Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3985d75b-cf6e-3031-a62a-162ee795ba5d.roa
File:                     3985d75b-cf6e-3031-a62a-162ee795ba5d.roa (raw, json)
Hash identifier:          TdkHFfhyxgjh373iTWhLoVkDfr5dc9uN13Q7WEUHnKs=
Subject key identifier:   A4:EA:15:40:DF:B3:34:0C:F4:89:54:67:45:49:43:39:0E:18:F1:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86323BD4EB935546DE7C100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3985d75b-cf6e-3031-a62a-162ee795ba5d.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        174.174.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:23:bd:4e:b9:35:54:6d:e7:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=9df07aad-6d7c-4dd3-9c8c-0817b7b6c803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c2:23:7e:9e:5e:bb:47:8a:0c:e3:74:15:3f:
                    c6:8f:fc:29:a9:16:d8:a6:bf:70:95:c8:06:6c:b7:
                    64:91:b4:05:d3:1b:3d:2e:b7:aa:6c:9d:fe:d2:45:
                    0f:a2:7d:f5:66:1d:a9:ea:82:92:8f:ba:7b:48:53:
                    26:0c:dd:4b:e4:18:f1:82:ae:fc:b5:4a:e7:8e:58:
                    19:42:8d:a0:d8:96:60:62:48:ec:f3:c5:60:02:d2:
                    a8:09:05:c0:47:f6:c4:ce:b7:8d:c6:d8:c7:a8:86:
                    6e:d2:51:02:82:90:05:e2:39:85:37:65:19:77:03:
                    39:b5:d1:89:eb:06:fd:32:24:95:b8:98:55:83:56:
                    8f:10:c1:fe:6b:44:b1:5f:46:d7:ae:55:50:f4:1b:
                    dc:ab:cf:be:66:21:01:c1:5c:5f:1d:4d:29:37:20:
                    5e:a2:99:74:26:c1:d1:1d:ab:f7:6e:f6:d7:7a:da:
                    d7:4f:92:9e:b8:c3:1d:cc:24:75:b3:4c:12:b1:85:
                    46:d5:e7:94:78:46:50:dd:73:4c:56:80:16:7a:d7:
                    17:98:b5:70:2b:5f:4a:b6:52:35:60:29:60:16:a2:
                    bc:5c:59:66:7b:de:3c:1a:7b:32:41:1c:ff:6d:83:
                    9b:1a:7f:49:8b:a5:a2:95:66:29:b5:a0:c2:b7:22:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:15:40:DF:B3:34:0C:F4:89:54:67:45:49:43:39:0E:18:F1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3985d75b-cf6e-3031-a62a-162ee795ba5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:a7:ab:1b:16:eb:e4:92:85:bb:67:45:ba:45:fe:18:21:
         73:5b:13:d5:b7:c5:ef:4f:38:58:74:af:78:aa:a5:2b:63:89:
         2a:4a:40:de:32:48:ad:2a:81:9f:2a:63:3f:fd:d4:02:62:d3:
         78:5a:a7:bd:19:19:d1:dc:8a:4b:82:85:67:5e:5f:4d:1f:2d:
         e8:5f:9c:de:dd:7e:9f:59:ba:df:0c:a5:fe:61:97:ba:5c:f2:
         fe:bd:da:d7:23:75:88:67:03:89:57:62:ed:77:7e:c3:dc:49:
         3a:de:9c:e7:03:f1:4c:80:55:74:1d:e3:bf:af:4d:f3:ce:8f:
         65:57:56:1f:f5:63:55:39:44:0a:82:3c:0c:6d:f1:e0:95:dc:
         c5:5a:19:16:08:ec:e2:d9:59:bb:67:68:5c:be:8c:a8:95:c7:
         6f:b1:dd:1e:ea:67:81:89:57:d9:de:1b:e1:c3:18:89:ee:74:
         b5:59:ed:99:d0:4c:55:eb:1b:04:ed:da:ee:2e:1f:d3:41:e5:
         51:14:33:f7:4a:3d:f8:cb:02:b0:67:9b:a0:83:61:34:c8:58:
         5b:de:02:40:8c:2f:f3:73:ea:14:2c:fd:6d:cb:74:86:c0:df:
         f4:d2:ac:5d:4b:dc:37:c4:e8:d8:df:4b:d8:cd:8f:c8:0c:b0:
         a7:ef:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:16:11 2026 by rpki-client