Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbd45e84-5bbb-33c2-98f6-aec400b99cce.roa
File:                     fbd45e84-5bbb-33c2-98f6-aec400b99cce.roa (raw, json)
Hash identifier:          XexKtV4HcmpTDqXyDMk/r3VpvrbWyh53SbUYxOx7RAs=
Subject key identifier:   30:BB:5E:90:92:6F:6F:A2:7B:B8:21:78:8B:3E:50:FB:A0:45:85:53
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D40CB8D1C58B6245C41DD9720
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbd45e84-5bbb-33c2-98f6-aec400b99cce.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20115
IP address blocks:        97.92.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:8d:1c:58:b6:24:5c:41:dd:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=f9a818fa-768f-4c0d-b803-b2a9ed537918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:0d:1b:56:54:31:92:2a:d2:45:94:d2:75:
                    98:d9:8f:c8:b3:3d:37:b4:85:d0:18:5d:e4:74:30:
                    4f:29:23:c9:a5:ee:3b:71:18:7d:46:4f:97:a8:46:
                    d2:7f:59:19:e3:b0:fd:e4:d6:7c:ab:52:d8:df:0e:
                    fb:af:c4:84:82:87:0f:5e:83:15:6b:45:6a:b9:00:
                    d5:3c:d4:81:bb:7f:b2:5f:42:e6:ac:f7:7d:cd:ed:
                    00:77:95:10:47:d4:7e:64:b1:8c:22:99:0b:d8:bd:
                    29:10:82:4c:e6:28:6f:b2:b1:c9:fb:01:e0:5b:4a:
                    ce:30:0b:a1:9c:ec:a4:cd:5f:f5:5f:42:24:d0:65:
                    81:22:ef:93:25:01:55:e3:21:c2:46:c4:e3:7d:dd:
                    9d:a2:4c:ae:20:94:e4:e1:3b:55:a9:21:18:d9:36:
                    3f:84:13:49:01:f7:8b:d9:7c:f6:da:01:2a:8a:ef:
                    57:29:a5:44:7b:f9:1d:5e:e8:ec:c1:67:ff:a8:6a:
                    38:f1:dd:ad:75:1e:e5:84:7b:9d:2d:70:80:73:b6:
                    1c:99:ac:a6:6e:da:d0:fc:a2:27:ea:fe:c2:f7:a8:
                    7d:4a:57:a5:25:53:41:2d:04:8f:31:75:3c:2d:61:
                    1b:ef:19:f4:f1:1a:81:32:ba:17:f7:e7:09:70:22:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BB:5E:90:92:6F:6F:A2:7B:B8:21:78:8B:3E:50:FB:A0:45:85:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbd45e84-5bbb-33c2-98f6-aec400b99cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.92.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:8c:00:2b:eb:72:4e:65:00:12:35:4e:71:bd:c0:ea:bd:
         de:81:4e:ac:70:35:2d:f9:af:e6:fd:ad:05:65:ff:74:a5:20:
         2f:bd:ec:54:5b:cc:7c:86:01:48:e9:26:c6:1c:a3:fc:1c:fd:
         15:cf:b0:92:bf:c5:2d:81:6a:fb:bd:cd:61:d8:6a:6f:cc:97:
         57:ba:06:ba:df:69:b4:fa:b6:f9:00:aa:59:40:1d:90:0f:1b:
         ad:4a:79:64:69:61:45:6b:5d:46:5d:8f:47:e3:40:22:de:38:
         88:37:8c:9e:3e:f5:18:68:58:17:1d:95:98:db:15:67:86:8b:
         23:39:b4:45:bb:af:69:23:b5:99:ce:69:8e:30:02:83:d0:7d:
         7c:26:65:73:83:b7:aa:a9:d7:b7:d7:5a:fb:3e:ad:d7:06:21:
         60:d8:88:f4:92:01:42:f3:fc:ea:77:7a:64:2c:73:36:2e:c9:
         c6:d4:be:e3:34:fc:12:b5:c1:98:22:d2:6b:04:dd:e4:eb:23:
         5d:b9:dd:dd:46:f0:c9:48:d3:da:e6:45:1b:3c:0c:70:33:5a:
         cb:8f:2d:b3:f3:4f:e2:3c:c8:02:cb:0d:a5:7d:45:6f:ce:08:
         89:7e:d0:97:75:6c:35:82:0d:a2:40:2e:c6:7a:0e:7d:94:90:
         d0:48:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:09 2026 by rpki-client