Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f92f826c-d19a-372d-8b84-97fc970927fa.roa
File:                     f92f826c-d19a-372d-8b84-97fc970927fa.roa (raw, json)
Hash identifier:          dHWWdFiefTWdN0/HioOiJHdKnyGGb3EZ7v6HCUV7xhY=
Subject key identifier:   8C:14:86:DE:62:A6:DF:0B:F3:21:B6:C3:66:72:5B:61:1C:D4:D5:EB
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584CFC823CF681A92C781CADA4C0
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f92f826c-d19a-372d-8b84-97fc970927fa.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     11377
IP address blocks:        216.20.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:3c:f6:81:a9:2c:78:1c:ad:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=dee19448-32c2-41ae-beb4-c734b08e5253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:47:7f:06:e1:15:0b:19:17:82:ea:e1:9c:
                    ce:02:21:a9:a6:63:5d:cf:3c:d3:54:8b:f2:e8:9c:
                    0d:c9:51:69:18:fc:5e:9b:77:51:eb:7d:c8:9f:17:
                    83:6b:a6:de:e7:15:8d:34:86:f8:d9:04:97:5c:b6:
                    68:61:14:02:50:ee:6e:ee:82:8d:c0:ac:b5:d6:eb:
                    9b:94:c9:b5:ec:96:75:b1:e2:db:7c:72:49:3b:13:
                    29:08:db:58:3f:af:ba:ac:af:00:50:bf:98:df:87:
                    34:92:65:83:80:63:c5:7a:24:62:39:31:94:fa:25:
                    f3:56:53:78:eb:4b:c0:e9:73:17:31:56:15:98:67:
                    62:f5:80:f6:e6:43:09:01:c5:59:7d:ad:e1:74:3a:
                    5c:d0:60:f6:a8:d7:34:d4:9a:61:e3:82:46:6a:45:
                    7b:90:49:5c:ab:e9:72:85:1e:4f:c0:91:62:78:e6:
                    50:97:31:4c:6c:ed:87:93:1f:da:41:5d:00:a2:99:
                    3b:14:ed:f2:d3:7c:bb:84:38:3e:12:75:b6:25:e6:
                    ef:30:15:73:8b:a1:07:7f:cb:7d:42:87:ff:0a:72:
                    3a:8f:88:77:e9:96:75:4f:81:68:d9:8a:b9:06:98:
                    10:b2:af:48:2b:17:85:00:b5:a7:07:ea:e7:06:0d:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:14:86:DE:62:A6:DF:0B:F3:21:B6:C3:66:72:5B:61:1C:D4:D5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f92f826c-d19a-372d-8b84-97fc970927fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9e:54:52:e6:d9:c2:d5:b6:52:3c:b9:69:8f:4d:73:4f:2b:
         66:d1:83:ee:5f:98:fe:95:31:81:dc:a5:70:62:46:b9:f6:ab:
         35:c5:cc:ce:75:c5:42:96:3e:c8:a8:c5:24:72:aa:a6:45:1a:
         57:d9:62:29:2e:40:fc:57:ef:67:b3:8c:9a:04:fb:b2:6f:cf:
         58:24:bb:b4:e1:98:14:df:9f:4a:4f:99:b7:8a:fc:3b:c7:84:
         07:07:8b:a0:81:db:db:2d:ca:73:78:fc:e7:30:c5:ee:16:bc:
         7e:1b:c0:34:04:cd:0d:65:b4:f8:48:27:13:a4:4a:00:50:46:
         0f:d0:75:6e:3b:71:64:77:49:cb:a1:1c:94:9c:c8:e0:40:74:
         5c:15:8a:64:2e:78:8f:35:fa:8a:ff:6e:50:6d:58:cc:a4:77:
         b0:5a:f2:82:b7:7f:37:60:89:99:f8:91:d9:4b:4d:58:41:11:
         34:2c:73:1c:96:57:48:6d:be:1a:66:ac:06:06:fc:64:41:38:
         6d:9b:f9:68:17:5d:b2:57:22:e8:b2:50:af:3c:85:fd:1d:f9:
         3f:63:2f:c6:f2:59:40:7a:cc:9f:00:85:c7:96:c0:e3:af:d2:
         53:98:ad:71:e2:bd:7b:1f:19:70:ec:fb:d2:ea:62:fe:4e:6f:
         12:f3:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:11 2026 by rpki-client