Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/074cba1c-7ced-32c9-a252-cd2de9c80367.roa
File:                     074cba1c-7ced-32c9-a252-cd2de9c80367.roa (raw, json)
Hash identifier:          9MTb0PAPzbQ2l/FIqfoiFNcqatHapJVzsmiYhujfxH8=
Subject key identifier:   C7:C3:45:46:57:FA:A1:2B:C6:0C:E2:F1:D5:53:3E:81:C3:45:D2:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA7896900E2734023759D9AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/074cba1c-7ced-32c9-a252-cd2de9c80367.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33490
IP address blocks:        68.85.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:69:00:e2:73:40:23:75:9d:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7740f260-e04d-484d-9c24-292b5161605d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:c3:cd:9d:d6:1f:b2:80:f8:fe:d8:ed:b9:
                    27:a1:a6:b7:e1:08:75:8e:6a:20:dd:88:82:8e:37:
                    ea:79:b5:99:1d:63:61:06:d6:b4:b3:a6:34:0a:25:
                    c7:ae:9d:45:68:5a:34:a4:e4:3b:e3:9b:1e:ec:12:
                    32:fe:56:ba:2c:4b:13:11:7a:ec:e2:92:c8:c2:23:
                    70:90:86:c2:22:5f:30:85:9e:90:c4:9c:ad:33:75:
                    72:87:e5:5f:6a:74:9e:1c:50:4a:73:bc:06:ce:99:
                    7c:57:dd:33:1b:2a:d4:00:63:1e:ef:82:51:18:2d:
                    83:fe:8f:05:c8:91:d9:09:72:87:7f:7b:31:fa:ec:
                    a7:d0:42:2a:ad:7d:73:c3:6a:d9:89:93:d3:db:9b:
                    a0:38:79:d6:8b:85:de:89:d1:e2:d8:88:89:22:54:
                    a9:87:e3:5f:f0:3c:a3:c8:bf:57:66:08:21:16:f2:
                    aa:1d:ea:f4:b9:7e:6b:fa:15:bc:26:8f:0f:22:d9:
                    5f:64:af:5d:79:3b:26:da:33:8e:8a:a3:bd:24:0d:
                    de:4b:48:97:d6:9d:26:7d:6d:1b:e3:19:b8:b1:f8:
                    83:87:96:05:d3:49:5a:80:5d:cf:89:f4:d9:2d:ea:
                    0b:92:f8:c4:82:cf:1d:6b:a2:ab:38:66:51:b4:6a:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:45:46:57:FA:A1:2B:C6:0C:E2:F1:D5:53:3E:81:C3:45:D2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/074cba1c-7ced-32c9-a252-cd2de9c80367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:07:3d:a7:4c:95:31:18:67:86:d5:7d:ab:63:87:c5:1a:6e:
         37:56:39:6d:4a:58:17:a8:17:63:67:ee:16:04:90:53:6c:1b:
         f1:94:12:22:ae:27:3f:5e:45:f3:e3:98:f2:8a:86:73:ee:b6:
         b3:d5:6b:70:ad:32:28:b2:11:e4:d3:25:25:f7:5b:4a:f2:6c:
         fb:3d:c4:a5:24:f3:17:2f:12:24:d9:45:bf:1e:3a:9c:91:00:
         18:77:34:6e:2e:8d:c4:57:6c:0c:aa:5a:9f:23:c8:a7:3b:50:
         8d:c8:fe:7b:c3:bb:9f:53:46:ff:d5:c5:45:2d:62:79:85:12:
         03:93:59:fe:fd:80:e6:7f:53:35:d6:84:b7:99:97:93:31:02:
         f2:a3:a9:57:d9:41:fb:cf:e3:56:70:bd:71:3d:50:ba:c3:b8:
         c4:61:3a:37:f1:45:1e:87:ba:02:b6:52:1b:05:4c:56:07:3a:
         e2:bb:57:3d:8e:30:b9:69:17:96:f5:c7:30:9f:30:5b:17:7c:
         37:a0:b6:92:f4:73:c7:9c:0a:ae:ab:ac:8e:49:5e:28:3a:1a:
         59:89:6e:a1:d4:a6:ba:d6:16:b8:cb:9a:64:94:01:3b:13:ab:
         0c:90:49:74:a9:dd:77:b0:75:18:0f:7b:b9:73:93:ee:f9:37:
         7e:6b:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:18:07 2026 by rpki-client