Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c6aeb452-9236-3b03-b699-3562539d48df.roa
File:                     c6aeb452-9236-3b03-b699-3562539d48df.roa (raw, json)
Hash identifier:          b1GsFvpR+dIYHmdF0/izwBimV68c2A335FcOpMEm8Jw=
Subject key identifier:   4F:21:F2:EE:BE:38:3B:A7:D6:5B:FE:66:F6:5D:CE:A2:09:31:76:E7
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA77B636FBD02E45ED43880
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c6aeb452-9236-3b03-b699-3562539d48df.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     54858
IP address blocks:        192.92.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:7b:63:6f:bd:02:e4:5e:d4:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=ccea0216-88cd-422f-9873-c829fbc95434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:b3:54:77:22:ea:5f:1a:a7:2b:d0:0c:f7:
                    a5:25:6c:5b:eb:42:4f:ce:c6:21:9d:04:83:b0:06:
                    ba:33:32:57:cf:cc:60:e1:49:8c:79:aa:60:c3:f5:
                    83:75:03:48:6d:60:47:82:99:3f:a9:46:07:4a:ba:
                    1c:c4:ab:e3:d1:8c:39:72:20:f8:c3:8e:f0:5f:6c:
                    6b:93:2a:26:cf:90:4a:5f:23:be:45:e0:4e:dc:a2:
                    68:e4:64:eb:d4:6c:1a:1f:cb:44:d6:1a:f5:1b:eb:
                    7a:d5:e0:9d:ca:15:30:0b:e2:94:8a:dd:6e:e5:a4:
                    20:c9:3d:b4:cd:c2:4c:61:12:ed:7d:ad:8a:1f:e7:
                    d0:d7:2d:bd:86:93:9c:e8:38:3d:c7:16:b2:82:27:
                    78:6d:2a:b5:fc:64:8f:e5:f6:7e:61:c8:f4:38:ce:
                    3d:69:57:de:2f:24:b5:f9:8b:f7:b2:37:30:ac:47:
                    44:ba:4a:e7:b0:bd:80:35:4c:ca:7e:b2:73:17:2f:
                    31:3c:2f:82:68:02:a9:ca:97:f8:de:3a:06:88:a3:
                    f9:bd:08:ed:f9:97:bc:34:f6:b1:85:2d:00:30:3a:
                    83:a0:fc:6b:3b:ed:ed:f6:80:44:46:60:3b:92:85:
                    2b:bc:e0:4f:a8:28:18:4c:da:07:5d:01:a5:d0:c6:
                    46:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:21:F2:EE:BE:38:3B:A7:D6:5B:FE:66:F6:5D:CE:A2:09:31:76:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c6aeb452-9236-3b03-b699-3562539d48df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:89:3d:fa:d8:b3:f3:3b:9e:69:11:10:6f:79:59:8b:9b:
         66:c1:5e:4a:fc:6c:03:46:b0:c3:11:ba:e9:71:af:3e:0b:11:
         5a:38:10:f8:2a:fa:db:22:1a:f7:37:e9:6a:5c:fb:45:1c:d3:
         35:69:cf:1e:eb:07:92:f8:cf:e3:43:8c:8f:69:60:29:d9:ad:
         3b:4c:96:39:1f:bc:f5:e4:bb:59:64:00:02:a4:94:0c:b1:d6:
         09:89:82:b5:5b:d9:b9:aa:2f:91:a5:60:07:6f:02:bc:2d:8a:
         66:9f:23:a9:4a:81:12:15:d4:6e:eb:9b:07:00:7f:98:b4:0a:
         76:70:fb:9c:5b:02:90:a7:e3:5f:ed:6e:c4:66:03:df:23:9b:
         b5:bf:2e:7d:00:d5:15:cc:fd:31:37:52:fd:e9:3b:09:8e:cc:
         a4:21:4d:4d:d2:a9:38:b6:cf:f7:48:f8:6d:63:dd:6d:af:25:
         df:4a:14:5f:18:c5:0a:48:e2:34:44:40:ec:ec:1d:70:1b:43:
         b6:ea:a8:76:9c:04:0d:b8:0b:4f:d3:ba:03:97:dc:55:ba:ba:
         e5:39:e1:98:0c:99:71:1d:59:0f:2d:b9:3a:2e:60:b2:93:6a:
         31:0d:c3:3f:96:57:f6:6c:51:f2:8c:f1:a8:63:6d:81:4a:11:
         73:c1:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:21 2026 by rpki-client