Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a345cc5-98d3-327a-b2d9-461d959126d6.roa
File:                     5a345cc5-98d3-327a-b2d9-461d959126d6.roa (raw, json)
Hash identifier:          gBdrD8zXXIEhEiSP4U7B7dbkrFvbr/0kpmx3tFv0/iQ=
Subject key identifier:   DB:44:A3:39:90:58:A6:E8:56:9E:F8:B3:7C:83:D0:C7:38:DF:7A:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862AFFAD432E328B9165A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a345cc5-98d3-327a-b2d9-461d959126d6.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.41.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:af:fa:d4:32:e3:28:b9:16:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=1b9d93c2-5296-41a8-acf4-af1f764e827f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:f4:89:d5:e8:6c:94:0d:6a:77:85:3c:b9:
                    31:ca:5c:5f:e3:fd:2e:13:e6:ae:be:f0:33:61:42:
                    90:6d:f1:66:c0:0d:66:90:31:9c:1c:e6:3d:b5:a1:
                    23:45:dc:96:f2:59:82:25:2d:35:01:5c:b6:c4:54:
                    23:7e:58:a3:af:11:0d:ab:7a:c0:3c:6e:01:ea:83:
                    e4:7b:f2:f4:75:0c:9a:e8:30:35:f3:85:f7:5e:94:
                    9b:38:7b:a4:53:0f:83:6f:f2:2c:69:2d:59:f6:89:
                    9d:70:1a:9f:fa:b7:a8:0a:31:b5:1c:ad:3e:af:81:
                    30:19:8d:a5:c4:de:38:77:4e:ef:4c:c3:a0:2c:0c:
                    7a:bf:a4:b6:24:22:34:bf:e8:61:cb:bc:94:06:08:
                    62:81:19:3c:22:f4:86:42:80:42:a5:18:69:13:2b:
                    d3:06:ea:23:17:17:47:b3:f0:15:f2:8e:e2:79:09:
                    ff:a9:08:34:4c:57:72:dc:90:f4:ab:b1:90:7d:0f:
                    c6:91:20:d7:67:c7:4a:69:2b:9b:3f:9b:2f:65:d2:
                    cd:bd:1f:18:ff:6f:e1:03:33:de:16:4b:61:51:18:
                    8a:5a:37:a9:9a:78:86:2f:54:b9:20:41:8e:e0:d9:
                    ba:5c:52:bd:01:57:b7:6f:d1:a1:1a:11:12:c4:36:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:A3:39:90:58:A6:E8:56:9E:F8:B3:7C:83:D0:C7:38:DF:7A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a345cc5-98d3-327a-b2d9-461d959126d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.41.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:de:e9:78:9e:35:3e:ee:d3:7b:b8:0c:3a:96:1f:2d:6d:68:
         ac:e5:1a:13:b1:69:c3:1d:ef:74:4e:ea:20:c9:19:e7:26:c4:
         37:d6:22:14:18:de:29:ba:52:18:d2:8e:5e:7e:99:ad:18:07:
         f6:48:03:27:af:ba:18:f7:05:64:b4:e7:88:a2:92:e7:e2:e8:
         fd:9a:79:04:f0:fc:9a:ee:bd:42:52:71:5b:f2:b8:23:ed:6d:
         67:ca:f7:92:02:95:64:12:ec:36:5c:ac:be:46:34:a5:cc:05:
         bd:fe:35:7f:39:a0:dd:ce:c5:de:ae:bb:2e:d6:8d:df:68:bb:
         3d:21:a9:ff:52:19:e9:da:2d:45:ee:33:f2:b8:d4:78:00:c3:
         c3:01:e8:77:4e:3f:bd:85:d2:6c:66:a9:04:21:f3:b0:59:f8:
         e0:d8:ee:46:19:6b:56:2a:7d:a5:2f:35:83:0c:5b:f0:33:90:
         5c:e9:ed:4a:6d:d3:b9:5b:b2:ca:57:b5:53:7a:e0:1c:0e:af:
         54:a8:18:94:ac:e2:f8:5c:1f:e3:88:92:1d:ee:5e:86:5e:d0:
         02:bc:b3:0a:71:66:72:77:a5:5e:83:46:6a:a8:2e:41:c7:55:
         85:11:96:3b:8c:23:07:51:57:f8:10:0d:08:b6:55:b3:3d:ff:
         39:5b:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:01:57 2026 by rpki-client