Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b724d06-8255-3d5b-a136-50959a82b844.roa
File:                     3b724d06-8255-3d5b-a136-50959a82b844.roa (raw, json)
Hash identifier:          nn5CCWaMWBlQESJLGqWb5ylAttukEw1Vb5U2H5iMI9c=
Subject key identifier:   E9:95:48:29:B4:1B:7E:FD:E3:29:2A:A8:15:53:AF:66:45:74:DD:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BE940EDC23B580BC61C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b724d06-8255-3d5b-a136-50959a82b844.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        69.139.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:e9:40:ed:c2:3b:58:0b:c6:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c0b1cfc2-8a3f-4d40-b995-88f693b8270b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:ea:19:9a:2e:97:a1:7c:f6:45:b5:b4:6a:
                    3b:24:3f:12:c8:4f:65:a8:7f:a2:f3:ba:96:f9:36:
                    a4:25:cd:21:09:c3:25:2e:54:41:18:90:cf:9b:6f:
                    25:48:8a:b3:06:32:4d:56:2e:12:18:16:0a:0c:4f:
                    9d:f2:4a:5d:39:59:e8:b2:d0:f8:5e:db:fd:80:7b:
                    88:a3:a9:c2:c1:f6:cb:9e:c4:56:01:3f:bc:60:2d:
                    ce:25:ba:9d:3d:75:65:95:6f:7f:b4:90:1c:89:3e:
                    39:35:d2:46:00:f8:89:1a:cb:57:5c:46:36:f5:a1:
                    f3:93:50:eb:39:09:db:8b:09:e3:89:40:58:cf:62:
                    dc:d1:62:5b:81:a0:a2:1f:db:89:00:d1:ea:b3:9f:
                    84:fb:3e:ef:3b:2a:bf:3b:18:22:ac:7b:3a:54:5f:
                    ce:76:23:4f:11:93:24:9a:57:7a:2d:15:1f:ce:29:
                    a7:bc:e4:35:a5:81:65:6a:91:a3:85:6b:6f:5d:b6:
                    d0:41:d3:f9:99:5d:ec:a7:67:82:84:54:7e:3d:e1:
                    11:94:f6:6d:06:43:b1:ad:88:94:94:cc:e1:da:ed:
                    d3:59:ae:cb:bd:32:c8:9f:e4:4f:45:5c:0e:e0:de:
                    76:75:74:84:6b:da:17:73:0c:60:50:46:90:24:36:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:95:48:29:B4:1B:7E:FD:E3:29:2A:A8:15:53:AF:66:45:74:DD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b724d06-8255-3d5b-a136-50959a82b844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:21:4d:da:fc:db:9b:61:c5:4b:3b:65:c2:56:dd:ab:83:3b:
         ae:0d:3d:7d:04:1f:81:3f:e3:1e:60:e0:65:aa:6d:73:a3:99:
         0b:43:3b:b7:5f:78:51:63:26:62:6d:c4:13:ad:18:79:bb:b6:
         a9:53:08:f3:53:d3:15:5d:22:ac:07:3a:1c:ab:27:b1:6a:ca:
         13:0c:d7:95:5c:e5:9f:f0:77:f0:8f:5c:78:06:d9:39:1f:9d:
         4e:50:86:2e:f6:ec:f8:f3:71:81:0d:ff:5e:34:3f:3d:d4:d8:
         fb:1d:52:c4:b6:e1:af:07:62:4c:9c:2d:be:c3:f8:64:91:3a:
         64:28:67:2d:98:c8:d8:8e:e2:30:94:c5:ee:c1:73:c6:4c:59:
         ea:f1:b9:88:fc:a6:9a:6a:b8:f2:81:e3:fe:cd:16:41:93:f9:
         2d:5b:54:57:5d:66:06:32:f7:d0:88:1b:f5:bb:e3:e1:e6:92:
         15:f7:08:fe:02:3b:d7:9d:3f:72:c2:d0:a6:3d:60:51:4b:e1:
         8f:ba:e5:be:e2:ec:e9:e5:60:30:a7:f0:1b:dc:1a:f1:b3:c6:
         aa:bd:51:62:44:d6:79:4a:6f:a5:47:03:3d:19:08:4e:83:ac:
         f1:08:ed:a1:d5:d8:7f:60:49:13:12:51:1b:bf:b2:ea:b1:fa:
         db:e6:63:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:51:29 2026 by rpki-client