Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/094e4674-4509-31bf-92bb-8878ac06ea2e.roa
File:                     094e4674-4509-31bf-92bb-8878ac06ea2e.roa (raw, json)
Hash identifier:          hHsRS/xCYPuJWfRZYRbYPsi/sWnkD5XtLV+NvftYgHU=
Subject key identifier:   F7:F6:0F:A5:5C:41:6A:F0:62:E4:51:52:3F:26:8E:FD:1A:26:27:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8B8F83791FC025A7F20C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/094e4674-4509-31bf-92bb-8878ac06ea2e.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.40.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:b8:f8:37:91:fc:02:5a:7f:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=5de20be1-eacf-4143-b5d8-5bf73a6f89bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:f4:93:ba:50:04:74:5b:7f:44:19:35:a1:
                    cf:50:23:94:af:a8:c2:f0:3b:9f:c3:70:a0:80:57:
                    95:9a:ed:26:f3:d0:c1:25:44:fe:ef:db:39:a4:78:
                    b1:10:e6:cd:af:38:a7:45:cf:2f:82:d0:97:d2:9f:
                    24:08:aa:59:41:7e:24:3a:7d:e2:d7:56:3a:e1:dd:
                    1f:82:7b:69:5e:04:ec:ce:16:6e:90:de:f2:94:59:
                    55:0b:eb:02:14:af:03:0b:46:67:90:63:3d:70:9d:
                    46:8b:32:58:fc:d2:2b:4e:d1:52:6a:6c:ff:a1:a1:
                    d3:e7:f3:4d:d7:12:f9:4d:e4:43:4f:0d:5c:b8:58:
                    6c:ce:d8:74:b3:6e:17:00:ea:30:57:ab:e1:3e:7e:
                    12:8f:64:61:6a:2e:bf:6e:f2:43:35:e6:da:a4:f5:
                    e1:71:a6:3b:02:bb:98:b9:b6:83:e0:84:6d:b8:da:
                    88:e7:d0:a5:a5:e6:10:df:03:0d:55:51:90:b4:5f:
                    ca:15:eb:c2:6f:85:6b:89:6a:b6:67:11:18:2d:18:
                    b5:e2:c5:e5:69:f8:6e:43:9c:fb:c5:fc:b7:41:04:
                    1d:e8:4d:a7:3e:3c:57:b3:94:3a:7d:69:e2:69:f8:
                    b8:1f:59:da:47:dd:51:6c:e9:7a:53:f8:65:71:78:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F6:0F:A5:5C:41:6A:F0:62:E4:51:52:3F:26:8E:FD:1A:26:27:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/094e4674-4509-31bf-92bb-8878ac06ea2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b0:ce:1d:4d:b7:e1:24:d7:74:de:57:d6:59:6d:bb:ae:9b:
         bb:e7:5b:fe:9e:91:76:e5:32:58:0c:c6:16:5b:ce:93:3b:3d:
         e7:e0:b4:eb:8d:35:66:2a:b5:5b:4c:ee:84:96:c0:3b:2d:0e:
         d3:40:4f:94:38:12:ee:70:4f:e0:14:8b:5e:8a:d3:fc:34:36:
         41:bc:3b:33:97:33:e1:7f:ea:68:70:a9:1a:f3:d0:5f:86:43:
         60:44:82:6a:43:55:aa:2c:9d:d1:13:77:61:54:36:13:2e:40:
         45:26:3f:ed:a0:40:df:46:6d:92:7b:20:ec:56:67:32:01:8c:
         6c:75:ae:2d:ce:77:04:ed:8c:a9:10:ca:9b:0b:60:93:42:0e:
         80:a8:33:cf:e3:4b:79:7a:08:ad:df:c3:9e:1e:cb:da:6f:16:
         30:a4:95:2a:89:1f:e9:6c:26:b2:a8:c5:a5:61:33:ca:cf:22:
         a3:c2:d8:6e:67:f9:d2:86:04:d7:ab:6c:22:43:d0:e7:ae:35:
         a4:af:e2:f9:d4:c4:bb:62:90:17:22:10:37:27:11:1f:27:57:
         ea:a6:8d:56:9d:6b:da:d0:c2:93:93:15:05:9d:69:6a:f4:13:
         18:8a:f9:6d:17:59:17:36:6a:9d:8a:0e:89:d4:af:ab:f6:f0:
         a1:f4:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:47:55 2025 by rpki-client