Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/5388c142-26a1-3eb4-a2c9-5bf08ed8df21.roa
File:                     5388c142-26a1-3eb4-a2c9-5bf08ed8df21.roa (raw, json)
Hash identifier:          M3G6WbBs3VIQcJUDsb80YF/5tXsTWXTLvHNFa+4S2xo=
Subject key identifier:   BA:5C:E8:30:E2:F2:42:89:3E:12:60:F2:AF:6C:CA:D0:3D:88:29:74
Certificate issuer:       /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
Certificate serial:       010D0C9F4328584F20F7B631AB56183BFB9D8880
Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/5388c142-26a1-3eb4-a2c9-5bf08ed8df21.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     6435
IP address blocks:        199.15.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b6:31:ab:56:18:3b:fb:9d:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=29439a54-ebd6-467e-ba34-fe866c3df715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c8:ff:88:99:e8:58:69:53:ba:fa:ae:d8:e5:
                    39:37:53:25:fc:40:b4:1c:ea:b5:26:5b:f2:ce:15:
                    8d:c9:52:b5:48:3c:71:78:5a:4f:9f:8d:bc:b4:99:
                    85:3c:ea:c3:34:c0:89:03:61:4f:69:9f:67:b8:7f:
                    15:e5:07:ec:aa:eb:5c:3d:95:75:0b:02:55:57:1a:
                    e7:d5:8d:ea:8f:20:ed:f2:10:3b:c0:c5:59:70:2c:
                    ac:c9:a8:e7:6d:2a:d6:58:ca:9f:12:57:96:63:7a:
                    e4:b0:d9:2a:91:84:34:f5:26:40:8b:10:12:8e:ef:
                    a6:3c:52:08:12:56:34:8d:d3:c5:5d:12:e4:7d:0c:
                    e5:ba:36:6c:e3:e7:30:f3:95:43:8c:6a:8c:7f:49:
                    31:4c:44:0e:74:78:27:0f:14:4b:44:cd:3b:33:ce:
                    ec:2a:3f:61:3a:af:a8:e7:7e:b9:d7:b2:5a:58:2f:
                    d8:e6:21:64:9a:c0:3c:10:59:b3:81:f8:a2:43:85:
                    bc:80:11:5d:82:7d:6c:5b:fd:c9:07:12:26:99:14:
                    c8:b3:7c:2a:b1:d0:82:09:ff:69:c5:70:78:59:e8:
                    1b:e6:a8:75:de:2a:0b:41:54:e2:30:be:fe:12:ee:
                    67:ef:47:5a:40:f0:8e:ce:5e:5f:c6:1b:10:ca:23:
                    2d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5C:E8:30:E2:F2:42:89:3E:12:60:F2:AF:6C:CA:D0:3D:88:29:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/5388c142-26a1-3eb4-a2c9-5bf08ed8df21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl

            X509v3 Authority Key Identifier:
                keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:36:30:50:06:68:50:4d:71:28:98:93:22:c7:9a:e7:8b:
         53:dc:1c:6b:4d:59:2a:ba:5a:30:2d:4d:cb:00:b8:0c:7b:4d:
         67:01:99:92:58:26:6c:a4:27:22:10:c5:e0:28:7e:cb:3a:7f:
         8c:7a:c8:1d:a8:dd:ec:d4:c5:ea:55:b6:f9:08:16:67:64:97:
         5c:0c:ff:e7:0a:df:47:bc:42:b5:0b:f9:bf:2b:56:d2:53:db:
         ec:88:41:b6:e2:68:aa:e7:3f:18:93:1c:ea:f9:bc:8b:70:1d:
         54:ed:18:cd:fb:bf:28:c1:9a:b5:1b:d9:46:66:b5:a4:46:05:
         d4:64:28:d4:5f:2e:f4:da:cf:6c:5a:28:bb:c0:74:1d:b4:bf:
         29:ff:b9:b9:04:ee:ac:29:10:17:1d:1f:9e:33:82:ec:6b:67:
         d7:40:77:9f:33:a5:a0:c2:1c:4f:71:62:5f:c9:e2:2f:ab:14:
         29:48:e4:5d:5a:9f:3d:f2:97:ea:8b:53:49:89:e7:af:c4:74:
         f1:b6:db:9a:4b:51:f3:08:c7:a9:ac:bd:44:9e:12:44:cf:88:
         1c:8c:2d:89:bb:f7:c2:2a:da:89:ba:98:63:09:13:5e:0f:13:
         ff:af:c2:e0:b2:56:68:7b:75:38:69:1a:88:c7:dd:3b:8b:32:
         1a:a7:d1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:02:24 2026 by rpki-client