Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5186cc12-b7f7-3dc1-8893-a68c803cbf37.roa
File:                     5186cc12-b7f7-3dc1-8893-a68c803cbf37.roa (raw, json)
Hash identifier:          lbq+x9hn6Glo16MzaKSOE6mUMhaWYJ7gAHJ2EGTZCo8=
Subject key identifier:   EB:81:95:FC:38:8F:12:8E:DD:9D:07:A9:56:50:3A:C5:45:FC:A1:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F17BBA576E51FA4F9C8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5186cc12-b7f7-3dc1-8893-a68c803cbf37.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        68.51.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:17:bb:a5:76:e5:1f:a4:f9:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=e7b5792b-2850-44bd-a238-dba2e752ea59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:b3:84:59:32:26:34:9b:46:c5:5b:23:a8:
                    5f:30:42:4f:22:f0:a6:a5:e5:c2:d1:16:59:00:96:
                    e2:ba:5b:91:21:4a:69:51:39:5a:20:02:e4:84:dd:
                    86:3c:9e:6c:bf:72:86:5e:a5:45:c0:c9:d6:3e:05:
                    47:67:8e:e3:d5:ea:dc:bc:02:5d:bd:58:87:5e:25:
                    37:a6:03:d0:e2:32:73:b4:81:e1:a1:28:a4:f9:54:
                    92:64:9b:54:74:f8:78:9b:6b:25:16:a0:f6:88:f9:
                    3e:99:7e:8b:2f:f8:51:58:14:d2:20:be:61:09:d9:
                    fa:9f:0c:49:c9:57:2a:3e:00:b9:8c:88:57:ce:f3:
                    11:df:6c:99:f1:a7:45:f5:ea:cd:15:25:18:a9:31:
                    b5:92:0c:0a:4e:d0:10:ca:0b:9f:25:a6:c5:67:c9:
                    91:86:6e:a3:7a:e8:31:39:ad:47:ae:98:f4:14:4f:
                    b3:20:c0:2f:8f:99:07:f8:59:7e:f7:f7:65:57:af:
                    df:ca:87:f1:eb:9c:45:aa:f4:37:55:67:61:60:97:
                    cf:5e:f3:c8:f1:8c:60:74:91:00:10:ee:27:c2:7d:
                    cf:5e:8f:b9:0d:b7:8c:3a:af:6d:92:62:47:dc:f6:
                    18:0a:fa:6b:27:ad:ab:79:fa:4d:fd:0a:4e:db:d0:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:95:FC:38:8F:12:8E:DD:9D:07:A9:56:50:3A:C5:45:FC:A1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5186cc12-b7f7-3dc1-8893-a68c803cbf37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.51.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:bd:99:9f:6e:69:46:c5:77:be:10:ad:6a:af:4f:da:39:
         cb:bd:d2:32:19:a3:3c:e2:90:11:4e:8d:48:3f:00:b2:02:2e:
         bf:e6:5a:21:42:a8:97:1a:7d:ee:f9:7b:c9:71:f4:63:7e:8b:
         53:11:13:b3:ab:95:c7:ac:05:db:aa:57:d3:1a:22:60:0c:10:
         d7:d7:d3:5a:ec:db:9f:bd:24:91:06:9f:d0:f9:e4:42:41:af:
         8a:37:b1:5f:59:a7:b8:e9:6e:40:f4:32:6c:85:e1:61:29:50:
         22:0c:78:1d:b1:df:5b:e5:10:2f:8d:b8:cd:eb:82:ca:6d:49:
         dd:60:f9:63:00:f2:d8:e8:5e:09:72:a9:b1:be:8f:36:ce:02:
         9a:4e:6a:74:52:90:92:5d:be:0c:4a:7b:f8:cf:a6:78:34:8b:
         23:b3:32:09:5c:16:cb:90:ba:ee:4d:0d:ad:0c:77:57:e2:5f:
         cb:81:89:3a:b9:31:70:d3:b9:ad:ff:bf:ad:6d:f6:4a:1d:af:
         c7:30:85:ac:87:23:bd:fd:fc:d8:87:d0:80:47:94:28:07:9c:
         ca:11:22:34:b5:54:f6:5d:0a:22:b1:91:8f:6e:e2:f9:41:0e:
         35:33:e1:e8:ad:47:0b:35:db:b1:47:56:66:9b:ca:6e:42:15:
         d6:f6:49:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 17:52:37 2026 by rpki-client