Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa
File:                     28ad8c15-6504-3448-80f6-48cbd21dac70.roa (raw, json)
Hash identifier:          WM9xAwYpuMnyy89q9Uqhw0lZnyv+/+XniMRccvexurI=
Subject key identifier:   92:5D:7D:A8:30:1D:BA:52:6F:E3:8D:BB:E7:53:14:F1:48:62:43:A8
Certificate issuer:       /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
Certificate serial:       010D0C9F4328584F4C3D77B443C6BAD366104D00
Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     31782
IP address blocks:        192.219.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:77:b4:43:c6:ba:d3:66:10:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=4ad3ea2b-bdce-4634-a3aa-57b5e0fe3a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:f9:46:54:75:8d:78:64:e8:74:97:b4:c3:
                    9e:86:e2:64:7d:c2:82:be:e6:6d:8f:cd:25:87:97:
                    7d:eb:ba:47:3e:35:ab:e9:eb:47:46:e4:2b:50:3f:
                    c7:a9:aa:32:4a:52:69:e9:8f:3c:a6:34:16:cb:dd:
                    8f:39:76:da:61:e2:33:34:ef:ab:a8:c1:81:17:47:
                    3c:2c:59:7b:2a:10:c5:27:bb:c1:1c:9c:44:f4:9f:
                    6e:22:d4:9f:29:82:06:7e:2b:be:95:b1:52:4e:d0:
                    3b:7f:e0:e2:35:64:75:48:65:bb:f1:17:c9:35:3a:
                    e5:a7:3e:82:04:e2:a8:0e:c4:ac:c4:0f:3d:ed:18:
                    37:df:cb:f0:55:55:0a:4b:25:b5:98:aa:cb:58:82:
                    ea:c4:7a:39:8c:37:64:52:08:8c:a7:2b:bc:b5:22:
                    29:46:5b:9a:fc:a6:49:66:99:a9:1e:c7:56:4d:5d:
                    93:4a:1f:1e:c3:5f:85:cd:b6:9a:9a:84:e2:e0:29:
                    60:44:f4:79:ac:13:e8:1d:c0:da:ab:7e:c0:2e:e5:
                    ce:e2:cc:05:e0:3b:b2:ea:11:21:a9:18:2c:f5:bb:
                    b2:d4:f6:21:04:79:f6:be:6e:07:e6:1e:c9:2c:b2:
                    e6:4e:50:b3:bd:97:fa:fb:71:b2:91:4b:76:0e:f9:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5D:7D:A8:30:1D:BA:52:6F:E3:8D:BB:E7:53:14:F1:48:62:43:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:6e:d2:84:44:d7:0a:21:e7:da:f7:6e:f0:ff:e9:4c:d0:
         67:bb:6f:8c:7c:86:9d:fa:be:7e:c4:da:ff:68:11:1d:73:38:
         2e:71:05:cd:f0:9b:1b:a4:9f:97:37:bd:62:15:bd:a7:b8:9b:
         5c:78:c8:32:94:9b:ba:f9:6c:3e:a2:5d:8f:4f:59:ec:07:f8:
         c9:3f:cb:76:c0:7e:da:4d:ab:15:aa:af:52:6b:d0:48:15:7c:
         eb:9d:ca:48:68:bf:04:dc:08:2c:73:c4:7f:55:91:47:c9:4b:
         30:94:5e:ab:6a:84:f8:9a:90:67:1c:0b:ad:17:d9:1f:e6:30:
         c0:fd:df:8e:25:65:15:6b:bf:96:39:90:2d:81:dc:3a:b5:48:
         88:d5:6f:3a:e5:88:14:20:89:d6:3a:f7:03:65:88:47:0a:ce:
         fe:bb:36:26:f5:63:c8:cd:81:08:e9:3f:17:fd:f3:81:18:49:
         3f:c4:58:99:ac:78:b2:ff:32:87:2a:83:e9:48:0a:00:3b:4f:
         73:cc:b7:42:1a:16:f2:81:f5:39:0f:6f:08:ce:1f:41:88:cb:
         a4:58:40:38:f8:3c:04:c9:d0:71:a2:73:13:10:7e:ba:44:e3:
         59:64:1f:68:59:8a:9c:13:69:52:17:b0:fe:12:88:07:f1:40:
         bb:78:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:54:51 2026 by rpki-client