Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa
File:                     f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa (raw, json)
Hash identifier:          ld+K9EZu0AWp/Ff9Z1w4KDdm63fTebhuJkHWdyAR2uY=
Subject key identifier:   B2:44:E2:EB:2F:D8:04:97:A9:DC:66:A8:64:A7:6C:3D:EE:4B:23:FF
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584EC371C6A3CA0FC813CE4E8380
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     22418
IP address blocks:        192.157.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c6:a3:ca:0f:c8:13:ce:4e:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=ee9a88d3-62dd-4c38-82dc-a0346352078a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:ba:f4:fb:39:9d:6d:ef:b9:f1:29:2b:0f:
                    76:a6:42:15:88:c7:56:9e:57:83:f4:91:e9:b5:14:
                    9a:2c:e5:0b:72:07:95:c5:19:52:c4:9b:42:50:76:
                    41:03:dc:14:26:22:1f:68:fd:a2:da:34:42:f2:aa:
                    d3:2b:73:a3:5c:75:a1:7d:82:c5:ca:a1:0c:85:22:
                    fb:2f:95:80:b9:e2:72:39:e6:1a:af:8d:2e:39:6b:
                    27:8b:4b:66:c0:d4:be:3b:d0:79:82:36:95:53:a5:
                    51:2e:1c:e2:f6:bc:52:fd:3a:38:8f:db:2e:be:2b:
                    46:90:3c:a2:af:8f:27:cc:3f:49:61:44:4a:0e:ba:
                    b4:75:6f:be:5b:39:2b:e1:bd:5b:2b:eb:8d:d0:bb:
                    50:c8:ec:39:ed:29:51:07:cb:91:a0:ed:2b:97:10:
                    71:52:ef:7a:e1:51:97:75:e0:f6:26:d2:a0:db:01:
                    3a:62:6f:71:22:20:1e:c2:1c:2c:f1:80:6b:d3:e5:
                    a4:0f:85:e9:9b:6b:41:12:98:0f:7d:59:f2:26:d1:
                    42:b9:f7:81:75:9c:0c:b3:76:74:ee:be:02:dd:da:
                    65:5c:dd:d1:b9:da:b5:52:b4:b0:ad:d0:ab:d5:21:
                    66:14:94:eb:86:34:fd:9d:57:87:f9:25:3c:98:2e:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:44:E2:EB:2F:D8:04:97:A9:DC:66:A8:64:A7:6C:3D:EE:4B:23:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f83cf7f5-80cd-34f0-bd2a-f587a142f1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b1:ea:70:b3:41:68:8e:2f:8a:d6:1e:67:c0:40:e3:39:03:
         95:62:26:d7:b1:6b:f9:43:c8:15:98:98:4e:64:17:28:48:e3:
         82:bb:a7:d5:fd:0d:aa:24:cf:16:81:de:66:25:45:34:d7:74:
         4d:be:75:75:7c:2f:fc:98:60:7a:bf:6c:0c:db:47:16:16:84:
         4f:fd:36:c4:c5:ab:4e:f9:0c:71:17:b0:7a:a3:0c:1e:77:15:
         7d:87:e5:3d:d2:6f:77:9a:9c:d0:91:0f:23:5f:7f:63:84:1a:
         e8:d0:4b:41:9c:8b:55:d3:31:64:0b:81:c8:6f:bb:19:f0:65:
         8b:87:fa:53:8f:94:7d:a9:70:e6:21:28:4f:0f:2c:33:52:f9:
         ee:3c:ca:40:94:e9:7d:30:25:f4:08:cf:2d:d2:8e:89:d1:43:
         2a:d1:24:d3:23:24:83:af:c6:e1:4f:73:6e:81:6b:78:cb:64:
         09:68:2e:12:50:3c:14:e8:64:c2:63:5c:bc:74:59:ff:cf:6b:
         23:42:7e:43:bd:72:04:ec:f8:e5:32:da:9d:9b:91:fe:f7:8d:
         a8:6c:2a:cd:2b:27:a3:e4:b7:5e:40:06:bf:7a:72:8f:8d:76:
         49:91:4e:0b:20:49:f0:35:29:77:ff:13:36:2e:b3:10:d9:b0:
         ce:c2:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 11:07:22 2026 by rpki-client