Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3cc4b8e-446b-3eed-8132-214f7ae4eced.roa
File:                     a3cc4b8e-446b-3eed-8132-214f7ae4eced.roa (raw, json)
Hash identifier:          a+uKcy5HsL/+1c0pJ/hujyz+AV9wLQJKrdBlIICmFgI=
Subject key identifier:   D3:7F:97:0E:49:D2:BA:7D:15:70:CF:AF:AD:D0:BE:88:19:5D:2E:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980B89B137C15309CCCFF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3cc4b8e-446b-3eed-8132-214f7ae4eced.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33489
IP address blocks:        74.92.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:b8:9b:13:7c:15:30:9c:cc:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d917ff59-8c90-4ec0-b52a-fa1d180d3eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:6c:4c:40:48:78:7e:91:f0:33:1a:69:73:
                    36:e4:ec:55:db:f0:17:54:39:b6:cd:28:1d:11:78:
                    06:a5:e0:82:69:c1:d2:32:09:1a:a3:62:68:2d:cf:
                    9e:ad:41:32:5d:b3:a4:bb:42:76:68:ba:a5:72:74:
                    64:02:b4:c4:20:eb:d7:c3:0b:a7:47:fa:31:72:c4:
                    99:5a:df:87:c2:bd:ff:d5:b3:12:0d:0f:6a:5c:15:
                    ee:72:d2:2a:20:6a:94:bc:d3:b6:4e:74:24:3e:f2:
                    c6:90:74:50:0f:d0:95:09:1f:9a:fd:e6:08:f4:88:
                    6a:e0:38:d7:0d:3e:cb:84:86:6c:92:ee:2f:4e:d7:
                    de:f1:ac:38:3a:38:ad:dd:d0:f5:86:c5:83:d4:74:
                    84:f0:41:4b:ea:d9:7f:d5:b5:46:e4:57:5c:d9:cd:
                    68:ee:ba:95:0c:a5:cf:22:57:cd:76:35:c9:90:ec:
                    6a:a6:67:0c:2e:0a:04:58:c3:60:a7:4e:e8:8e:40:
                    6d:3d:df:1b:d8:3e:09:ff:88:54:55:26:14:da:74:
                    85:a4:92:79:1c:a6:ac:1f:02:f5:e6:5e:52:5c:bd:
                    88:46:87:ca:01:fa:4b:bb:20:e0:3e:59:dd:d3:2d:
                    8b:bd:9b:c1:c8:3b:af:f1:a6:99:fe:c3:4f:19:fd:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7F:97:0E:49:D2:BA:7D:15:70:CF:AF:AD:D0:BE:88:19:5D:2E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3cc4b8e-446b-3eed-8132-214f7ae4eced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.92.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:c4:15:ec:d6:d6:c9:1f:76:ad:4c:38:b0:0d:14:7e:bb:
         18:8d:94:fd:98:81:9b:84:81:de:6d:2f:cf:7d:f3:a0:e4:a6:
         04:a9:34:8f:90:06:da:5b:24:f4:53:5c:36:91:6d:8f:03:07:
         58:a3:32:9b:8f:45:27:92:90:05:5a:3d:dc:ce:29:49:af:1c:
         67:0d:17:48:31:f2:a5:55:5a:cc:a6:a1:a4:d5:0f:13:1b:ef:
         64:3f:95:4a:2d:e3:9b:f5:64:dd:f0:5c:84:e8:45:02:0f:65:
         fa:bd:3f:a9:6f:09:c5:bb:37:b0:4b:4d:3d:a4:09:d5:17:f0:
         50:8e:04:51:90:34:88:a3:2d:81:c1:95:d4:69:ab:da:38:13:
         00:4b:4b:83:3a:9a:95:9c:5f:7e:e8:45:de:f6:44:be:fc:f9:
         82:bb:bb:bf:97:fb:cc:74:7a:63:b5:27:07:43:f1:66:c3:3e:
         03:bc:d3:6d:9e:e8:e3:3f:06:8c:2b:ac:f8:30:11:92:ab:92:
         0b:be:0b:66:95:23:6d:6e:78:bd:82:22:2a:e4:8d:3d:3b:0c:
         d6:1e:83:5c:bf:e5:11:cc:c5:08:40:a1:cc:f8:b1:44:87:39:
         bc:cb:a5:b2:8f:86:d7:0d:bc:35:14:3f:ef:1d:3e:72:7b:b2:
         43:01:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:45:45 2026 by rpki-client