Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/dcb931f6-6705-3424-98fd-7ad0940b8c08.roa
File:                     dcb931f6-6705-3424-98fd-7ad0940b8c08.roa (raw, json)
Hash identifier:          3wqLOimvT3Rr6rcfz+flblDuLREv/J+wt95XP0EydkA=
Subject key identifier:   3A:DE:19:79:DC:10:D4:FA:7C:16:77:3E:32:45:D4:14:ED:F4:67:08
Certificate issuer:       /CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
Certificate serial:       010D0C9F4328584F30526DBB1B3A07A512116D00
Authority key identifier: DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/dcb931f6-6705-3424-98fd-7ad0940b8c08.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     400767
IP address blocks:        142.248.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:6d:bb:1b:3a:07:a5:12:11:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=7cb1a01e-cc01-476f-aff2-87402aadd21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:81:e6:36:1d:a4:29:c9:1a:cc:a5:57:0c:
                    59:d0:94:34:de:86:ae:95:c4:2f:ce:98:d9:ef:ed:
                    90:c0:5c:b4:84:80:95:c2:80:a7:e9:b1:c7:d7:7d:
                    b2:2d:90:ec:e8:a9:8d:2d:1a:61:f3:37:a8:43:4e:
                    08:fb:76:e3:a8:90:54:f8:67:6d:5c:0a:06:51:09:
                    d2:38:ac:56:99:1f:04:cc:1e:81:57:18:5d:bc:b9:
                    2a:39:b6:a0:61:28:7a:cd:79:38:d9:3d:44:24:bb:
                    58:ab:e2:55:44:10:b0:86:de:a8:cc:b0:22:8a:11:
                    a8:dc:91:1b:ea:fc:20:c3:a8:6a:73:4d:d5:de:87:
                    e9:73:3e:e2:ea:76:c9:1f:54:5c:4f:66:89:82:c7:
                    a3:5a:9e:44:f4:10:e9:09:01:61:99:45:7b:eb:bd:
                    72:8b:1a:e6:70:ca:1c:84:41:f6:f3:17:e0:04:47:
                    1c:5e:04:57:b6:4c:3a:0e:58:2e:b1:e4:35:70:00:
                    15:d8:ba:f5:a2:18:6d:f7:02:68:f7:c2:74:b3:d7:
                    2c:24:72:29:23:94:37:5b:09:46:a3:bd:88:05:83:
                    e1:77:1d:5a:43:de:44:03:e1:52:c4:8f:ab:27:a8:
                    68:d5:24:6b:24:3d:ce:b5:24:4d:60:94:ff:15:ef:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DE:19:79:DC:10:D4:FA:7C:16:77:3E:32:45:D4:14:ED:F4:67:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/dcb931f6-6705-3424-98fd-7ad0940b8c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl

            X509v3 Authority Key Identifier:
                keyid:DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:77:6c:6b:b7:9d:46:47:3b:10:fd:0e:e4:5a:4b:d8:c9:6e:
         a1:a0:77:d3:23:eb:b7:f5:33:2d:af:8a:7d:1a:90:af:c2:04:
         4c:fa:43:fb:a2:72:aa:f7:48:55:12:c7:3e:44:c8:d3:7f:24:
         80:c6:dc:f4:e8:25:85:d5:88:1b:03:1c:f1:d5:4f:ba:32:42:
         4c:a0:2d:ff:13:61:a2:20:b9:f7:65:b7:9b:46:96:bc:b5:d0:
         e5:80:3b:d1:ab:a4:81:ce:31:44:5a:c4:db:85:c1:4d:d6:7e:
         04:66:13:a3:9e:38:f8:4e:40:cc:67:8e:f8:d1:3b:a6:d4:44:
         26:72:53:ea:bb:05:11:a4:84:98:35:b2:cb:7b:25:2e:ad:d6:
         9b:a8:56:86:85:b6:b1:2e:90:e4:eb:3e:90:18:76:da:16:d7:
         21:f9:54:39:90:41:7b:01:13:45:c1:e4:4a:06:67:c3:a5:3a:
         a4:1f:9e:db:b1:e0:f1:1e:de:6b:9e:be:a2:c2:a0:fc:ca:1e:
         5a:5e:ec:b8:cb:08:9a:4d:e1:1e:cb:56:ac:60:0e:27:9b:61:
         23:80:3e:01:a1:bd:f6:24:67:e8:8e:8b:6a:a8:70:58:10:14:
         3b:ac:67:97:2c:dd:d0:cf:cd:96:c4:54:2b:f4:ab:c5:23:71:
         29:df:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:18:58 2026 by rpki-client