Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2778e021-0621-3daa-8765-b47a345797d3.roa
File:                     2778e021-0621-3daa-8765-b47a345797d3.roa (raw, json)
Hash identifier:          Cgj5IUN9RqA9lCrICP6W5SUWvIMHDrH3j1COXVtTf6w=
Subject key identifier:   9B:FA:2F:2A:55:E5:FF:30:46:56:04:83:AD:C9:63:B0:A3:C6:BF:3D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07F777A4A50724B2989A40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2778e021-0621-3daa-8765-b47a345797d3.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        128.92.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f7:77:a4:a5:07:24:b2:98:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=781ec9c1-efec-406f-b3f7-cff1c86b16f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:7a:a2:5e:e2:10:74:19:30:28:63:6e:97:
                    4f:b3:de:39:b4:70:ee:5e:f9:c7:66:85:cd:e7:b4:
                    46:49:56:46:91:a3:b8:72:05:84:b2:0c:07:13:4b:
                    fa:5c:51:05:6d:26:dd:e2:d6:c7:63:7d:e8:81:9a:
                    0d:e1:5a:68:ac:a1:45:53:cd:a4:02:6d:84:7e:dd:
                    05:6d:db:06:1c:0c:d2:02:62:97:38:51:c1:4c:4b:
                    c1:ee:ef:8e:e6:86:1e:96:62:73:a6:f2:6b:57:35:
                    d3:f2:e7:22:23:3b:a0:d6:75:87:78:6d:46:9b:fc:
                    d8:05:23:2e:02:ac:fa:5a:7a:e4:be:cc:14:27:a4:
                    6b:b7:de:00:55:fa:be:4f:a1:ac:23:06:ce:fe:d3:
                    b7:38:12:e7:4e:16:e9:31:63:db:59:1d:06:88:fd:
                    eb:94:dc:66:08:eb:41:23:59:3c:4c:f5:fb:4e:81:
                    bc:a3:98:c5:66:c8:c3:06:4f:03:7e:0f:8b:cb:97:
                    a1:c4:ba:90:95:47:f0:70:74:d8:d1:bf:6f:70:29:
                    8a:6f:ab:7f:79:ce:0a:6f:b7:2f:0b:59:b9:20:2a:
                    2c:58:d9:db:40:00:2c:94:30:1b:23:18:fc:67:f1:
                    e2:05:0b:31:a4:c3:5e:65:3c:6d:d0:34:ea:f1:f7:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FA:2F:2A:55:E5:FF:30:46:56:04:83:AD:C9:63:B0:A3:C6:BF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2778e021-0621-3daa-8765-b47a345797d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:d8:35:be:3b:79:f6:0f:eb:cc:83:f7:b0:b0:bd:74:ab:aa:
         70:47:6a:82:fb:bc:33:e3:f9:4e:49:b9:52:06:a1:af:ea:5f:
         bb:63:dd:ea:b0:39:bd:0f:24:df:a5:9a:12:8f:8b:9c:6f:cb:
         13:5a:f0:24:59:7b:c7:f7:e9:d8:a1:c3:83:ff:6c:04:6a:6c:
         a0:96:a3:54:84:d3:79:06:72:0a:23:79:ef:d0:6c:aa:3c:5c:
         e0:76:a2:0f:99:ec:2a:5f:db:b7:17:61:16:3f:6b:b0:6f:ae:
         ad:f5:b4:9b:6b:a6:3b:e3:ed:db:85:7a:2c:de:54:ac:47:86:
         b5:af:91:30:2d:8e:a4:ca:e9:d2:7e:35:d9:13:39:02:dc:1c:
         91:9d:b2:ba:91:a0:16:9c:ef:d2:6b:c3:db:4e:26:8c:76:a6:
         2c:76:3d:d9:a8:8a:20:29:49:bc:e5:a2:83:c9:81:5e:de:b3:
         fe:12:c3:08:f3:4f:2b:7c:5d:65:4d:0c:b2:d2:bd:4f:13:ca:
         05:f6:a3:16:b3:88:02:63:66:21:bd:aa:4a:a8:18:51:35:b7:
         c3:61:98:2a:87:69:69:b7:f8:1b:3f:f8:7d:4d:ae:47:71:0d:
         9d:6e:1f:b9:fa:e7:89:fc:d9:a6:e2:59:47:06:0b:f8:1b:47:
         d5:43:db:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:13:30 2026 by rpki-client