81:3a:43:ba:38:df:
                    4e:e9:56:b3:ff:01:24:7e:c5:89:02:00:12:89:6e:
                    53:ee:31:d1:72:7b:b9:e2:dc:8a:f6:43:a4:27:24:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:92:AE:ED:84:1B:AF:CB:5F:75:54:CB:DA:41:03:B1:6F:F4:7D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf/7e3c16fd-3b6f-3359-85b4-5c3e69583a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf/bf06f3ad-30fd-4ec6-b416-804957150bcf.crl

            X509v3 Authority Key Identifier:
                keyid:07:EA:1D:E2:57:63:34:E9:EC:DD:0A:6E:ED:B8:88:1A:5B:C3:AC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bf06f3ad-30fd-4ec6-b416-804957150bcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:ed:88:47:d6:8d:e2:02:1c:79:5f:58:2c:38:1b:86:b1:
         61:9e:c6:c1:47:c2:3c:a2:70:ea:e9:83:38:69:87:25:d9:89:
         92:dc:90:35:a7:87:b7:53:4e:3f:ae:d1:6e:14:4f:1c:ba:98:
         36:01:d8:d3:1a:fb:29:04:5d:15:d6:58:77:8d:1a:e2:a8:07:
         38:d5:ca:f7:af:a5:2d:f2:09:5d:da:37:cd:30:23:61:f5:59:
         8f:bd:64:fd:3f:33:c7:ff:2f:a4:e0:95:1e:3b:64:d6:01:e3:
         ca:55:52:d9:12:b3:b6:81:cb:d1:11:fa:91:21:96:55:9a:68:
         8e:23:93:75:97:5e:4f:07:24:dc:1f:89:77:ca:f4:f7:df:2c:
         2b:84:d2:7f:3a:64:30:d8:bc:ad:f9:fc:d0:13:1d:97:ea:13:
         e3:89:79:16:f4:78:d9:87:7b:3b:4d:cc:5a:b5:c9:21:b8:1e:
         dc:cc:44:81:a6:38:c2:61:1b:71:36:bc:4e:ab:1d:0c:7c:be:
         aa:95:a4:df:18:d0:9a:97:97:0d:59:dd:23:5f:96:fc:1e:1a:
         53:e9:e6:bb:22:7d:a1:ac:c8:8e:c5:b9:10:78:ec:27:ea:40:
         b9:01:5e:26:fb:9b:4e:00:bd:a5:7e:15:9a:0a:fd:1d:1e:bb:
         92:ab:af:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:25:22 2026 by rpki-client