Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
File:                     4065f43f-ee36-3824-890b-4696c8253f7f.roa (raw, json)
Hash identifier:          QdUtQF79emaYJBMBXNO54OxcgUauU/0YIeQjjrSPj5k=
Subject key identifier:   EF:6B:9E:72:F6:A0:09:99:68:64:AF:01:6D:A5:EA:F8:1B:DD:2D:66
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F4328584F497408323DEA3EEB4A6C7930
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     91
IP address blocks:        192.12.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:08:32:3d:ea:3e:eb:4a:6c:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7237b96a-0fc5-44e0-858e-7a865caeacbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:9c:a3:0b:08:e6:3d:d3:da:96:1b:f3:a5:
                    7c:81:d6:63:93:d0:1a:e8:a1:1d:9b:ac:10:f9:cf:
                    ac:a4:ce:15:f0:04:8d:9c:49:8e:1b:23:ed:f2:52:
                    c5:7f:74:5c:2c:d9:24:c9:21:39:9d:b5:fb:26:df:
                    fd:1d:d4:45:47:58:cf:9d:3a:a5:b7:27:95:3c:8c:
                    f6:d1:9c:d9:d1:43:d6:76:fa:2b:bd:5a:33:ab:3c:
                    59:f1:32:06:52:01:b0:5d:b0:45:6e:8f:15:89:e5:
                    bc:91:52:65:db:b6:f8:58:01:3d:f3:49:28:62:8b:
                    a5:5f:45:3c:bb:3a:44:99:28:b3:62:71:b3:5e:96:
                    44:a9:49:4c:23:56:f3:0d:9c:0e:54:78:19:93:52:
                    7c:1b:52:d6:dd:bf:61:b3:72:f5:c4:a8:b1:fe:4d:
                    70:76:ac:39:52:0d:7b:8a:b8:3e:16:22:18:c4:ed:
                    95:5e:c4:32:ae:e4:1b:08:dd:74:69:c3:57:e8:c6:
                    e5:70:79:1c:37:b1:5c:9a:4b:a9:ef:70:52:b0:90:
                    df:c6:7f:fd:eb:be:fe:f7:e0:1e:d2:28:ee:78:6b:
                    7a:aa:35:d7:d9:d7:88:bf:c7:02:f6:a9:d9:bf:40:
                    ba:22:0e:3e:a2:25:44:09:3c:28:fe:16:d6:8c:d8:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:9E:72:F6:A0:09:99:68:64:AF:01:6D:A5:EA:F8:1B:DD:2D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:50:b5:ed:45:02:5b:9b:5a:e2:d6:c0:a3:18:ba:90:f8:
         4f:d1:27:f0:3f:2f:9e:27:88:92:a8:7a:9a:30:97:56:f9:12:
         80:18:52:81:9f:4e:10:f2:1b:fd:3b:17:f7:66:92:b2:78:42:
         c8:6e:d9:6b:a8:cb:d1:0e:2e:18:63:65:81:78:ca:27:55:6a:
         d5:68:36:6c:7d:13:ef:8c:05:fb:9f:bc:04:44:78:5c:b9:c7:
         65:c2:24:cb:fd:ca:61:51:a4:dc:18:1f:b0:fd:22:b6:53:c5:
         c4:a5:01:44:7a:60:f0:64:8a:7b:0c:bb:73:b1:e8:23:4b:7f:
         32:62:a6:53:54:7e:f5:6f:d0:04:70:71:49:ef:1d:2b:6d:16:
         36:71:1b:fc:2c:4b:8e:dc:4e:5e:7d:ac:4d:a1:6a:7c:13:39:
         5c:49:e1:52:0a:22:b8:cb:a8:86:b3:c8:7f:f7:ad:d1:ad:66:
         db:34:01:c7:cc:c9:c1:b5:49:9b:1e:45:70:f1:6a:2e:4c:1d:
         52:4c:72:cc:33:0e:d7:5b:76:0d:4d:d8:d1:1f:1a:82:16:86:
         e6:7f:82:88:f6:6a:78:a2:23:09:f3:af:54:e3:97:b9:0c:4e:
         97:d2:65:35:7f:5f:2c:37:67:09:cc:cb:be:c0:18:63:85:4a:
         72:94:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:57:54 2026 by rpki-client