Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c17bde1-4f2e-3875-a373-da649ced418e.roa
File:                     4c17bde1-4f2e-3875-a373-da649ced418e.roa (raw, json)
Hash identifier:          YKv4RZIP+gqeJ8sn0pf+sNo5lkb7zF2ou6qICt/bW8Y=
Subject key identifier:   54:95:79:8F:FA:2E:A5:40:FB:88:24:BA:39:76:4B:5E:0B:FC:1F:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFD26E1AD7EC202E0D9680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c17bde1-4f2e-3875-a373-da649ced418e.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.32.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:d2:6e:1a:d7:ec:20:2e:0d:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=dd929158-4f7f-495f-b0ca-9c7c642e8aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:c5:7a:17:31:01:9f:a4:f3:13:97:49:39:
                    bf:72:4f:ef:0b:b3:a5:a5:c7:4e:49:bb:b0:0d:42:
                    20:ca:b2:f6:00:09:60:80:4d:a8:f2:eb:b3:af:45:
                    f9:1d:0e:05:99:a0:48:ab:99:14:27:2e:7f:cf:30:
                    60:dc:05:b0:6a:5c:3c:bc:14:71:42:ef:d6:73:9d:
                    46:51:de:5e:e7:20:13:04:f8:24:41:fb:d1:a1:5a:
                    f8:98:21:13:5a:83:74:17:3f:b7:b7:06:2f:59:e6:
                    33:a7:64:0b:a7:54:cf:7e:d2:23:8d:83:13:b0:2c:
                    5d:d7:a5:b1:a1:47:fb:d1:12:8f:52:af:46:ae:38:
                    2e:57:6b:2a:7e:75:e7:0a:42:82:6e:8d:d9:10:c9:
                    95:1e:43:cf:c3:cd:c4:77:57:67:61:f2:5e:87:d6:
                    bb:a3:d7:01:a8:a0:3f:4b:2e:16:76:ec:e4:24:12:
                    9e:4c:22:bc:06:4b:7e:37:d6:00:65:59:31:44:37:
                    e3:ff:a4:0c:9f:4c:86:ef:fa:ad:4e:5f:82:3c:be:
                    e8:86:34:0d:cc:b2:4e:29:9a:95:9a:20:cb:c9:94:
                    4c:cb:33:b1:f0:4c:28:d0:63:9a:62:4a:84:14:68:
                    d3:8a:7f:98:54:55:10:04:4b:e0:37:6d:2f:2a:0c:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:79:8F:FA:2E:A5:40:FB:88:24:BA:39:76:4B:5E:0B:FC:1F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c17bde1-4f2e-3875-a373-da649ced418e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:26:69:2a:17:7f:8d:62:00:fd:c2:bb:3f:de:7b:76:11:5e:
         99:43:ac:0d:07:34:ee:1c:dd:47:8c:97:03:3c:f4:68:03:3e:
         4a:0d:65:5c:d7:f0:89:6a:a4:1b:c2:58:13:04:94:f1:db:1a:
         81:a2:a4:3c:c2:6e:18:d4:8c:4c:b7:a5:e2:f3:78:5e:b8:81:
         b2:e4:af:71:d3:7a:97:30:50:08:b2:fa:f6:84:ed:bd:75:e2:
         d3:e7:6a:1f:25:fa:2e:95:50:38:b1:0e:05:58:5a:bb:59:2c:
         28:02:02:bb:7e:d3:7b:ea:ac:52:03:f2:79:43:5c:1f:df:ec:
         95:c5:13:3a:df:af:09:d5:0e:b3:7e:4c:94:f2:78:50:91:7f:
         d1:6e:c3:8f:35:35:1b:55:5c:72:83:be:59:08:34:7e:6d:83:
         3c:fe:b5:48:29:e8:44:b8:98:98:96:0f:e4:41:41:34:c1:af:
         e5:45:0b:aa:bd:4d:2d:b5:c3:ec:0c:e1:4b:55:8e:ee:cc:f0:
         dc:4c:60:82:80:a0:e7:e2:ef:e4:42:38:8a:2c:62:ce:f8:5e:
         42:ff:03:08:d1:c2:b9:b3:70:9d:a3:10:ba:0d:58:b6:9f:19:
         9e:8b:67:3f:ec:88:01:d5:3a:07:af:4a:1e:af:8c:48:58:be:
         d4:0e:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:25:10 2026 by rpki-client