Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/921092fa-cba0-3f18-b64b-14c6a2b863c0.roa
File:                     921092fa-cba0-3f18-b64b-14c6a2b863c0.roa (raw, json)
Hash identifier:          3x3aG4shCEEtScqwuJ52gKSaSiVvr5whVAQQF+H1SkA=
Subject key identifier:   E7:47:04:72:15:C4:72:D4:6C:32:91:05:A0:F2:73:09:97:E6:2D:DE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D362B4892B4F38CED6FD36280
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/921092fa-cba0-3f18-b64b-14c6a2b863c0.roa
Signing time:             Wed 18 Mar 2026 17:42:26 +0000
ROA not before:           Wed 18 Mar 2026 17:42:26 +0000
ROA not after:            Tue 16 Jun 2026 17:42:26 +0000
asID:                     20001
IP address blocks:        147.92.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:2b:48:92:b4:f3:8c:ed:6f:d3:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 17:42:26 2026 GMT
            Not After : Jun 16 17:42:26 2026 GMT
        Subject: CN=be5552e2-7e97-48fa-8d6f-8ea9321ad3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:ad:2d:5d:54:5e:9e:42:17:74:1b:d5:cf:
                    bc:16:4a:d6:0d:29:9d:c6:e9:19:41:24:2e:cf:bb:
                    b6:21:0d:19:5b:32:ca:dc:b4:d0:f0:ea:b5:03:40:
                    24:c1:9d:44:0d:87:26:44:b8:26:66:b7:d5:08:cb:
                    07:71:b2:e3:81:cd:9d:1f:90:91:0b:cf:51:17:8d:
                    11:03:d3:8c:09:84:78:d1:af:82:0b:7d:1a:8e:82:
                    d2:4f:61:6f:a3:b1:08:6e:53:dd:36:64:13:21:6d:
                    d5:fa:f1:0c:ca:86:d1:b8:62:aa:15:d3:4e:e2:b4:
                    44:dc:5c:20:86:ba:17:fe:16:90:2a:7d:62:e0:39:
                    89:38:d6:99:b0:bc:25:7e:cd:90:d2:5c:25:26:69:
                    a0:d4:f3:50:a3:9e:ab:eb:e2:d3:50:44:c1:e5:ec:
                    b8:92:6f:71:e3:b5:d1:79:c9:36:8c:f8:1d:49:4d:
                    78:91:95:24:f7:ab:79:08:97:8d:ba:0b:97:3c:e0:
                    e8:57:18:e8:66:b9:f7:4f:4e:ac:10:4a:a9:ec:b7:
                    5c:6c:48:05:94:de:45:05:62:11:44:fd:e8:3e:1d:
                    82:dd:df:11:c0:ad:21:b0:ed:fc:fd:5d:e3:97:b4:
                    10:88:79:f6:43:5e:26:17:f2:88:d3:1b:ea:6c:ff:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:47:04:72:15:C4:72:D4:6C:32:91:05:A0:F2:73:09:97:E6:2D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/921092fa-cba0-3f18-b64b-14c6a2b863c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3a:8d:b5:49:7b:85:a5:2e:08:ba:d5:36:71:a5:4c:b2:ec:
         b5:0f:bf:4b:9d:24:cc:f8:78:f1:98:eb:db:5e:04:74:89:04:
         34:22:8a:87:a1:77:53:a6:b4:2b:c0:13:76:79:9d:6c:71:92:
         f7:af:ce:b4:a0:f9:af:f2:cf:62:f7:c1:9f:16:07:73:a9:40:
         b2:ed:a9:20:2b:e7:75:68:7b:af:17:78:35:3e:b4:16:ef:8e:
         73:a8:fd:4e:d4:1e:7f:14:34:db:44:e8:eb:0c:7e:43:36:cd:
         7d:c3:79:ca:62:a0:f9:59:42:5f:ff:97:5b:7e:88:1b:c2:89:
         8e:9c:06:89:26:6a:0c:ec:2c:0e:16:bb:88:7b:3d:3a:96:72:
         9e:4d:0f:3a:84:02:52:e5:86:06:56:48:59:70:b9:bd:b3:d1:
         1b:c2:60:15:6a:4b:19:9b:9b:47:87:c1:9c:47:e8:fa:4d:a9:
         28:60:18:35:99:91:af:8d:cc:a2:3a:70:1b:ea:8b:b9:1b:a0:
         92:f7:0f:f0:a1:fc:94:8b:e6:9a:a6:8a:3e:1a:1d:0c:67:ec:
         c1:ff:21:ae:03:a2:4d:1e:88:ed:3e:f8:66:61:5d:98:f6:96:
         3c:70:82:fd:d7:8c:7f:39:06:ca:c1:45:d3:2f:c9:07:05:19:
         77:f9:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:39:35 2026 by rpki-client