Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b71bef3-bee4-3e24-b9cc-a00c10d1230f.roa
File:                     2b71bef3-bee4-3e24-b9cc-a00c10d1230f.roa (raw, json)
Hash identifier:          C9JlWH9r1bCCCXTaQCRMrQDpFRHxUSkeFuvCX3fTCx4=
Subject key identifier:   81:D7:70:63:0F:36:10:77:33:0E:E4:38:D0:14:E0:A2:88:47:FB:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFEE9444F32746FF032080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b71bef3-bee4-3e24-b9cc-a00c10d1230f.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.61.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:ee:94:44:f3:27:46:ff:03:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=c987684e-4205-46bf-9ebc-117eb71647c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:28:f1:fc:43:7e:0f:23:c8:a5:5a:5a:d7:
                    dd:29:50:4f:66:c8:a9:3c:d6:a4:07:d1:81:c1:b2:
                    fe:8a:c0:91:55:e7:c9:6f:d4:6e:82:d1:27:49:6f:
                    52:d9:c2:3a:9e:db:95:2f:c1:8a:a1:9d:24:6c:2d:
                    c7:df:a1:3b:b5:c6:43:ff:89:aa:e5:a4:f7:6f:aa:
                    fb:d8:0f:03:32:64:75:8f:fc:41:db:c2:8f:23:4e:
                    27:aa:1a:89:1f:fb:3a:00:a6:02:4d:0d:dd:32:63:
                    c8:d7:b2:af:4b:e4:59:37:06:6b:42:a0:6f:9d:50:
                    99:b7:7d:83:78:87:57:a9:85:b7:e8:52:ed:8f:b7:
                    f9:ee:2f:da:62:9c:9c:cf:c7:9b:6e:5e:e8:ac:57:
                    63:49:29:55:62:b9:51:4d:96:8b:bb:8b:df:5a:37:
                    99:67:07:c2:f2:08:94:98:30:64:27:18:a5:80:65:
                    88:b0:a9:54:f7:c6:83:f0:11:61:64:0c:d4:47:95:
                    00:90:22:b3:51:a8:31:69:5d:97:ec:32:95:a5:49:
                    9a:c8:41:c1:77:11:5b:97:d6:7a:6a:3b:4f:7f:8d:
                    e4:cb:cf:b2:95:c0:7e:86:24:70:d7:f0:ed:9c:f6:
                    e5:23:5d:75:c5:a6:ac:4a:34:c6:99:d6:9b:1c:5b:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:70:63:0F:36:10:77:33:0E:E4:38:D0:14:E0:A2:88:47:FB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b71bef3-bee4-3e24-b9cc-a00c10d1230f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:8c:38:c3:54:63:11:83:32:72:4c:eb:7b:d2:f7:00:1a:
         c2:eb:ef:c3:fc:00:20:3f:78:af:9c:43:fb:d7:6d:1d:17:93:
         13:83:ef:26:ed:bb:88:5c:95:c8:35:1e:19:c7:ed:bd:9e:d9:
         02:9a:8d:0e:ff:2d:7c:5f:df:21:37:27:ed:bd:ad:99:26:53:
         c8:60:82:66:01:48:b0:41:d1:a5:51:94:cb:ea:7b:39:0a:be:
         50:22:51:6a:f5:70:81:67:26:1b:47:b8:f7:be:c8:2b:7b:d6:
         e6:60:34:bb:e8:1e:57:9b:50:10:a1:a5:94:40:5b:c9:25:91:
         2a:2c:43:26:0c:67:b7:7e:70:96:d0:ab:d1:78:6f:ec:95:6d:
         dc:52:33:ec:50:48:79:69:20:09:fa:ee:3b:08:12:4b:ac:12:
         85:9c:38:d1:0b:12:8e:74:30:c1:96:4b:b1:d7:bd:b5:24:a8:
         80:95:95:15:fd:40:c7:51:46:e3:10:2d:19:56:48:9b:95:8e:
         4e:f7:cc:37:94:82:8c:53:66:09:2b:f2:ba:aa:6c:13:67:ff:
         05:c2:6e:f6:5f:cc:52:c6:b3:63:96:e0:8a:cd:c3:70:b7:bd:
         f7:29:43:d6:b6:5d:20:83:f3:2b:bd:c0:d5:07:89:19:02:86:
         47:ee:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:23:04 2026 by rpki-client