Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c2c0245-10ef-34dd-a5f9-6e39a0bff1a5.roa
File:                     5c2c0245-10ef-34dd-a5f9-6e39a0bff1a5.roa (raw, json)
Hash identifier:          bLdqYbBHJyw3EjxBVVsF8b3ssLF7jzBR1HdFjFPWc8w=
Subject key identifier:   CE:99:80:D7:74:74:B8:3F:98:AB:4C:E0:C2:B9:46:2B:D2:9B:C3:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E61455500E8F047DDE0080B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c2c0245-10ef-34dd-a5f9-6e39a0bff1a5.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     33659
IP address blocks:        69.141.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:55:00:e8:f0:47:dd:e0:08:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=923335bd-1ac0-4a44-8ffd-acfe59e38d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:9f:c6:d5:fe:03:90:29:8a:75:0e:fa:02:
                    9b:14:9b:5c:d5:ec:89:90:35:b7:e8:5a:a9:18:a6:
                    57:5e:4a:1f:c8:8b:6d:be:e6:b0:e6:e0:d8:0c:8e:
                    8d:43:fd:51:8d:f3:b0:3e:67:1e:54:f4:e6:e5:eb:
                    53:ad:50:05:e8:95:a4:24:14:ff:e8:8f:28:a1:47:
                    7e:87:25:00:fa:7d:54:4b:d5:95:53:35:12:92:ba:
                    08:ab:bf:63:94:48:f3:8a:ad:25:03:ed:cf:35:30:
                    09:c7:cc:3b:a2:b5:5e:a8:d4:dc:98:f2:cb:7b:3c:
                    c9:64:af:4c:96:de:08:bd:fe:f9:76:36:b7:58:4c:
                    ea:b0:3f:ae:a0:5d:db:a9:d3:fe:3a:07:b7:45:65:
                    92:98:10:ac:a9:9d:00:e4:05:5d:6c:9b:96:65:49:
                    72:f6:63:ca:3e:fb:f9:5d:59:43:11:21:d6:be:10:
                    47:33:65:70:7c:b5:4f:43:af:97:5b:1a:f8:75:f0:
                    67:c4:90:ac:2e:50:80:06:3e:39:47:fd:af:17:f6:
                    3b:f5:17:9a:a5:2a:45:61:d4:f6:74:5a:4b:7a:99:
                    df:7e:26:7f:79:62:a1:88:52:17:56:ac:c3:28:13:
                    fb:ee:a4:f9:26:f9:ca:d9:be:fd:40:fb:b8:a6:51:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:80:D7:74:74:B8:3F:98:AB:4C:E0:C2:B9:46:2B:D2:9B:C3:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c2c0245-10ef-34dd-a5f9-6e39a0bff1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.141.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:92:24:6b:53:55:01:b9:f0:1d:78:a1:7e:5c:b2:f6:23:
         98:1f:c3:e3:1e:a1:1f:93:af:b3:44:24:97:44:a6:a1:bc:e5:
         4e:a4:ce:77:c0:85:f8:d1:62:f5:a3:f8:01:d0:b6:1e:a8:16:
         7f:bd:eb:81:e9:74:e7:a8:ba:8f:61:a5:d7:18:17:0b:c7:15:
         a1:b5:79:36:f6:8a:4f:49:9b:1d:d8:d3:e2:63:8c:6a:f0:bc:
         84:93:07:02:1e:e1:28:39:95:08:3f:63:0b:5a:dd:bf:5d:ca:
         60:3f:64:43:de:a3:0b:55:08:9d:2f:47:77:2b:a7:51:1f:83:
         a6:81:0f:4b:da:7b:98:60:68:74:10:69:8e:eb:69:3f:11:47:
         aa:e2:90:99:39:e1:8e:69:6d:71:19:d3:60:1e:d0:48:65:86:
         e4:0d:94:db:fc:86:c0:de:0d:1c:8a:af:48:08:26:75:4a:84:
         c2:9e:6d:1f:88:0b:26:f3:5e:d9:b6:35:49:55:8e:42:0a:3b:
         b6:43:ff:02:5a:e4:ba:8e:be:6f:24:b6:d9:0f:37:35:93:57:
         64:7e:32:3b:43:2a:e6:7e:68:9b:d4:8d:e7:43:82:65:b1:d5:
         cb:60:b0:ef:6b:34:d3:63:3f:bf:01:38:5d:c2:07:34:40:d2:
         11:66:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:13:53 2026 by rpki-client