Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34281c75-3031-312c-9837-d7581bf41152.roa
File:                     34281c75-3031-312c-9837-d7581bf41152.roa (raw, json)
Hash identifier:          fAbtdKJQji7Tw0OzIvGlykXciNu92UPaltDp4peqhUw=
Subject key identifier:   B6:36:AE:8A:E5:E5:91:62:50:C6:9E:F7:02:BA:FB:49:AF:A2:8F:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4F92C7331A78347B9EC100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34281c75-3031-312c-9837-d7581bf41152.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        68.40.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:92:c7:33:1a:78:34:7b:9e:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4284c6ed-23c4-4206-a869-23266c724cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:11:75:5d:76:75:87:b2:8b:bf:84:ca:75:
                    ed:d5:22:13:04:eb:21:42:1a:fd:08:6c:e4:97:e2:
                    9a:35:90:1a:7f:8c:63:e1:b7:32:9a:aa:74:cd:38:
                    22:59:79:26:56:04:1c:b2:1f:70:4f:66:b8:b4:0c:
                    79:97:83:55:db:87:37:31:0c:56:ad:a6:88:c2:df:
                    41:7f:be:30:cb:32:e1:a7:69:63:5f:8d:5d:6f:bb:
                    47:d9:67:1b:48:53:26:7d:2b:ef:c8:ba:59:91:fa:
                    7b:06:c1:66:a2:ee:69:fb:ac:40:27:fc:d8:c4:7c:
                    a9:da:2f:31:eb:2d:49:9c:1a:fc:a9:dd:4d:0b:ac:
                    56:85:c7:ad:e8:f2:e4:51:19:55:8f:29:32:4c:d9:
                    1d:14:ed:9f:cd:6c:c2:d5:a3:c7:60:c6:39:f8:64:
                    2f:09:45:64:f2:2f:98:2c:33:0b:4d:75:df:3d:f7:
                    51:33:48:a8:04:cd:4c:fc:1f:53:37:79:10:7f:a2:
                    d5:19:9a:ce:1c:93:ff:28:56:ec:ba:b4:a4:28:be:
                    ca:07:5b:9b:e8:63:82:af:f7:8f:75:14:75:41:d0:
                    85:04:c4:35:d8:7f:e4:97:a2:23:6a:d4:61:e2:c4:
                    05:f2:43:53:fa:da:79:da:b0:03:41:f9:2f:0d:90:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:36:AE:8A:E5:E5:91:62:50:C6:9E:F7:02:BA:FB:49:AF:A2:8F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34281c75-3031-312c-9837-d7581bf41152.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:56:83:de:02:b1:c8:06:3f:be:70:0e:fa:5d:dd:2d:bb:40:
         0b:ad:8c:75:c5:77:68:dc:6c:5f:91:46:23:9f:bf:6f:0a:6d:
         05:7d:b4:d3:66:68:34:ee:eb:9e:1f:d4:7d:de:91:b1:b1:0f:
         ed:52:67:3d:8e:8d:b1:c6:08:c8:a9:bb:3e:77:db:bd:93:64:
         6c:48:72:66:08:1e:c6:a0:8e:bb:1b:82:14:0c:2d:be:5f:77:
         ac:d3:7e:6c:ec:72:9b:52:19:29:27:35:c3:df:6b:45:98:89:
         e5:39:ca:53:c8:1f:f1:e1:d9:3e:0f:5c:e2:9c:68:21:c3:cd:
         42:3b:5f:7f:f2:bc:53:e7:55:c1:e3:7a:f6:3d:b1:25:d6:37:
         f0:3c:34:2e:8d:53:d2:f9:f1:18:55:08:ea:08:af:98:37:37:
         08:75:15:17:48:34:43:4f:b9:19:8d:98:c7:ad:f5:82:c8:2a:
         45:45:00:c2:63:bf:d1:49:45:dd:61:79:fc:00:73:9c:02:78:
         29:b4:1b:9e:93:35:ce:24:00:5e:cc:46:fb:b8:27:53:b9:fa:
         41:c6:af:20:ac:2c:45:52:da:d7:60:8a:0c:7b:14:8e:a8:05:
         ed:99:05:f0:96:10:61:c2:93:c6:25:8a:d4:d8:67:bc:ff:a2:
         7a:78:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:02:49 2026 by rpki-client