Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b9d5da3-016f-35b4-b787-9eb8247b64ad.roa
File:                     0b9d5da3-016f-35b4-b787-9eb8247b64ad.roa (raw, json)
Hash identifier:          x/pxiVuiucCyKTCk8MEvEFyIqMkpZpM574J5F/XFNPc=
Subject key identifier:   A4:5A:99:12:96:94:33:D4:D7:9A:96:02:D0:C9:7B:A9:A9:89:09:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F1260A6955451EFDC0DB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b9d5da3-016f-35b4-b787-9eb8247b64ad.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        68.44.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:12:60:a6:95:54:51:ef:dc:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=7a21deb6-704d-4028-9d7b-cf1f21621418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:db:5f:3b:b5:d3:77:85:8d:fa:68:37:7f:
                    c1:9f:d0:d2:93:25:42:f3:2d:d8:8a:12:87:f4:52:
                    6f:c7:44:ba:ae:d6:67:f7:31:01:73:ca:c0:8e:52:
                    ee:f5:a9:c6:f9:81:ee:dd:c5:af:2b:ca:e1:54:6a:
                    f2:71:3b:8f:bd:19:8b:97:52:eb:b2:e1:85:5e:f5:
                    9b:bb:5e:56:fe:25:75:42:3f:1f:d9:89:c7:6a:d0:
                    a4:da:63:73:1c:fe:95:7a:22:5f:73:32:d6:6f:d7:
                    4d:a1:8b:16:ad:1d:32:93:54:47:36:53:1b:af:cc:
                    ff:f2:87:48:cf:c0:a4:c6:6f:9f:13:db:d8:ea:7d:
                    9d:21:c5:1b:14:03:63:fd:2a:d3:ca:61:47:ef:59:
                    1a:a8:b7:5d:b7:99:54:e2:05:f0:a7:a0:12:ab:c2:
                    13:cc:28:01:47:8e:35:0f:c8:17:d3:3a:2d:6e:86:
                    ea:12:ff:99:fb:08:b5:94:19:4d:32:29:c3:35:ac:
                    d9:21:48:2b:85:77:d9:f2:05:8f:72:e2:a7:f6:4c:
                    a8:65:fd:5f:0e:0a:7c:8d:e1:7f:19:22:b6:2d:a8:
                    2e:d6:5a:11:c6:e1:33:00:df:11:30:a0:a5:6e:46:
                    9a:29:34:96:bb:69:4b:23:97:28:8b:da:5f:ce:12:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:99:12:96:94:33:D4:D7:9A:96:02:D0:C9:7B:A9:A9:89:09:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b9d5da3-016f-35b4-b787-9eb8247b64ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.44.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:22:18:a8:fa:ba:8b:bc:da:04:87:bc:54:07:64:78:05:e2:
         29:bf:fa:fd:4b:b2:ff:28:8b:d1:ec:35:26:a6:20:bc:3e:30:
         be:6d:0f:c2:80:de:aa:b8:10:b3:3b:b9:bf:26:ea:45:a8:1d:
         78:21:00:af:06:bf:06:52:33:bf:c2:da:80:9f:88:b6:9f:9b:
         33:38:a7:da:76:60:eb:29:e6:4c:22:66:2e:0c:9a:f8:e8:82:
         c6:7a:c4:0d:77:9d:d8:6b:dc:e7:b5:19:5f:93:31:ff:07:75:
         8f:19:dc:1f:5a:e2:f3:64:34:5c:05:4d:f1:55:8e:0e:55:fd:
         23:30:11:5f:54:df:8a:72:63:0e:d4:3e:e2:60:39:ea:b1:04:
         0c:6d:2b:b8:ca:81:6c:bd:a7:2e:3b:13:5d:bc:77:49:04:96:
         8b:36:8a:16:4f:9e:6e:c6:a6:11:4f:07:7a:24:0c:fc:81:f7:
         e8:e6:4d:ae:a5:59:db:83:25:79:b6:73:84:40:83:1c:ad:8f:
         dd:53:c7:3d:0c:71:08:84:cd:a8:fa:56:4a:55:17:12:93:ec:
         fd:3a:98:d6:87:7c:16:a8:37:46:31:bf:79:ac:b0:fd:2b:13:
         ac:97:59:8c:47:75:f9:e5:d0:d9:c6:a6:71:d1:c3:41:58:9a:
         4b:11:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:39:34 2026 by rpki-client