Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1be62c92-01d7-33fb-a142-44401475168f.roa
File:                     1be62c92-01d7-33fb-a142-44401475168f.roa (raw, json)
Hash identifier:          RiTVAbu1z35Uiqv/qROrLI3JT+aRqoXOpWfjW9upVwE=
Subject key identifier:   49:0B:D0:D8:CB:C9:FC:C3:F3:E2:21:F7:33:7D:65:31:1F:96:E2:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863D7BD8BF1DC50CA1B4D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1be62c92-01d7-33fb-a142-44401475168f.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.37.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:d7:bd:8b:f1:dc:50:ca:1b:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=fdea99ce-5b2c-478e-b5fe-dda1e8ebd797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:57:50:be:b2:9e:42:54:fb:8b:c6:e9:15:
                    b9:1b:51:e3:e5:4e:b3:30:59:6e:47:f5:0d:35:83:
                    f1:e3:b5:8d:29:1a:43:c0:f9:50:46:43:28:28:46:
                    ab:22:ff:8d:a0:60:9f:f7:fb:21:c7:d0:36:74:30:
                    61:4f:12:65:19:ed:71:21:ff:f5:0d:cb:06:82:5f:
                    8d:38:47:f8:68:fa:7d:1c:87:74:0a:5d:bc:94:a4:
                    c9:85:48:6a:40:e2:13:b8:40:9d:5f:c5:e8:2d:89:
                    09:66:c9:05:4e:7a:37:2f:81:51:64:e2:20:b9:42:
                    3a:cd:56:b2:20:5f:83:3f:09:0c:36:32:6d:22:ab:
                    28:03:1b:45:ca:d2:e7:ea:69:6b:0b:c8:6c:44:45:
                    3e:47:6f:96:0f:01:a8:e6:e4:e6:ba:3c:bf:ea:02:
                    b6:ab:73:64:48:27:7f:ba:cf:0b:80:49:37:28:d3:
                    6b:98:49:0d:87:b9:64:c9:b8:e1:d6:c7:1b:72:a7:
                    c2:d0:07:ca:89:2d:24:a1:12:68:ba:5b:f4:6b:2f:
                    ff:99:66:77:1c:09:50:dd:29:fc:9d:36:06:c5:a5:
                    f3:56:b0:aa:17:d7:38:e8:d7:88:7b:12:07:a2:3a:
                    27:eb:24:09:42:a6:5b:6e:15:b9:f2:a6:f4:c6:3f:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0B:D0:D8:CB:C9:FC:C3:F3:E2:21:F7:33:7D:65:31:1F:96:E2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1be62c92-01d7-33fb-a142-44401475168f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0b:04:b8:cf:2b:4b:9c:65:d5:54:03:b6:de:81:fa:29:61:
         38:c5:74:c2:bc:5c:33:e5:61:28:83:6d:a8:85:e8:e9:21:53:
         cb:bb:31:04:59:80:b3:ce:a8:52:c1:65:cd:13:f2:08:a0:d1:
         4d:94:3f:46:ba:96:d0:ef:25:6f:73:68:77:f5:2e:b6:62:5d:
         cf:ad:e3:0e:c1:35:ad:15:ab:6c:0c:6e:73:2e:84:a4:07:3c:
         2d:a2:2a:09:48:b3:92:b6:eb:6e:82:17:3e:c1:17:82:88:df:
         a4:34:0e:87:ce:79:06:26:00:3e:2e:a0:89:a5:58:70:17:de:
         d2:32:f1:4d:00:3b:99:a8:9f:33:8e:70:d7:c9:ba:40:0e:66:
         41:1c:31:98:1e:53:17:cd:63:14:f9:0e:cb:a1:38:c7:1e:7d:
         09:bd:81:fe:8f:6f:c5:b7:37:03:c0:88:b3:82:d7:c3:01:33:
         5f:e6:03:d8:81:bc:c0:3a:db:de:36:9f:b9:d2:61:9c:cd:6f:
         48:b9:88:9e:cd:b6:1c:35:a3:4e:9d:91:8d:e9:7f:f4:67:ad:
         3b:a3:ab:c6:74:8e:87:b5:80:a0:db:8a:1b:cc:69:61:48:80:
         25:c2:87:2d:91:3a:a0:8f:46:df:e2:db:ec:f9:5f:a8:f7:e7:
         c9:09:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:38:50 2026 by rpki-client