Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/92e753e0-feac-3e09-9c38-eebea1971dfb.roa
File:                     92e753e0-feac-3e09-9c38-eebea1971dfb.roa (raw, json)
Hash identifier:          OhP9o7QgHwmDzQQ1nnc1rgwS9kmDcUkiUhCVi+EE26o=
Subject key identifier:   E7:13:2F:A0:13:90:9F:C1:CC:DD:96:F8:D1:DA:B7:42:F1:8D:7D:60
Certificate issuer:       /CN=cf0d9002-718f-4388-938e-78b114810669
Certificate serial:       010D0C9F4328584DAF102BB65796CEB2BBF70580
Authority key identifier: A2:55:CC:58:88:E2:FF:72:0B:34:B5:6D:51:62:4D:50:93:68:C1:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/92e753e0-feac-3e09-9c38-eebea1971dfb.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     22693
IP address blocks:        2001:5d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2b:b6:57:96:ce:b2:bb:f7:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0d9002-718f-4388-938e-78b114810669
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=83a1ba3d-a73c-4d50-9ea2-56a47c356836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b3:f5:28:1a:c3:b6:ea:26:fe:a9:37:d8:57:
                    f3:2f:a0:2b:c8:66:3e:2b:c3:02:01:8a:88:91:aa:
                    c5:ba:e2:85:d5:47:94:dc:13:b1:80:8e:59:79:9e:
                    2a:62:b4:13:82:bc:a8:07:92:f8:3c:57:e4:71:27:
                    45:03:90:1b:c6:17:b9:d2:03:e9:87:ab:75:ce:33:
                    29:c5:ac:18:4b:b9:71:98:6a:4d:a3:8c:71:ea:a9:
                    49:93:06:ef:cf:98:34:4e:c3:31:c3:f2:69:7d:d7:
                    80:0d:28:8f:45:9f:b6:cc:8d:83:04:a3:61:d0:98:
                    46:f8:cc:bc:89:28:f4:27:c7:2d:6e:5c:03:b2:6e:
                    23:3c:0d:43:2f:ce:44:d3:74:68:1b:ec:01:7c:e5:
                    b9:9c:f2:f7:bd:bf:03:1c:25:09:23:54:2d:9b:4c:
                    86:a2:92:b9:f4:75:e8:8f:1b:49:b3:4e:0f:29:76:
                    f8:4f:fc:90:01:b5:f5:e1:15:ad:cc:bf:5b:bb:fb:
                    e9:74:b0:3e:1d:97:71:a0:7f:d4:22:b2:fd:9f:60:
                    1b:ce:be:f6:ba:cf:05:49:ee:87:60:c5:6c:3f:d7:
                    2e:66:ea:fa:65:a6:c8:6c:3c:a7:22:90:d6:7b:3b:
                    f5:6f:4a:bb:d4:3c:24:8c:62:5b:83:9d:8c:f8:02:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:2F:A0:13:90:9F:C1:CC:DD:96:F8:D1:DA:B7:42:F1:8D:7D:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/92e753e0-feac-3e09-9c38-eebea1971dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.crl

            X509v3 Authority Key Identifier:
                keyid:A2:55:CC:58:88:E2:FF:72:0B:34:B5:6D:51:62:4D:50:93:68:C1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:d4:fb:65:a7:b1:5f:13:76:07:54:3d:e5:c8:01:12:3b:
         1f:61:96:c6:94:fa:86:13:7c:76:17:45:14:19:3b:46:68:83:
         b2:60:89:61:60:b9:bd:a2:50:cc:a9:86:80:c6:a7:22:81:c9:
         cd:f1:a0:6c:ab:72:14:e7:b3:ef:43:9f:ea:48:e1:b8:24:83:
         2c:c1:c4:20:8e:ba:a5:e2:1d:51:98:ed:8d:1e:0c:ac:48:ad:
         61:48:fc:a2:43:b3:d2:d5:f1:69:3d:12:f9:94:2b:2f:23:de:
         80:a6:4d:16:b4:bb:fd:4a:76:18:5f:2e:73:59:75:fd:af:0b:
         fc:2f:11:00:fa:19:b8:3b:89:c5:e7:8e:cd:15:b2:00:e3:56:
         8f:e9:4b:dc:36:eb:0d:a1:05:b6:5d:f5:f3:8d:3b:76:71:aa:
         8a:0a:23:79:2b:9e:1a:54:03:de:d3:9d:08:f4:e9:c4:f7:8c:
         b2:2a:24:29:aa:4d:65:47:9c:c2:95:64:05:24:00:7f:f2:a9:
         f7:d7:d7:91:e5:9f:9d:a3:f9:a1:e0:85:c0:d0:11:31:b1:f8:
         d8:13:77:3b:c6:36:8c:60:b7:fd:84:d6:e8:8b:d7:68:95:20:
         5e:d6:fd:ed:43:5a:b1:7a:31:22:20:c4:bf:ad:2b:ba:a2:b1:
         73:ac:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:46 2026 by rpki-client