Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/c5eda3f5-4300-3e06-9672-bcd44a4ea5b9.roa
File:                     c5eda3f5-4300-3e06-9672-bcd44a4ea5b9.roa (raw, json)
Hash identifier:          rKrz+R+WSWAXydDPpy0RfUjw/Unv9Tt9x73ZWGX+Z5g=
Subject key identifier:   FB:60:06:8D:29:53:4B:CE:A9:D7:8F:DC:79:3D:AC:D5:83:51:88:FC
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584FC9709477E8ACA2D5454AD1C0
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/c5eda3f5-4300-3e06-9672-bcd44a4ea5b9.roa
Signing time:             Mon 09 Nov 2026 21:19:46 +0000
ROA not before:           Mon 09 Nov 2026 21:19:46 +0000
ROA not after:            Sun 07 Feb 2027 21:19:46 +0000
asID:                     3761
IP address blocks:        158.120.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c9:70:94:77:e8:ac:a2:d5:45:4a:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Nov  9 21:19:46 2026 GMT
            Not After : Feb  7 21:19:46 2027 GMT
        Subject: CN=e94c245b-39b4-4036-aefe-a729cb681886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:e1:cd:e2:fb:a0:4c:0b:99:14:b0:48:a4:
                    48:e6:01:a7:c6:31:f3:78:af:73:15:4c:40:5b:51:
                    77:7b:df:7d:c6:a6:ce:bf:0e:93:59:6c:76:3e:a7:
                    d2:7c:c6:8c:00:ce:6b:42:15:bd:8a:b8:a8:e5:84:
                    e4:53:6e:94:a9:25:40:1e:ab:b5:dd:1f:37:a1:03:
                    1d:33:cf:2a:ef:3f:5d:69:fc:e5:6d:7c:43:fa:49:
                    5b:52:c0:3d:27:42:f3:49:57:1e:46:d0:0f:8d:2a:
                    f2:0f:a5:43:8d:91:64:e1:6e:66:81:88:89:df:2d:
                    6c:36:b3:00:12:93:88:d8:44:1b:31:07:e0:41:48:
                    75:06:3f:9b:dc:b4:01:b5:8a:b7:74:5f:b7:f4:62:
                    9e:3d:4b:13:51:24:e6:a3:66:45:b0:66:a5:8a:ad:
                    07:8f:62:a0:eb:c9:2f:cc:5b:f2:39:e1:3e:3a:6d:
                    4e:c4:a2:f8:9c:94:01:d5:f8:ac:2e:6a:ec:eb:78:
                    49:3f:20:73:d4:bc:a6:87:41:d6:1b:ba:72:84:57:
                    71:b7:1b:1b:2c:b5:2b:87:a7:74:d2:3a:4f:20:10:
                    5a:da:d9:1f:0b:8c:b2:dd:5b:0f:1d:82:78:81:ed:
                    74:e1:db:3e:2b:06:de:97:66:fb:f1:39:d9:62:bb:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:60:06:8D:29:53:4B:CE:A9:D7:8F:DC:79:3D:AC:D5:83:51:88:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/c5eda3f5-4300-3e06-9672-bcd44a4ea5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:85:bf:0e:4a:fe:d0:33:77:7b:5a:ef:e1:80:f7:0d:d8:
         0e:76:b9:7b:6d:84:72:a2:a6:84:c3:2e:9e:29:0b:aa:eb:02:
         cb:ca:89:3f:5f:2d:8a:0a:47:0a:6e:be:1d:d1:74:6a:47:4a:
         70:8a:9d:4a:0f:9b:3f:34:9d:82:69:e9:ff:33:2e:5e:4f:a6:
         e5:31:1d:ee:b4:65:03:46:0c:76:c4:6c:c0:ac:ce:5d:9f:94:
         df:94:a5:00:90:47:2f:a6:11:b7:2c:93:11:bc:c5:43:04:ec:
         e3:e7:66:07:ff:45:f6:cd:07:37:db:4b:ea:6e:b3:ec:09:16:
         37:48:3d:24:00:76:d9:69:e3:2b:a5:f4:17:7c:16:33:19:73:
         f7:b7:8c:ef:73:f8:1d:40:ee:d3:56:ff:85:02:cc:eb:7a:cd:
         43:8c:4f:7a:dc:76:d2:eb:5d:a1:67:ad:0d:07:67:83:42:1b:
         3a:6b:20:9e:8f:1a:a1:e0:9a:36:24:0c:82:ff:b8:21:ef:92:
         c6:92:b9:4e:bc:8f:56:ea:0e:19:b4:55:d5:ae:66:7d:e8:7c:
         d0:9d:99:96:90:93:89:7d:a1:b3:61:e1:86:ca:3d:e8:00:14:
         ba:bf:82:71:84:5d:53:77:d7:56:a6:b1:72:4d:0d:5f:ce:4a:
         ee:92:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:23:04 2026 by rpki-client