Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d49e38-c518-3f22-8361-237cfe826e6c.roa
File:                     23d49e38-c518-3f22-8361-237cfe826e6c.roa (raw, json)
Hash identifier:          gtut5VAMrO9Jj1Bd7bH/bI5YJhaMUNsZeLL11uzf9Po=
Subject key identifier:   F4:28:C4:DF:17:04:95:2E:FC:5E:61:3C:2B:C2:91:87:B5:A1:73:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BE255E05E3C083EBB8FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d49e38-c518-3f22-8361-237cfe826e6c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        68.82.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:e2:55:e0:5e:3c:08:3e:bb:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=776e0a89-d2d7-4f1e-8f04-02e072c5e85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:02:f0:14:6d:2e:98:f7:bd:5e:da:e7:7d:f7:
                    01:27:0d:ac:7c:c4:0c:7b:83:26:b2:19:19:05:64:
                    29:82:24:33:ef:90:26:4b:16:e8:96:34:5e:e8:74:
                    fe:db:5a:3f:bd:aa:60:e6:ff:6d:80:5c:35:65:8a:
                    6e:b5:c3:f6:a2:7b:6d:78:2e:0e:53:15:be:c5:b1:
                    72:e2:81:ff:00:e7:cd:3c:15:93:d4:d4:cb:cf:61:
                    b1:68:ca:a7:77:d7:47:e4:c4:0f:39:ac:e0:65:87:
                    92:27:68:7a:05:75:c9:fa:f9:7b:a2:5c:31:ec:17:
                    18:18:c6:a5:13:6e:82:c8:aa:72:41:dd:34:02:c4:
                    4a:76:d5:80:52:ad:0d:c7:3e:98:f8:c9:c8:ab:09:
                    f5:55:52:77:51:3d:89:40:d9:6b:22:2e:e8:82:63:
                    fd:8e:dd:86:99:67:19:5e:2a:c8:cb:1f:0e:9d:1c:
                    6d:69:c4:6a:c6:14:e1:02:bd:02:d9:df:de:25:5a:
                    0b:df:d2:f9:6c:77:81:dc:41:2d:56:35:fd:7c:28:
                    12:04:79:f6:3e:dd:a6:8c:25:f8:42:ea:1b:de:a6:
                    19:c8:7e:75:a5:64:43:da:ae:07:e1:82:f5:87:a9:
                    3b:d1:b4:d5:30:db:f5:08:9e:6a:05:e2:8f:e4:cc:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:28:C4:DF:17:04:95:2E:FC:5E:61:3C:2B:C2:91:87:B5:A1:73:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d49e38-c518-3f22-8361-237cfe826e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:61:df:14:4d:7b:60:f4:d9:0b:63:8e:f2:27:75:8d:e6:81:
         ef:f2:af:72:35:f9:25:9a:b8:82:a9:91:ca:a7:95:7f:14:1b:
         53:81:6c:9e:08:1f:f5:75:f0:b7:3d:62:08:d4:4e:4d:f3:c3:
         df:4d:37:a5:59:22:ec:0c:43:2d:72:ef:0e:1f:ac:99:25:41:
         c4:d6:f6:ae:e9:60:70:cf:f7:45:59:ed:a8:49:17:9f:ed:57:
         9d:4c:6c:b7:21:ca:63:47:6d:7a:89:a0:bf:04:20:8c:a2:e5:
         8a:f8:e2:a3:01:71:b8:da:ee:cc:7e:56:b3:cd:60:45:5f:0d:
         cf:d8:d3:96:0f:2d:72:a5:77:be:31:c5:13:87:2b:b2:56:fb:
         c5:32:be:20:2b:00:a3:a7:3c:95:f9:3c:e4:0f:56:9e:bb:cf:
         ed:d3:34:9a:e2:53:e8:22:54:e8:d8:9b:e7:81:48:c8:b6:d2:
         99:84:8a:5e:76:34:ac:a9:d3:e4:3f:a4:b5:01:31:8d:0d:02:
         9a:70:3b:90:2f:ff:15:e2:2f:22:99:e3:51:42:92:0c:7f:75:
         3a:78:77:e7:68:bc:b8:dd:2c:d2:3e:30:e4:04:a2:7f:63:13:
         8d:4a:9d:96:83:4c:78:de:e5:5e:63:b5:d5:3c:e7:1c:02:d5:
         a2:98:af:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:53:26 2026 by rpki-client