Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/59bead85-6c5a-3c61-bb67-9d99f41b0e02.roa
File:                     59bead85-6c5a-3c61-bb67-9d99f41b0e02.roa (raw, json)
Hash identifier:          2verKeXQn1I/YY7UGI6pwtBQwtOoi2Q65LCvij+8MUw=
Subject key identifier:   4C:BB:11:26:62:54:11:32:43:E1:CF:DF:FF:34:AB:37:E7:8B:2A:4E
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F2F00DF0CF3FF648E98376380
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/59bead85-6c5a-3c61-bb67-9d99f41b0e02.roa
Signing time:             Tue 15 Sep 2026 13:40:12 +0000
ROA not before:           Tue 15 Sep 2026 13:40:12 +0000
ROA not after:            Mon 14 Dec 2026 14:40:12 +0000
asID:                     53610
IP address blocks:        192.102.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2f:00:df:0c:f3:ff:64:8e:98:37:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 15 13:40:12 2026 GMT
            Not After : Dec 14 14:40:12 2026 GMT
        Subject: CN=c8065cf5-d9e5-4ea4-8c22-a7c588dc8b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:92:c1:15:3c:f3:af:81:92:45:10:ce:60:
                    c0:0e:96:f7:4b:20:cf:f2:a5:b9:fb:1e:65:71:b2:
                    e9:91:5a:4e:4e:67:de:9a:6a:12:f1:f9:16:83:6c:
                    ee:23:cd:b8:a8:53:d5:77:c0:52:20:3a:ee:7b:e4:
                    8b:fc:8d:7e:16:dc:15:99:4e:46:fb:38:0b:52:b9:
                    eb:49:a1:0e:37:d7:14:00:63:1c:58:e8:ec:57:16:
                    1d:97:01:ad:16:65:69:b1:4c:e3:29:68:20:26:5e:
                    92:87:4f:17:69:4d:13:f3:af:1c:0b:ff:2a:b1:20:
                    62:e9:99:17:ee:bc:ff:a9:b8:a8:72:80:bb:56:2e:
                    b7:41:f5:54:97:63:d9:33:3e:30:65:9d:df:18:59:
                    3c:8d:92:92:75:79:c8:91:42:cd:5c:17:76:9d:78:
                    c5:53:e8:0b:ac:d4:9c:40:3e:b7:b3:a3:9a:fe:43:
                    e3:d1:0e:c6:ce:9f:06:bb:9b:c8:65:cc:e6:b6:d2:
                    bb:7a:2d:fc:03:c5:d0:3a:9d:e7:9b:07:f9:26:38:
                    5b:c7:38:24:41:2d:d6:83:88:19:1a:8d:20:5f:3a:
                    68:86:2c:29:27:bd:63:60:76:65:d4:b2:c8:3a:57:
                    05:a7:6f:77:82:16:fc:65:41:a6:54:06:16:4c:3b:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:11:26:62:54:11:32:43:E1:CF:DF:FF:34:AB:37:E7:8B:2A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/59bead85-6c5a-3c61-bb67-9d99f41b0e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:08:f5:ec:c3:e4:c3:ce:ff:cb:8d:51:da:a3:fd:ca:da:
         7e:9a:17:9b:2a:07:f9:e2:dd:60:81:de:b9:32:b1:8b:1c:76:
         0a:bc:5d:11:fc:69:4f:b0:e3:0b:e2:00:b8:36:49:a3:60:cf:
         ff:e2:e1:45:b8:6b:96:7f:ee:0f:79:be:8f:87:33:c4:0b:e0:
         9e:d3:69:a4:51:e5:97:96:a5:f1:28:eb:cb:f6:70:d9:c0:69:
         5c:3d:8c:49:78:5b:fc:dd:08:cb:dd:b6:c8:71:07:d6:33:61:
         2a:40:95:4d:e2:95:e1:4c:5a:87:f3:81:0c:c4:62:08:6d:1e:
         13:ac:49:4d:ab:ee:48:23:54:05:98:e6:41:02:9d:e4:fe:80:
         75:6f:3b:e8:92:e7:f7:4d:92:04:30:3e:01:5d:bc:ab:9d:00:
         80:5a:60:73:4c:eb:03:fe:3e:e0:33:19:0b:3c:d3:18:5d:60:
         39:67:e5:23:36:b0:e0:fc:dd:03:69:7a:b3:af:9a:97:a6:0e:
         b8:6e:73:c1:87:d5:2e:29:92:f7:df:8b:25:e3:1d:bf:ca:f1:
         17:82:e1:e5:55:85:1c:3b:e3:4e:8f:fa:68:0e:e8:89:93:a1:
         e5:f2:71:94:33:1e:bd:a3:ec:11:15:56:b6:19:94:76:5d:bf:
         6d:aa:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:33 2026 by rpki-client