Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617545-861e-3cb4-a052-f3daf9a6c299.roa
File:                     03617545-861e-3cb4-a052-f3daf9a6c299.roa (raw, json)
Hash identifier:          oZwYUBMGR1sM6wLqih7+/QVYnWd9rQmFLWuSg2w5h1c=
Subject key identifier:   D9:AE:50:55:2A:DB:5B:EA:27:F0:AE:18:25:5E:39:EF:02:50:9D:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFE676E924A7C95B4C4900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617545-861e-3cb4-a052-f3daf9a6c299.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.54.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:e6:76:e9:24:a7:c9:5b:4c:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=b2242abd-e629-4241-9f6e-1b66307c4d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:96:6c:3a:d6:33:13:a1:37:69:6f:64:f1:
                    e1:94:4b:65:97:72:6f:c4:c0:5f:d2:47:26:99:3d:
                    7f:78:6e:7b:0b:e3:00:44:75:9b:51:f5:ef:4f:7e:
                    b9:4a:b2:9f:c8:50:59:b2:87:c7:92:ab:9c:00:ba:
                    63:97:1c:3b:b2:12:b3:72:0d:8e:8d:97:20:00:e7:
                    b8:0a:05:ee:e7:61:b2:5f:74:06:74:7c:28:54:dd:
                    ec:ec:c4:15:6e:5b:92:03:3f:d4:96:57:87:99:26:
                    47:f5:12:b0:c4:3a:87:5f:17:fd:b8:aa:96:c5:99:
                    ce:a7:39:06:62:88:15:76:d6:cb:86:99:7d:3a:2a:
                    a1:d7:b1:6f:cd:03:c9:be:fe:6e:07:42:ed:87:25:
                    47:c2:b8:d4:42:1f:14:c1:0e:0e:ec:af:c4:cc:cf:
                    15:1f:65:04:56:a7:40:c3:fb:44:d1:d5:c2:9e:a9:
                    bc:19:4b:7a:d0:25:74:b6:db:af:0a:4c:95:bb:b0:
                    57:cb:57:d7:df:91:f7:44:f5:b1:85:fb:ce:68:0b:
                    bb:cb:c9:be:39:c7:fe:e6:14:5c:77:25:e6:5b:68:
                    c8:95:b7:dc:13:4b:18:e2:b2:f7:31:5a:83:bc:76:
                    4c:04:b8:20:8f:e6:a3:ca:a1:61:a0:ee:ce:01:61:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AE:50:55:2A:DB:5B:EA:27:F0:AE:18:25:5E:39:EF:02:50:9D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617545-861e-3cb4-a052-f3daf9a6c299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:a8:98:8e:4a:13:fb:60:d7:4c:bc:bf:13:9d:07:c1:b5:
         a4:10:99:15:a0:38:a9:9b:4a:b8:1c:24:ae:26:14:12:fd:37:
         09:28:4f:34:e2:a5:9e:95:81:26:a1:7d:d8:0d:af:fc:32:15:
         70:a1:ed:5c:ae:52:11:70:20:5c:d2:c8:7a:11:66:57:85:c5:
         f2:ef:50:dc:9c:45:a8:35:d4:36:83:89:bc:70:99:df:f6:66:
         fa:cd:35:de:ac:cc:cf:58:e4:1b:ea:b6:0c:37:0f:a6:89:3f:
         1c:b6:db:4f:73:48:68:14:89:09:32:d5:76:b8:be:c9:da:d9:
         d1:d7:90:9c:14:8e:17:16:11:c2:4b:5d:d8:2f:38:38:c6:d0:
         30:dc:d6:14:03:dc:5f:a2:b9:27:b6:4e:42:2e:82:0d:8d:d3:
         a5:08:27:de:8b:d8:80:de:14:4c:e7:9a:53:f6:cb:b7:77:e2:
         96:2a:c6:74:79:df:69:fe:0e:21:1d:6b:1d:d3:59:fe:15:ce:
         2f:25:ff:30:8a:ed:ce:83:73:ab:ef:b6:4e:29:4b:75:a4:54:
         e2:2a:ba:9d:0d:c8:ac:10:a9:e5:c6:6f:4e:87:f0:01:57:62:
         b2:6d:57:67:36:6b:bd:e9:7b:ed:a6:f7:cc:91:2d:0b:b5:e8:
         8f:ea:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:48 2026 by rpki-client