Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/92e753e0-feac-3e09-9c38-eebea1971dfb.roa
File:                     92e753e0-feac-3e09-9c38-eebea1971dfb.roa (raw, json)
Hash identifier:          8npYgUK/UpWC44WQWC+xqDJoikNob29F/K+EhNf82AQ=
Subject key identifier:   84:B6:49:96:01:19:FF:87:C9:01:C1:C9:D9:DE:31:0B:DF:C7:56:63
Certificate issuer:       /CN=cf0d9002-718f-4388-938e-78b114810669
Certificate serial:       010D0C9F4328584F31B7CF7F821CD0915AB4A5C0
Authority key identifier: A2:55:CC:58:88:E2:FF:72:0B:34:B5:6D:51:62:4D:50:93:68:C1:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/92e753e0-feac-3e09-9c38-eebea1971dfb.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     22693
IP address blocks:        2001:5d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:cf:7f:82:1c:d0:91:5a:b4:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0d9002-718f-4388-938e-78b114810669
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=b8655225-a256-4315-b47c-ca46744af009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:f3:08:0a:42:46:2b:af:f8:34:71:b0:f8:
                    89:13:3e:5f:2e:cf:b9:6b:f0:9c:96:0f:95:e6:a1:
                    8c:0e:c9:da:a9:67:75:43:63:6d:28:ba:7f:6b:ac:
                    89:2d:b8:a4:5b:3d:4b:7c:c3:d9:2a:15:7c:79:2b:
                    19:d3:71:0a:fc:7d:d6:39:62:23:74:4c:e0:b6:ec:
                    93:a8:9c:c5:5a:19:fb:d7:0a:cf:58:b9:ae:91:cd:
                    3a:93:75:b7:d7:88:61:d3:39:90:bb:c0:c3:ea:e2:
                    87:01:30:cf:89:0c:d8:31:46:50:66:ad:b5:ae:8d:
                    48:50:11:34:b9:57:b1:e8:8e:12:1e:bc:49:9e:af:
                    ee:14:d0:51:58:f1:05:58:8f:8c:bb:c0:21:72:fc:
                    e5:20:ad:a3:26:d5:28:aa:e3:60:bb:79:f5:e8:84:
                    87:24:ab:c9:24:68:64:8f:e4:ae:d6:40:08:d4:fc:
                    c1:41:d4:a3:e6:6a:4e:5b:74:6e:c4:38:bc:12:93:
                    19:e2:3b:dd:63:27:3e:a7:35:f6:97:48:37:b8:dd:
                    c0:71:29:d7:c1:8f:5a:bf:b9:b8:8f:d1:8b:fa:22:
                    88:e5:7b:e0:99:27:b2:eb:81:19:5f:ba:15:c5:de:
                    7c:83:30:71:73:dd:4e:e3:58:e7:cf:0a:67:d3:95:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B6:49:96:01:19:FF:87:C9:01:C1:C9:D9:DE:31:0B:DF:C7:56:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/92e753e0-feac-3e09-9c38-eebea1971dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669/cf0d9002-718f-4388-938e-78b114810669.crl

            X509v3 Authority Key Identifier:
                keyid:A2:55:CC:58:88:E2:FF:72:0B:34:B5:6D:51:62:4D:50:93:68:C1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cf0d9002-718f-4388-938e-78b114810669.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5d:4f:88:5a:6a:13:3f:1b:b4:b4:23:38:66:99:27:73:15:
         e7:67:e3:fc:76:54:00:9a:47:18:03:af:97:34:0b:52:7b:04:
         7d:fe:e7:99:d5:de:e3:7d:9a:de:0f:12:8d:9a:e6:d2:02:ad:
         e2:83:7b:bf:70:9d:50:a7:b3:3d:b3:7a:b0:d9:f8:30:fe:3e:
         f2:4e:40:3f:fd:0e:24:7e:41:cb:8c:92:e2:2c:7e:8c:96:35:
         08:5f:55:24:d1:be:49:2b:aa:38:a2:18:04:ae:27:37:5b:89:
         08:06:9f:54:a2:15:c4:f0:77:5b:c4:4a:c1:d0:06:99:10:81:
         51:d1:7d:42:4e:72:35:1f:df:0c:50:cd:65:18:26:68:c9:93:
         20:5b:1a:df:07:1f:3e:14:de:8e:ac:7f:1a:3e:da:22:99:6f:
         f8:da:36:03:eb:ee:9a:5a:bd:c3:03:e8:81:94:2c:7c:4e:d8:
         d4:c0:26:e0:3b:db:f0:cc:c0:b7:c9:8d:62:32:42:23:7a:01:
         7e:23:b3:18:d8:4a:a8:be:bf:b0:9e:4f:ee:a1:2e:12:62:b1:
         94:2b:dc:56:fe:03:ec:de:17:40:b9:64:aa:62:d0:4c:38:62:
         80:ba:96:2d:9d:b2:2e:d0:bf:c0:fa:f5:2d:fc:4b:40:ae:04:
         4e:ce:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:40:11 2026 by rpki-client