Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa
File:                     07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa (raw, json)
Hash identifier:          NXiGIPtWBLGzU4JGMAQNnMqJF6kOSZl/ExUcFmGjB/I=
Subject key identifier:   FB:1A:4B:37:40:2F:DA:06:B0:5D:22:A2:59:BC:34:95:68:4E:6D:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A8076DBD34B762741A9780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        67.191.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:07:6d:bd:34:b7:62:74:1a:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e9734e74-68a5-4e20-bdeb-f6cf234ae88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:42:e9:5e:20:32:62:4b:e5:07:64:2c:d0:
                    8d:4f:dd:15:d1:a0:21:4b:f3:b1:37:db:2a:6e:71:
                    d0:f9:54:e1:25:5b:b0:ea:8b:3c:50:96:3b:17:01:
                    ad:0c:d3:2a:49:70:98:68:80:34:8f:d9:f6:dd:59:
                    55:89:45:de:89:d0:1e:fa:4b:0f:54:d0:4c:33:d1:
                    f8:1d:6a:1c:6b:47:06:d3:5d:6c:a2:95:6d:ce:79:
                    43:9a:2f:34:9b:7a:7c:37:7f:25:7f:e9:e5:da:71:
                    f1:f3:ac:69:01:1c:76:c3:a8:de:fc:08:4a:62:ae:
                    29:1b:bb:c5:7d:ef:29:d6:65:bf:ed:1c:84:7d:7e:
                    4a:04:97:ba:f4:0d:ba:40:10:34:3d:df:37:8c:fc:
                    4a:1e:35:ac:d4:8b:7c:52:2b:d6:7c:1d:9e:5f:a3:
                    01:e1:91:ee:83:05:bc:22:62:b0:06:61:97:2e:9e:
                    96:22:69:12:0e:12:06:29:c9:83:94:c1:09:fe:b0:
                    2c:fe:d6:f9:35:f4:cf:da:16:e1:4b:29:1a:79:1d:
                    39:bd:70:a5:49:0e:f2:2f:af:b3:1d:8b:f7:ab:cb:
                    c2:29:8c:7a:db:ef:77:6b:5a:7f:f3:1b:c1:59:c7:
                    8a:18:9f:9d:c1:56:95:42:08:25:24:c2:ee:b3:dc:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1A:4B:37:40:2F:DA:06:B0:5D:22:A2:59:BC:34:95:68:4E:6D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07578d3a-d5c2-3f9a-9a24-16e80324a7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ae:38:76:0e:d2:59:95:e0:b1:25:8f:39:d3:4c:ce:f1:ec:
         63:5d:e7:e9:7a:04:53:40:51:b2:5c:6d:94:22:d3:42:61:0f:
         e1:52:7d:dc:c2:37:37:c8:81:68:9c:72:f6:cb:da:b4:a2:25:
         8b:69:64:52:03:4f:50:b1:23:96:45:ea:37:02:48:19:a4:64:
         b9:7a:a5:d9:c9:f3:61:bd:f7:83:9c:5c:b2:b2:35:c9:16:67:
         88:bb:f8:92:56:46:3a:c4:74:35:66:80:0b:45:24:66:da:84:
         e7:30:39:00:f4:dd:48:f0:a7:91:fc:f3:7a:af:b5:31:09:1d:
         9b:5b:5e:85:e6:bf:0f:56:5b:72:a5:c7:d2:5b:f6:11:4c:cf:
         93:cb:dc:7d:e5:e4:f8:7e:57:15:b9:8c:f6:f0:43:83:a9:4a:
         f7:2e:09:32:51:82:a7:91:44:53:93:1b:67:63:65:cf:70:15:
         e0:97:f0:e2:70:75:1b:ac:c4:e3:ee:7a:38:55:40:86:ae:83:
         6b:08:33:22:ef:2e:36:d1:5e:b6:c6:48:65:55:8b:15:cb:b2:
         23:47:6e:cf:a3:54:65:2e:fe:dd:4f:d6:cc:c4:36:68:c6:ba:
         4c:20:09:47:2a:a2:98:75:4a:38:f4:37:11:c8:6b:ae:20:ec:
         e0:3f:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:27:22 2026 by rpki-client