Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccd300d-0063-3938-b57c-5b1aac3cea29.roa
File:                     0ccd300d-0063-3938-b57c-5b1aac3cea29.roa (raw, json)
Hash identifier:          IRGPk5AEiKHnzVUYIxuR6H4DTCqVs2dniRnrmoe6I98=
Subject key identifier:   29:D1:57:92:D7:67:D1:C7:A7:F7:1F:5F:10:80:74:B7:3D:AC:41:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119DAA193FF1FA0A97312700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccd300d-0063-3938-b57c-5b1aac3cea29.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        67.176.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:aa:19:3f:f1:fa:0a:97:31:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=bf29fa08-3a46-42e8-b81e-8f95e82b1633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:d8:e3:55:6d:d4:21:36:98:60:24:13:08:
                    1b:6e:45:f2:8b:30:94:70:5c:2b:a3:a4:c5:7d:3c:
                    a9:2c:65:06:d9:a3:65:e6:04:71:68:6a:69:97:09:
                    1d:96:e4:65:be:b8:73:af:f2:13:06:e0:33:82:c8:
                    f2:78:3d:4e:a0:88:57:79:3d:8d:74:8b:c0:f5:55:
                    af:01:f3:f9:92:7f:c2:e8:02:c5:03:bf:f8:4a:fe:
                    d9:0d:22:0c:f7:fa:8d:ec:67:f4:70:b0:7d:ca:93:
                    e6:19:ba:86:68:ee:07:40:c3:c4:2b:46:69:c6:bf:
                    9f:92:4b:20:c7:17:23:f1:56:41:52:2f:1f:1f:c1:
                    f7:a6:1f:a3:0c:40:b4:44:58:c9:e5:e4:e1:66:94:
                    8f:cc:11:31:34:9d:1d:9c:a1:c0:29:7a:d6:60:8e:
                    5d:b3:01:17:d0:a7:df:3a:d0:15:cc:07:1b:f9:a0:
                    c9:f5:2d:bf:77:bb:72:6b:06:85:b0:77:74:03:f5:
                    e5:9f:71:6b:af:bf:a8:47:a5:a8:b7:d1:bf:78:53:
                    d1:84:29:11:43:70:c7:80:7c:8a:ca:eb:8d:48:dd:
                    da:29:c2:ab:fd:57:35:04:c4:fb:c8:ba:77:69:ce:
                    e5:de:ee:34:c8:9b:97:28:b3:3e:28:07:c9:05:70:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D1:57:92:D7:67:D1:C7:A7:F7:1F:5F:10:80:74:B7:3D:AC:41:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccd300d-0063-3938-b57c-5b1aac3cea29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.176.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:08:d9:8d:38:f3:70:c3:4a:a7:88:98:68:5c:88:df:0f:
         e5:a5:03:e8:fe:fe:fe:ea:aa:97:45:c9:3a:6b:55:65:46:ae:
         65:c4:36:a5:1b:11:f4:9e:ac:18:8b:93:0c:0b:26:d5:19:00:
         54:88:8e:d2:58:b1:bf:85:07:73:6d:d8:50:63:05:f7:12:10:
         bd:12:de:9c:5c:8c:43:5c:cc:89:4f:e4:23:ec:a3:a4:1a:48:
         93:4d:fb:a1:3f:a8:1b:3b:5f:0b:36:48:c7:d4:40:e0:91:c3:
         1d:e2:d4:c6:40:b6:a2:24:70:f3:38:fb:b0:c7:6b:c1:33:27:
         2a:fc:9d:cb:c3:44:e6:6c:93:7e:94:3e:ab:aa:95:1a:d4:e5:
         e8:bf:0b:7a:78:42:9d:b6:48:b4:57:42:d1:e4:68:48:bd:38:
         ed:e5:e0:1d:22:37:ae:ef:84:07:9c:20:3c:bc:62:a7:60:50:
         aa:99:fe:62:db:5a:48:d9:b0:eb:66:48:75:35:fb:1e:29:03:
         e8:34:cd:6a:0d:e4:36:2a:ec:d9:f0:d8:9b:0a:51:dc:b3:db:
         9b:a9:17:1c:df:fc:bc:d9:61:97:69:1e:08:51:09:09:16:38:
         8c:c1:c3:61:57:39:bd:81:a0:de:8d:2e:f5:74:20:54:ec:47:
         0c:ec:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:42:54 2026 by rpki-client