Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07b5a22a-317a-36a3-8873-2039aa35b690.roa
File:                     07b5a22a-317a-36a3-8873-2039aa35b690.roa (raw, json)
Hash identifier:          t+cSxWZkteL8oTGEMCwRxt8EFcDh5cs4H5EO9QqdpAM=
Subject key identifier:   B2:EE:7C:98:A9:41:C4:6C:B0:59:6B:48:2F:1F:34:18:69:8C:8E:3A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CF67E4D987DB5EFF26A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07b5a22a-317a-36a3-8873-2039aa35b690.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        172.96.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f6:7e:4d:98:7d:b5:ef:f2:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=baee5fa1-7163-4732-89cc-7a2bd14ccd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:a9:6d:93:16:1f:0c:a8:c9:a2:1a:2a:20:
                    b6:1e:26:07:85:43:2b:47:71:b5:f5:83:d7:b8:48:
                    06:87:0f:b6:9e:9d:49:dd:e5:70:6f:5e:73:91:f3:
                    9a:8d:48:81:b7:ff:56:11:3a:c8:64:9c:dd:75:84:
                    11:d2:64:b9:b0:23:2b:6d:aa:80:40:23:63:5c:73:
                    c9:1b:eb:14:bf:ce:77:bb:b2:fa:70:03:b9:c4:41:
                    ad:40:07:dd:c5:b0:3a:f8:12:40:30:41:f1:b7:21:
                    da:34:03:bb:b1:1c:32:3e:d9:cd:bd:cc:0f:d4:76:
                    f9:21:f7:cb:3a:89:bf:58:b9:10:66:f3:b7:e8:81:
                    80:a2:7e:a0:62:41:fa:43:30:f7:c4:90:1f:f8:05:
                    c6:74:d9:86:08:5e:ae:1a:5d:ed:58:c9:20:5d:7f:
                    bb:f9:63:f2:fb:f8:9b:ee:69:57:bf:fe:b9:92:30:
                    8d:21:2b:10:67:a7:ef:cd:3f:4b:dc:4c:c4:86:69:
                    b6:21:da:f2:63:b1:07:2b:5c:d7:60:1b:ea:a9:b5:
                    cb:5b:6e:6a:f9:78:c0:95:ed:f7:8f:3b:d2:f0:2a:
                    ed:a2:fc:e9:be:57:b1:e2:2f:f3:19:6f:0d:f9:8b:
                    49:ff:68:68:d3:69:c0:3b:3e:46:20:5a:80:88:62:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EE:7C:98:A9:41:C4:6C:B0:59:6B:48:2F:1F:34:18:69:8C:8E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/07b5a22a-317a-36a3-8873-2039aa35b690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:b8:3f:00:63:61:d6:26:03:30:17:3f:37:42:48:9a:6f:3e:
         f3:e5:2c:04:23:dc:ec:8a:ee:93:b3:a3:4b:f0:c1:07:1a:ba:
         d1:18:7a:97:07:76:09:e3:e9:32:7b:c1:c1:d4:40:c3:99:87:
         b0:d4:e1:80:2f:c6:d3:d6:0e:53:61:10:b2:6e:66:4c:0c:29:
         6b:f4:f1:45:62:95:a1:5c:98:7c:d1:92:ff:93:99:fb:1e:08:
         67:66:d9:41:5f:91:87:7b:b7:de:ac:71:1f:22:14:b2:aa:fd:
         bd:4c:e1:ad:7a:c2:2d:16:38:cc:73:04:96:b4:4f:3f:69:2e:
         dc:a3:70:a2:ea:a1:5f:cb:73:81:87:20:55:d9:13:65:a8:3d:
         aa:75:47:63:a6:e8:49:61:e3:ae:af:48:c7:c1:f3:28:ad:f8:
         b9:55:66:de:b5:c4:20:2c:60:e8:1f:b6:d9:b8:4b:f4:7b:88:
         a4:15:29:a0:81:81:1e:99:d0:1e:64:d3:2b:27:8f:22:16:01:
         b0:b3:b5:75:1f:1a:a0:db:7f:58:ab:ab:28:c0:63:2f:00:cd:
         b0:10:bb:ce:59:ad:ba:e9:fb:92:5a:be:52:ec:ed:9f:4a:7b:
         34:36:77:f7:a4:1c:e5:9d:a9:df:90:68:54:7e:da:c7:27:c2:
         ef:3e:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:34 2026 by rpki-client