Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40280717-1f3b-3543-add2-b53861120466.roa
File:                     40280717-1f3b-3543-add2-b53861120466.roa (raw, json)
Hash identifier:          bXmp6Qj2XRPKurvRkYaTuHTigdBrtvRHE/rO/7AY6kg=
Subject key identifier:   91:2A:FC:DC:0F:19:4A:CA:52:96:1B:80:02:0A:DE:BA:A1:18:3A:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BED1145557C15BECF8600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40280717-1f3b-3543-add2-b53861120466.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        69.253.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:ed:11:45:55:7c:15:be:cf:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=06b4b243-878f-49e7-8659-d5fc03d7b1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:41:f5:d5:ae:86:e7:f5:b7:d6:35:19:53:
                    72:29:dc:57:1b:a3:23:29:c2:cd:66:4e:52:e7:18:
                    ba:ce:87:36:96:f8:2d:52:61:9d:01:94:15:dc:5c:
                    52:3b:c0:59:45:5d:e6:2f:c4:b3:6a:97:5c:2e:5c:
                    92:13:4b:e8:06:b1:fc:d9:e9:53:6d:c7:1d:5e:66:
                    e0:a4:ca:a4:8d:1c:17:c1:c8:44:1d:a6:85:35:2d:
                    d4:78:c4:7d:e1:cb:50:f8:9e:62:7d:19:83:d6:ac:
                    c3:d8:e5:23:d3:81:a4:05:93:6a:fe:7a:f4:7b:a7:
                    f2:b6:5c:ea:20:95:b2:b0:5b:1f:ef:67:76:b5:c2:
                    43:85:89:5d:04:f7:4b:f0:42:9a:81:ec:94:5a:6a:
                    67:e4:d4:74:52:d7:89:7e:a0:d8:a8:b7:40:b1:d5:
                    4b:e2:8e:17:01:a6:12:ff:97:37:0c:02:74:59:f0:
                    d7:93:33:2e:0b:7b:66:ee:cd:9e:0a:ca:34:82:84:
                    49:6a:88:79:27:12:42:bb:c2:d2:44:37:3b:3a:a8:
                    94:7f:66:b3:cf:3f:2e:d9:38:51:d9:06:5e:f5:ee:
                    98:43:c9:1f:2a:8e:a2:67:eb:da:fa:9f:33:f1:f1:
                    7e:5e:7b:12:07:f7:9e:7c:ba:d8:65:70:7e:a7:04:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2A:FC:DC:0F:19:4A:CA:52:96:1B:80:02:0A:DE:BA:A1:18:3A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40280717-1f3b-3543-add2-b53861120466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:f2:16:ab:e7:87:70:43:72:3e:56:09:f5:c6:cc:dd:f3:99:
         ea:ee:4d:a9:b4:1a:76:82:8f:fc:21:9f:5a:42:e3:a0:d6:cd:
         ee:ad:c3:43:2e:9d:7d:94:50:db:b0:b0:0a:5e:bd:51:32:95:
         7b:df:e6:6e:ba:d6:e7:19:3d:be:44:19:c0:06:6b:59:37:ab:
         ed:ce:15:12:bf:78:f9:a6:3e:3b:86:23:1e:7b:9c:7c:c6:55:
         32:a9:eb:44:9f:18:47:e2:ec:eb:e5:b5:26:ec:97:d6:b2:13:
         4f:df:32:b2:85:3f:55:29:38:06:da:64:b8:12:9e:cd:82:54:
         29:56:d8:f9:c6:51:ed:e7:18:41:ab:84:dd:4c:da:a5:86:b9:
         e6:e0:31:9c:51:d3:f2:04:2a:3a:cb:ef:a4:4d:9c:55:68:16:
         09:bf:7a:8b:25:22:db:ff:04:99:bd:19:1a:c8:73:2d:0f:01:
         03:3c:eb:4a:60:11:ee:a0:14:3f:ca:34:5e:07:95:b8:66:17:
         8e:e5:a8:e6:29:4e:d6:32:d7:46:89:52:5b:67:90:66:71:69:
         30:cc:90:0c:6d:4e:c1:20:bd:e6:a8:7d:04:cb:cc:f2:d7:48:
         e6:b6:f2:c2:36:3e:78:47:1a:32:87:a9:1e:64:a9:a6:b2:fc:
         91:31:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:55:12 2026 by rpki-client