Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b8497a1-452e-3034-a975-ac3f6ba199e2.roa
File:                     1b8497a1-452e-3034-a975-ac3f6ba199e2.roa (raw, json)
Hash identifier:          bi96QPI6PautpfF3KK/NOwjtMQoZzDbqcH6kD/hOsiQ=
Subject key identifier:   30:E3:EE:B1:C5:05:66:29:2C:5C:CC:F7:30:12:11:B0:5D:A9:42:53
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F506D4FE3BF9BB2D1DC6D2180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b8497a1-452e-3034-a975-ac3f6ba199e2.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     64267
IP address blocks:        147.92.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:4f:e3:bf:9b:b2:d1:dc:6d:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=990edc30-a694-4d73-9486-bfbc2147cfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:ce:66:9b:bc:fb:55:63:1d:c5:ed:41:2e:
                    d9:db:18:9a:dd:70:a1:dc:3d:3b:91:4d:a7:6b:c5:
                    d7:3e:a6:a8:21:a1:76:71:d9:eb:5c:ec:af:26:72:
                    8a:e8:03:ea:6b:bb:23:b9:2e:ca:e0:30:e1:00:fc:
                    84:91:5a:77:aa:31:4a:17:38:b0:9c:11:75:60:65:
                    85:d2:68:f9:09:9e:e6:b5:eb:7b:fd:00:64:8c:77:
                    4d:5f:89:e3:c5:8d:98:09:de:31:bc:23:11:a6:07:
                    e1:e5:07:25:d6:62:80:d3:fe:e7:94:ff:e4:bb:4a:
                    00:62:df:e8:c8:ad:94:02:3f:fd:17:98:e0:9a:df:
                    d4:07:55:00:99:64:b3:fb:10:d8:73:3e:db:8e:5b:
                    a9:05:b1:31:51:91:c6:11:3f:03:54:fb:77:0c:ea:
                    fb:30:bf:0e:dd:4a:5d:66:fb:c0:58:4b:b5:1f:34:
                    16:9d:d8:36:66:65:67:69:cd:a4:8f:46:7a:94:77:
                    f1:e6:cb:17:58:f8:03:4e:00:fb:91:22:66:6a:48:
                    2f:57:66:31:56:62:e0:89:cd:98:9e:e6:98:2f:19:
                    cb:cf:9b:24:29:23:be:bd:2e:af:70:f7:e5:6d:e6:
                    35:61:1d:3a:d4:e2:eb:87:9d:17:79:5a:53:e9:9c:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:EE:B1:C5:05:66:29:2C:5C:CC:F7:30:12:11:B0:5D:A9:42:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b8497a1-452e-3034-a975-ac3f6ba199e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:2e:6c:bb:54:a3:4c:28:7c:dd:fd:3b:b6:87:5a:77:ed:d7:
         f4:bb:4f:e8:7d:4f:6e:b8:05:d1:96:69:da:ad:f5:6a:66:f1:
         5a:d8:67:ee:bd:01:5d:e3:7e:b7:43:c6:e7:7d:d8:c9:4c:8c:
         a1:80:47:a4:fc:5c:2f:65:fd:2c:a7:00:95:8e:9a:2c:ff:b9:
         59:80:6e:2e:65:cf:76:5a:da:05:62:25:02:ef:18:4b:88:85:
         e2:ad:f4:c5:b7:c5:b7:2e:cb:d9:61:be:44:83:4a:c4:e1:c0:
         af:ed:c2:fa:63:95:86:1f:33:fc:d6:a5:69:b8:af:0a:dd:4c:
         be:a4:f5:a3:be:d5:10:1d:f3:42:ee:c0:25:3d:c4:22:5c:0b:
         52:22:8f:ea:d7:34:91:86:5e:e1:d5:f5:af:e7:3c:fe:6a:3a:
         52:68:5c:e7:12:c2:0d:be:e0:14:68:d1:09:e3:76:3f:f5:b7:
         33:20:a3:12:31:44:68:64:2d:cb:8d:8d:01:5e:47:63:b8:b3:
         0c:53:c9:88:fd:7c:c8:83:9c:b1:f9:7b:9b:1d:37:be:98:4e:
         98:d3:b0:12:eb:36:8b:0a:38:b7:4a:d5:69:d6:0f:3b:4b:35:
         15:04:0f:6c:f3:cf:fc:a3:ae:41:6d:77:ac:d9:b7:95:67:4f:
         d9:e9:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:49:17 2026 by rpki-client