Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ade8317-5725-30fa-8ff4-ae58f013988e.roa
File:                     6ade8317-5725-30fa-8ff4-ae58f013988e.roa (raw, json)
Hash identifier:          vSaV5Zg/c48C7xmnPxudWb6HOQIp8Fg4WmbGYn0LbRw=
Subject key identifier:   AE:33:A4:1E:68:64:A5:FD:CB:BC:F6:7F:B2:16:A4:2C:76:16:90:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862A6DBF88A4FC191C5AD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ade8317-5725-30fa-8ff4-ae58f013988e.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.32.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:a6:db:f8:8a:4f:c1:91:c5:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=c2b73c15-3c18-4873-8285-9bef0b3bdefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:9e:7c:49:4d:d0:62:74:97:a8:03:a8:b1:
                    d5:fc:b9:18:ee:4a:8d:dc:55:aa:e3:2c:f2:8d:af:
                    3b:40:c2:8d:e5:29:64:b1:35:40:b1:73:5d:28:84:
                    8b:85:13:75:cb:10:e3:e1:fb:0d:0c:a0:4a:57:81:
                    4b:e6:b5:26:98:c4:a0:4c:ee:63:69:1b:53:5a:45:
                    cb:1f:d9:4f:24:d3:53:2e:2d:7c:b2:53:a7:83:86:
                    d4:1d:9f:a1:6b:16:f7:83:4c:02:de:c8:67:02:d3:
                    0e:4e:4c:08:a3:cd:a1:a8:aa:7e:73:66:d4:df:87:
                    22:0f:bd:2a:88:50:f6:1b:61:7b:dd:b8:e0:02:17:
                    d4:90:93:a3:96:e4:35:88:8e:4b:90:c3:53:3f:38:
                    53:a0:ac:71:5b:36:04:65:39:61:c0:a3:cd:a7:3a:
                    29:90:12:2a:a0:28:4b:c8:23:53:68:13:54:4a:49:
                    00:1b:8f:cf:e2:ea:98:2e:89:d9:61:d2:4a:65:e7:
                    1c:53:53:96:ac:56:a3:eb:bf:dd:29:8b:cf:10:f2:
                    1f:21:14:07:71:d8:d2:b6:42:98:2a:03:e3:a6:70:
                    c9:32:42:02:b9:9f:31:66:70:43:28:8e:d3:10:e8:
                    46:ca:a4:ae:eb:4b:5c:24:fa:e9:63:bd:55:df:c7:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:33:A4:1E:68:64:A5:FD:CB:BC:F6:7F:B2:16:A4:2C:76:16:90:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ade8317-5725-30fa-8ff4-ae58f013988e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:3e:26:c8:97:eb:3d:10:96:88:89:a4:29:74:fe:8d:44:
         b5:65:ef:d5:4d:c7:71:45:fd:ba:c0:82:0a:3b:27:b1:e4:b6:
         26:22:cf:70:d5:be:8a:a5:9b:3f:e5:3c:27:33:9f:e2:f1:6f:
         b5:b3:4e:f8:e0:5a:07:d3:4c:ff:66:3b:ed:5d:3c:a5:20:15:
         3e:10:3a:c4:52:17:ed:2a:41:9e:cf:01:36:75:1d:8b:cb:d0:
         0f:a5:e9:01:9e:5c:e8:ea:6a:22:5e:b7:82:9a:88:b9:77:49:
         03:f1:bc:ac:c5:81:7d:bd:68:0c:16:5c:b9:94:03:7a:8d:f1:
         77:03:61:52:b3:71:28:7c:09:99:83:be:61:a1:10:25:3f:b6:
         42:93:2d:a3:ff:e2:f0:a3:58:0d:8f:90:be:b9:d7:a9:cb:7e:
         62:8f:eb:97:b0:5a:80:9c:9d:66:32:b7:2b:85:e9:1d:dd:38:
         74:58:3b:e3:a1:78:77:df:5c:63:22:84:3e:c9:5e:5e:e8:da:
         22:98:5e:7b:00:ec:b8:5b:cc:60:bf:36:d4:a7:78:3c:77:63:
         f4:c1:03:6f:8d:b6:f0:15:0f:61:1a:4a:3f:31:3b:a2:30:44:
         19:57:70:c6:25:a4:85:9b:e4:91:8e:2b:9e:9a:61:ec:75:80:
         e8:2d:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:00:40 2026 by rpki-client