Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3b45a17a-7538-37fc-8772-255167baec40.roa
File:                     3b45a17a-7538-37fc-8772-255167baec40.roa (raw, json)
Hash identifier:          z7NSuLVUS9fMsusK7IRJRBlin1/siFpsDjCj3QsXjnE=
Subject key identifier:   D9:6F:92:53:81:E1:4B:6C:14:4A:E2:DF:70:A6:98:D8:05:C0:53:E0
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F2C4EC5F811D306DB8CD20780
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3b45a17a-7538-37fc-8772-255167baec40.roa
Signing time:             Mon 14 Sep 2026 14:29:44 +0000
ROA not before:           Mon 14 Sep 2026 14:29:44 +0000
ROA not after:            Sun 13 Dec 2026 15:29:44 +0000
asID:                     53610
IP address blocks:        199.116.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:4e:c5:f8:11:d3:06:db:8c:d2:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 14 14:29:44 2026 GMT
            Not After : Dec 13 15:29:44 2026 GMT
        Subject: CN=8392f9b2-3653-40b1-a9cc-6e9cc3af7824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:e1:f9:fd:10:4e:ff:45:96:bf:e6:41:8a:
                    9b:83:b3:1f:30:43:37:b1:fc:e6:a9:7d:da:a6:ad:
                    ed:25:f1:17:b1:56:1c:0e:34:9f:48:fb:58:e8:d4:
                    56:b6:b1:56:cd:e8:53:25:67:7a:19:4d:51:29:94:
                    c7:76:64:83:fd:df:1d:6c:5f:0d:a8:b3:35:ee:f0:
                    c3:aa:69:bd:5d:b4:0f:28:9f:ba:fb:54:2d:86:65:
                    95:f3:54:c4:9f:f7:b0:62:eb:a5:67:9d:9f:32:bb:
                    2f:b2:cd:9d:f4:59:92:06:12:5c:91:e1:ee:eb:d7:
                    44:76:7d:fb:16:b7:d0:d8:93:72:5a:79:da:e1:1d:
                    ba:0f:c2:49:cc:30:06:9c:ad:fe:0c:25:f6:de:d0:
                    c4:38:04:65:b5:db:f7:26:60:72:37:15:cf:55:74:
                    30:5b:b9:ba:c9:9a:ca:4b:64:02:92:b3:65:d9:98:
                    33:13:2a:da:3f:ac:e7:5a:f7:e6:40:3a:69:a4:36:
                    9d:4d:bf:ba:84:ad:89:41:4e:67:9b:96:32:b5:2f:
                    77:2d:5b:83:74:5b:18:b8:c3:13:90:8a:d2:a1:c3:
                    07:2f:23:50:4e:45:d1:8b:e9:4f:1a:4c:54:4c:90:
                    f0:e9:49:69:29:79:a6:35:f9:ca:d5:aa:8c:e8:be:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:92:53:81:E1:4B:6C:14:4A:E2:DF:70:A6:98:D8:05:C0:53:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/3b45a17a-7538-37fc-8772-255167baec40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:0a:7e:dd:31:16:28:c9:92:a7:4d:1e:ee:b4:34:b5:a0:84:
         ac:64:f3:e5:64:0f:71:94:34:9a:e4:89:37:4c:42:c4:38:ba:
         cc:b4:02:a9:4a:1f:bf:c9:73:5c:38:45:07:4d:9a:a8:ec:b4:
         90:0f:82:34:26:0d:71:17:c1:c4:d2:01:c9:b2:23:e8:e1:f2:
         1a:be:ce:67:36:de:f5:c3:e1:d2:fa:f1:01:01:c9:a0:97:7c:
         80:22:14:c5:7d:ac:81:d8:1e:f7:29:ea:6d:62:cd:40:ec:2c:
         eb:d3:92:36:a8:8c:2a:cb:15:aa:d8:4a:e5:f7:41:63:c9:2a:
         84:d5:3c:02:50:92:6d:ba:c2:88:30:ab:5f:e7:69:3f:7e:0f:
         f5:3e:b2:60:17:5a:c8:25:0a:89:1a:d3:90:15:5c:c0:50:90:
         8d:93:a5:81:57:4d:27:9a:ac:cf:de:9f:8b:4b:a0:90:2e:4e:
         9d:4d:63:3b:3e:f9:07:bf:8f:d3:d8:2b:fe:27:b7:fb:b8:95:
         10:e0:5c:3e:86:d3:18:29:21:48:23:8a:c0:52:34:5f:21:d4:
         58:76:42:7f:ee:55:66:4a:ec:78:06:17:4f:26:11:da:32:ad:
         ae:76:1c:02:3d:e4:46:c8:92:c0:df:8a:7e:1e:e1:ac:e9:da:
         8a:cd:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:01:44 2026 by rpki-client