Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8d14ac84-8980-3e23-8fd7-466e244ad469.roa
File:                     8d14ac84-8980-3e23-8fd7-466e244ad469.roa (raw, json)
Hash identifier:          EbDANPmCdInDK/W4xCQFz3vDU2+VJ66hLGP6IP01608=
Subject key identifier:   79:0C:DA:F3:FA:AA:DA:4C:64:E3:16:5D:C0:FB:F8:47:0F:5D:B6:7F
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584F2C22589852B76F26BA789280
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8d14ac84-8980-3e23-8fd7-466e244ad469.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     395383
IP address blocks:        192.157.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:58:98:52:b7:6f:26:ba:78:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=6a956d16-f25b-421f-a8b1-29952d02ceb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:ad:c6:82:44:64:fb:21:03:86:d4:0e:16:
                    45:89:86:6e:93:bb:ad:8b:0d:f0:ec:b4:ff:b1:06:
                    2a:7a:95:15:2d:9d:b6:8d:c3:b3:a6:4b:7f:50:17:
                    43:07:c0:79:7b:31:e4:04:07:e2:7a:0a:75:dd:55:
                    52:3f:c3:41:da:33:fc:92:3f:03:8d:7b:69:e9:f5:
                    4d:91:77:94:e6:73:8a:02:60:d0:27:aa:d4:ff:41:
                    20:1a:2d:9e:37:a5:52:fb:b9:c6:77:c0:91:e6:0a:
                    a6:a9:f0:81:5e:60:10:ec:ac:ea:34:a8:f9:b4:01:
                    d3:e9:54:1f:c8:35:ab:c2:27:ec:b8:a0:46:7a:85:
                    ce:43:57:ce:7c:62:a1:20:86:82:f8:96:4b:4d:15:
                    06:7f:3c:6b:06:cb:9d:09:1d:ce:5d:0f:0c:81:7b:
                    ee:ac:df:f7:67:9c:67:a2:29:29:19:c7:b2:5a:56:
                    20:b3:81:77:3f:80:7b:d2:70:17:f9:bf:35:07:98:
                    6c:e0:0a:c4:1a:b0:82:c3:74:59:68:db:3b:08:d4:
                    77:b9:55:65:c9:a7:d2:08:c4:db:85:13:c9:50:c4:
                    b8:d3:00:81:f8:5d:d1:85:ad:ab:5e:37:5a:07:36:
                    42:6e:15:4c:bb:0d:b5:79:1a:8a:ba:90:13:4e:cf:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0C:DA:F3:FA:AA:DA:4C:64:E3:16:5D:C0:FB:F8:47:0F:5D:B6:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8d14ac84-8980-3e23-8fd7-466e244ad469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ee:81:ac:64:ba:cd:bb:b6:8d:6c:97:84:c5:4a:ce:67:b5:
         78:0c:4a:47:1c:93:7b:fd:59:99:a3:07:56:a8:55:97:ed:11:
         c2:57:9b:77:ad:e6:ae:8c:32:b8:fe:a5:3c:e9:a1:ee:2b:0d:
         bd:e6:10:01:b1:31:04:30:ab:72:98:5d:b6:12:cc:3a:2d:ba:
         1d:68:46:50:df:fd:0f:d9:7c:d5:0d:ce:9a:f9:b8:52:12:a5:
         c7:b2:0d:c9:5c:c2:04:63:1b:aa:d8:d9:23:31:5d:29:52:5b:
         a0:2b:55:c6:ae:ec:ba:4c:7d:0a:dd:7e:e6:53:84:51:53:c5:
         25:49:b7:8e:16:e8:8d:45:c2:a4:9b:8f:91:9b:4a:13:cc:2b:
         ab:77:e1:e8:37:f7:be:31:df:2a:39:3f:51:f2:49:75:cd:f7:
         a6:c9:b7:4e:83:4a:b0:06:49:f1:fd:cf:fe:f3:8f:37:6e:a4:
         00:b3:92:e3:ca:7c:ec:a0:71:21:e3:3c:fd:7e:30:8b:09:34:
         d8:1e:4a:79:27:9a:75:15:28:f8:fb:14:93:c8:4f:d0:81:8c:
         16:98:b3:65:23:5f:0e:c3:85:b3:67:7c:d3:3a:41:1f:91:db:
         10:35:7a:a8:84:33:39:e0:d2:f1:a4:a6:de:74:c8:52:4d:43:
         65:4a:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:56:58 2026 by rpki-client