Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2/fcbd3a85-7448-330b-8f51-44769cc540c8.roa
File:                     fcbd3a85-7448-330b-8f51-44769cc540c8.roa (raw, json)
Hash identifier:          nK3WR2aLdb2wlvuly1eTZLb/CdTUlZtodizV4hCwz1c=
Subject key identifier:   AE:E1:ED:8A:95:1C:0F:AB:F6:F6:89:AE:1A:75:CF:D1:1A:E8:47:12
Certificate issuer:       /CN=392296ab-ec32-439e-863b-c0973068d2a2
Certificate serial:       010D0C9F4328584F1F1B34D9939E7C2ADA3B3980
Authority key identifier: A3:FA:AC:1E:E1:CB:6B:BF:FE:9E:EE:01:10:1B:07:E3:E6:DD:20:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2/fcbd3a85-7448-330b-8f51-44769cc540c8.roa
Signing time:             Wed 09 Sep 2026 21:00:20 +0000
ROA not before:           Wed 09 Sep 2026 21:00:20 +0000
ROA not after:            Tue 08 Dec 2026 22:00:20 +0000
asID:                     10761
IP address blocks:        204.28.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2/392296ab-ec32-439e-863b-c0973068d2a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2/392296ab-ec32-439e-863b-c0973068d2a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:1b:34:d9:93:9e:7c:2a:da:3b:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392296ab-ec32-439e-863b-c0973068d2a2
        Validity
            Not Before: Sep  9 21:00:20 2026 GMT
            Not After : Dec  8 22:00:20 2026 GMT
        Subject: CN=70b04db5-17f7-4bd9-8f33-a5d0944a02b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:c9:89:97:00:04:2f:e6:c5:b3:2d:43:1d:
                    0c:0c:8f:1d:c8:cb:e6:cc:74:75:4f:09:b5:98:0f:
                    3f:92:4f:48:50:17:59:5d:a3:87:f8:2c:5b:13:6d:
                    63:c6:64:11:05:c4:e1:f5:2c:c1:3d:d8:bd:71:51:
                    ef:38:fe:fb:a6:bb:97:17:d7:2b:57:c1:d3:cc:58:
                    6b:d5:02:11:c6:38:4b:60:f7:40:70:60:ad:8a:36:
                    ec:45:b7:fb:b3:f9:88:7c:6d:30:b5:2f:f1:23:84:
                    88:23:ef:7d:34:8f:16:34:9e:c2:2c:b6:01:96:68:
                    f5:5b:7a:fa:8c:4b:61:96:ea:5f:4a:45:ea:aa:63:
                    4d:68:e7:96:84:a8:58:4e:df:a6:fe:67:15:c3:ac:
                    6b:84:3d:b9:79:55:16:3a:19:23:94:63:33:6c:7b:
                    41:e6:3e:22:80:ff:87:c3:f8:2e:66:f7:1c:b8:17:
                    d6:3b:21:23:ec:c4:bc:2b:7e:b9:0d:66:ac:b1:08:
                    65:a6:da:eb:94:fe:b0:61:92:bf:d9:ff:eb:06:1f:
                    e6:42:dd:a6:18:7a:80:77:9b:46:50:f3:3b:6a:fa:
                    5e:1e:a0:2f:cf:be:56:c7:41:ce:b0:24:96:05:91:
                    f0:04:02:30:62:b8:64:cf:17:77:c5:cd:33:cd:f8:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E1:ED:8A:95:1C:0F:AB:F6:F6:89:AE:1A:75:CF:D1:1A:E8:47:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2/fcbd3a85-7448-330b-8f51-44769cc540c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2/392296ab-ec32-439e-863b-c0973068d2a2.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FA:AC:1E:E1:CB:6B:BF:FE:9E:EE:01:10:1B:07:E3:E6:DD:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/392296ab-ec32-439e-863b-c0973068d2a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.28.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e3:d0:ed:a9:52:b5:d3:7d:aa:75:51:f2:d0:12:61:d3:61:
         d9:61:f4:d3:86:91:e7:e5:9e:e6:38:87:b0:9e:73:4e:e1:b1:
         90:b9:7d:2e:c2:5d:5c:f5:a3:cb:b5:f9:b3:34:e7:d1:99:81:
         8e:1b:b0:f2:90:79:e7:a2:a9:e9:c8:14:76:57:3b:3e:d4:ad:
         27:ad:c2:7c:eb:99:93:91:ae:5f:38:d6:03:65:9f:0f:9a:3a:
         38:ac:71:b0:86:70:47:9b:28:f9:97:10:99:13:e0:95:b1:35:
         18:93:1f:2a:d4:73:75:a2:7a:c7:20:31:06:38:39:76:f3:b2:
         c6:84:76:24:94:c9:af:4b:2f:5a:99:5b:df:b0:f3:e8:00:86:
         b2:f3:e0:f4:43:31:13:06:94:b4:eb:7e:bc:f4:8b:66:c0:6a:
         b4:ae:38:83:44:c9:74:b4:28:a9:cb:25:7c:07:2e:b0:b9:bc:
         dd:44:4b:4b:3b:0d:35:8a:b9:63:7c:79:18:c5:b8:35:04:73:
         2d:a8:b1:ed:5d:b6:ae:9d:27:b1:cb:b5:e6:9a:2e:54:45:34:
         fd:9c:cd:c2:e9:3a:62:bc:bf:22:e6:4d:0f:d8:7b:b5:17:e7:
         76:da:5c:f8:2b:0d:2d:50:91:1c:f9:57:bd:5c:d9:3b:ee:0e:
         ce:18:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:59:44 2026 by rpki-client