Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418c08e4-1b18-313d-a3fb-5868d8ef6517.roa
File:                     418c08e4-1b18-313d-a3fb-5868d8ef6517.roa (raw, json)
Hash identifier:          JYtWV7PmgQgeNsupr28FKGnGD1A/yVNv0+U1TmPdsEI=
Subject key identifier:   69:C8:3E:82:D0:95:FE:4B:09:6E:93:31:E0:EC:3B:99:7F:EA:99:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863C5ACDAC2AE262C755300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418c08e4-1b18-313d-a3fb-5868d8ef6517.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        107.4.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:c5:ac:da:c2:ae:26:2c:75:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3c165b75-e902-40cf-a4c8-3272472048c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:e7:ef:bb:60:b6:47:4c:d9:ce:5f:57:39:
                    b5:89:ce:be:6c:93:e0:12:73:10:0a:94:fc:15:cd:
                    45:eb:e7:f7:13:8c:22:9e:99:74:c5:bf:fa:0e:17:
                    c0:70:67:4e:e2:da:d2:85:a4:a3:25:e0:66:d3:89:
                    8e:dc:7a:99:3e:ef:03:37:f6:f7:e9:17:c3:27:da:
                    48:dc:dd:3f:ec:ea:65:82:7c:76:7e:d7:ac:27:79:
                    3d:5d:c4:51:ed:82:6f:2c:f9:b4:19:78:96:dc:86:
                    23:25:dd:eb:e5:66:d9:e3:41:dc:22:7c:bb:5e:60:
                    8e:90:00:ac:39:e1:4f:87:4c:bb:5a:d7:7a:12:82:
                    08:ef:db:ce:03:35:83:1e:04:90:c4:92:fb:99:7a:
                    93:2d:6e:82:cd:5b:d7:53:4f:0c:bc:af:8d:8e:65:
                    20:2d:23:f3:fd:eb:fc:ad:e4:21:c0:2c:55:a5:5a:
                    da:25:3b:5d:d5:88:06:d1:3a:72:16:a1:f7:55:83:
                    c8:9c:75:4d:24:7c:b3:2d:be:9e:10:30:1b:57:52:
                    f4:18:4a:ea:64:28:4b:91:a4:1d:bd:3e:80:03:4f:
                    57:fb:81:3c:52:9c:83:4e:40:de:d7:b6:21:f6:b5:
                    b6:ab:cf:24:21:fe:b1:cd:0a:a5:07:b8:52:29:9f:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:3E:82:D0:95:FE:4B:09:6E:93:31:E0:EC:3B:99:7F:EA:99:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418c08e4-1b18-313d-a3fb-5868d8ef6517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:8f:18:21:0a:45:b6:41:30:f3:24:2d:fa:5d:f0:9b:27:9e:
         fe:94:db:39:04:30:b8:f4:11:cd:7f:de:ef:f1:5b:73:a8:69:
         27:0c:09:76:97:19:1c:89:69:8e:ab:73:d7:8b:c7:7f:02:30:
         b7:68:b7:c6:98:70:29:e2:5e:41:fb:e7:28:96:bf:c8:c7:e6:
         de:9b:fb:c4:f4:96:04:9b:da:9a:29:e2:e6:45:ee:b7:99:8e:
         82:5f:89:1e:72:77:07:57:b1:86:85:da:fb:53:e7:bf:8b:21:
         77:85:82:3f:af:1f:09:78:77:ec:80:f8:0a:c8:af:6b:f1:1c:
         f6:9d:c6:f4:1f:48:3c:6c:ed:94:16:52:eb:d3:08:00:45:66:
         d9:cb:c2:f2:81:17:a0:89:63:1c:35:de:93:b9:0e:2b:fc:c1:
         c2:e4:0c:7f:db:a5:ed:a7:f1:a8:d1:4a:4f:e7:90:7f:85:4e:
         d0:90:33:9f:51:3a:c6:ec:2c:cc:74:15:33:3c:10:67:31:30:
         87:89:97:07:8c:62:a7:fc:a2:29:eb:5f:db:e1:d8:6b:29:f9:
         2f:7f:03:00:37:9c:cb:70:80:99:13:31:e7:c8:4b:44:b9:eb:
         df:75:60:d6:0f:a2:96:50:d4:89:77:52:21:63:b8:80:7d:fa:
         e4:a4:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:01:40 2026 by rpki-client