Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa
File:                     92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa (raw, json)
Hash identifier:          1eS6RRuUHmX7x4+wXrSNAmKfxny5W2JanfMMNm5tI0k=
Subject key identifier:   A7:A8:E1:71:90:87:11:35:6A:B6:9F:99:A4:AC:4F:83:62:89:1D:B4
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F4328584D04E23B71FE221D7451C55780
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     400597
IP address blocks:        217.149.98.0/24 maxlen: 24
                          2602:fb1b:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:3b:71:fe:22:1d:74:51:c5:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=b6f9b34d-1ccb-44c0-86ff-3e7e22800a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:d3:02:cd:26:70:fb:d1:f2:e2:f3:4f:c4:
                    7e:2e:6b:ab:af:8e:e3:9f:16:5d:74:e5:90:10:bd:
                    25:a5:5d:04:b3:8f:37:d6:23:1b:8d:14:ce:63:32:
                    fb:d1:33:cd:cb:ca:08:35:93:f5:62:fb:be:7c:f2:
                    af:b3:43:e1:35:7b:b2:8d:f7:de:8e:32:7f:c9:62:
                    85:12:d2:32:6b:aa:e5:14:33:5e:b7:47:95:75:db:
                    13:76:d2:07:57:9f:84:5c:64:be:cc:29:8b:f2:47:
                    27:19:e6:72:7a:b9:07:76:a8:4c:6a:cb:d8:9b:0b:
                    48:62:25:8b:2d:4a:8b:f0:f1:34:d6:6b:7d:e6:72:
                    fc:9d:b8:a6:8e:32:4d:f7:3b:b4:ce:33:31:99:8e:
                    b4:bf:2e:db:cd:ce:8f:23:04:47:9e:18:bf:09:91:
                    21:8a:8a:eb:f3:6e:ca:fa:06:78:a8:6f:fa:b2:81:
                    2e:c4:f5:38:49:88:fe:8c:95:bf:4c:55:25:bb:4e:
                    82:71:4e:83:b6:05:97:35:e7:8a:0b:66:bf:d3:55:
                    63:9c:74:66:72:c7:a4:81:98:b5:77:9e:ba:86:aa:
                    03:98:8f:12:70:d7:c3:db:e6:be:18:0f:0b:5a:aa:
                    54:f4:51:ee:b4:9e:88:db:85:1f:e0:e9:a6:98:c9:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A8:E1:71:90:87:11:35:6A:B6:9F:99:A4:AC:4F:83:62:89:1D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/92cf6e7a-f0e7-38b9-b921-2c6a2e7c80b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.98.0/24
                IPv6:
                  2602:fb1b:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:dc:f7:96:03:f1:67:74:13:a1:7d:71:01:0e:45:ff:61:
         64:7a:a1:4f:c8:97:c9:44:a8:42:94:bb:53:5e:d4:8d:f1:70:
         13:7f:30:44:d2:40:67:22:2f:8b:ab:e5:9d:1b:20:02:dd:47:
         9e:b2:38:aa:00:b5:ee:48:8e:1a:c9:45:77:ae:9c:d6:1b:da:
         94:31:74:ef:df:8e:94:2c:c6:2b:2e:e5:c6:9e:c1:95:90:21:
         bc:d1:a4:9d:6d:0a:52:d8:cd:bf:65:18:00:79:e9:9f:85:dc:
         02:57:b9:8d:bc:8a:71:e4:20:e7:d4:65:a1:ae:b5:eb:72:e4:
         3b:b6:3e:f0:c2:a8:64:f4:94:4c:86:b6:a4:36:68:7e:1e:ce:
         ba:95:8f:cf:74:bb:dd:62:87:a3:e6:c5:3b:48:a2:bc:bb:03:
         46:60:89:6b:fb:09:08:5a:b3:cd:6d:d5:bb:35:21:88:07:f4:
         23:5f:7b:a4:2d:10:9b:83:3f:b2:9a:69:28:0f:6a:23:1d:d0:
         20:db:a4:bd:e4:98:33:27:8c:24:b0:a6:39:d1:e8:4c:cb:e8:
         26:fa:a8:e8:f6:a0:be:65:c3:ee:88:e1:9f:91:38:12:d5:20:
         2d:16:cd:66:a6:34:ed:98:11:be:ad:76:f3:0b:de:e5:e3:53:
         05:bf:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:36 2026 by rpki-client