Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/2d86e7d9-cf4b-3959-b5b1-c0670941201f.roa
File:                     2d86e7d9-cf4b-3959-b5b1-c0670941201f.roa (raw, json)
Hash identifier:          g1cFvMC+Bh3IsxgXjf7+Rs1jC4F+FiUxDsrFQQYxvKM=
Subject key identifier:   9E:DA:FB:A0:08:4C:37:A9:D2:78:7E:80:B7:FF:86:E7:E4:8E:3C:21
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584B99D7949CBF25E9690CFF8500
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/2d86e7d9-cf4b-3959-b5b1-c0670941201f.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     27419
IP address blocks:        208.92.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:94:9c:bf:25:e9:69:0c:ff:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=9badfa85-8c21-4f11-903f-fe1d24ae64d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:2e:e3:c8:2d:01:79:c9:30:21:58:80:f6:
                    86:b1:36:b2:cb:43:00:62:29:a8:41:87:a6:46:27:
                    87:40:58:1f:78:8c:21:26:1a:b8:55:e7:b7:c7:6e:
                    4f:6d:40:9c:09:7c:b8:70:8b:28:a5:e6:6d:ff:4f:
                    4f:ad:c7:df:d7:96:79:0b:0c:ae:86:7a:4f:ae:b0:
                    fb:bc:5b:dc:24:2b:66:08:4b:af:03:b8:3f:dc:a5:
                    de:91:29:19:e0:fe:f7:bc:c3:04:9e:9b:11:04:ab:
                    f9:1f:b5:a8:05:b6:36:94:48:54:2f:66:59:bc:5e:
                    48:b0:6a:a2:d2:76:a9:62:6c:5f:4c:e7:78:57:32:
                    99:a3:a4:e6:a4:9d:e7:2f:b1:9f:c4:a1:2a:7b:a1:
                    d2:6c:f4:dd:0e:a0:ca:7b:e6:58:d3:ec:24:8a:2c:
                    8d:af:cf:00:d6:83:4a:31:9c:a1:bb:11:aa:55:41:
                    dc:fc:17:c3:84:d3:66:68:9d:09:f9:d5:8c:7b:2b:
                    a8:89:ab:fc:e6:f2:c7:70:47:b9:df:e2:d8:f0:6b:
                    a8:7b:ef:4d:3e:28:4e:14:3f:74:16:65:85:b3:0c:
                    e2:b9:0a:b0:69:9c:8b:73:30:1f:e8:3c:8e:8e:1e:
                    35:e0:1e:6d:9f:69:01:2e:98:6a:79:cb:af:df:f9:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DA:FB:A0:08:4C:37:A9:D2:78:7E:80:B7:FF:86:E7:E4:8E:3C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/2d86e7d9-cf4b-3959-b5b1-c0670941201f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a7:05:6b:c9:29:3b:40:c0:eb:38:ef:c0:7d:0f:dc:f3:5b:
         97:4b:26:fb:59:c6:43:91:e0:4d:e4:b8:66:91:7f:97:6b:25:
         ac:f5:39:17:52:f7:98:42:b2:ae:7b:47:31:0d:4b:ca:74:5c:
         3d:69:9a:d9:69:e7:a4:9b:dd:ad:86:54:a4:e3:53:b9:4a:b1:
         a7:11:c9:ab:ab:f6:ca:06:4c:d2:0c:ed:8b:dc:d7:d5:7d:f4:
         48:37:b4:04:db:be:e4:11:29:8d:06:c3:3c:06:64:77:a6:a7:
         c4:63:47:64:40:d0:29:ef:f5:bd:dd:87:f8:79:bd:58:18:3c:
         02:88:7e:03:fd:06:c4:f5:02:83:15:f1:44:2b:31:ba:5a:18:
         1b:d5:de:7f:69:90:16:9f:a8:79:a8:34:51:93:cc:c3:3d:79:
         3c:c9:02:39:27:4a:65:6e:ec:7c:6e:45:5b:b1:4c:34:40:ee:
         46:3c:30:d9:77:12:77:f7:90:40:ed:fc:3c:87:c3:77:95:37:
         d7:a7:f5:97:6b:fd:33:c3:09:b4:6d:ff:46:00:71:a6:25:0d:
         98:b7:e3:e8:04:b0:86:33:8b:32:47:b0:87:1d:36:2a:1b:a3:
         33:80:34:82:b8:dc:47:2e:9e:b3:ca:e7:1a:a3:8f:23:98:c6:
         12:95:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:30:43 2025 by rpki-client