Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa
File:                     3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa (raw, json)
Hash identifier:          aTX90k1z932skb7avDiWX14VRepmrqUq3AZ+YRNT4+M=
Subject key identifier:   34:81:AB:2A:97:83:DF:64:BF:46:43:6B:92:6E:07:F6:62:82:1D:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600FA2349BC5A6291B04680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.41.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:fa:23:49:bc:5a:62:91:b0:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=81a923c3-d0bf-4d6b-a4c6-5d791edba8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:7c:27:3e:f6:64:a6:23:02:5f:95:11:cf:
                    6e:f2:4e:1a:b7:6f:44:74:77:51:42:97:93:71:d5:
                    ff:57:98:68:6e:57:49:ea:f4:ce:d5:51:ec:96:2a:
                    92:d6:57:23:3c:f5:9d:9c:ac:9b:23:38:a4:24:47:
                    d1:9c:71:2b:36:dc:01:c3:63:a7:c3:1a:e4:e6:2f:
                    9b:86:a3:6e:04:5e:83:1a:d3:e3:f8:03:27:be:8b:
                    d6:00:a3:0b:54:08:0d:54:73:9a:61:ef:cc:78:2b:
                    1e:1a:e4:01:cb:be:f6:f2:08:5f:f1:27:51:88:e7:
                    2d:20:27:a2:46:cf:5e:20:3f:2b:12:d3:c1:f2:6d:
                    3b:ad:64:23:eb:51:0d:d0:7f:63:4f:b2:a6:ba:68:
                    bb:f3:f5:1c:74:79:0a:5c:90:1b:59:3d:17:38:00:
                    b2:18:f9:c5:19:94:57:9c:3d:5f:ba:eb:50:10:1d:
                    b8:f6:90:5d:87:8c:0e:ed:03:33:0c:d3:d0:a2:30:
                    7d:a8:58:7a:41:19:f6:f3:32:f7:6d:e4:29:32:f1:
                    bb:67:50:9b:e4:d1:47:b7:41:5f:1a:e2:20:7d:f8:
                    7c:8a:20:dd:de:b7:70:eb:2d:4e:57:03:12:48:2f:
                    49:e4:75:83:3e:48:80:2f:34:6b:b9:44:37:15:9c:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:AB:2A:97:83:DF:64:BF:46:43:6B:92:6E:07:F6:62:82:1D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.41.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:33:a1:b1:64:62:8a:7f:41:ae:8d:8b:77:98:58:18:16:00:
         3a:72:e5:97:e1:f1:44:6e:34:fa:9f:8b:b8:5c:f5:ae:6c:09:
         f9:66:36:c3:06:7f:b6:ee:f6:c6:34:7c:e2:16:0f:dc:5b:f5:
         41:1e:26:03:94:3e:11:c9:ee:66:5e:fe:97:fb:f6:02:4e:c2:
         88:aa:81:76:cb:05:55:f3:d4:8e:2d:88:f0:6c:74:83:85:df:
         6d:d5:a3:5b:04:05:f6:c6:35:39:62:a2:64:a8:85:7c:f7:ed:
         b7:05:ed:8f:25:88:bd:d5:c4:69:c9:43:19:25:65:0a:78:f6:
         0b:86:58:0f:b4:32:c9:6f:96:dc:38:dd:2a:b9:47:1a:74:c8:
         df:00:e6:42:3e:58:8c:51:61:a7:78:36:df:eb:16:32:c9:9e:
         ae:e1:d0:44:49:ce:60:c3:d8:e2:16:e8:87:ae:2b:54:4f:d3:
         c3:39:98:2c:3e:bd:75:0d:19:f8:12:56:87:92:06:f8:fd:b6:
         95:6b:5f:3d:c3:fc:8f:fb:0c:0a:3b:e6:49:71:fa:fd:af:96:
         5f:e0:28:ad:2d:86:ab:a2:be:65:bb:ef:61:3f:ee:71:8d:7e:
         75:23:2a:e3:36:40:7d:f4:80:26:9f:08:16:36:63:08:e5:d1:
         84:92:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:32:19 2026 by rpki-client