Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6be5165e-e4e5-33df-a7b8-7e1cb6892e0d.roa
File:                     6be5165e-e4e5-33df-a7b8-7e1cb6892e0d.roa (raw, json)
Hash identifier:          t05yBEpz7xc2gFWGAdnHBhQ8gSVNPX1rqoa2vPPupx4=
Subject key identifier:   DA:41:7F:C3:63:C6:AC:82:6D:30:88:72:C2:4A:2F:19:CF:23:9F:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4DD0DC1575B1557168D080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6be5165e-e4e5-33df-a7b8-7e1cb6892e0d.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        174.168.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:d0:dc:15:75:b1:55:71:68:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=9239c617-1637-471b-a8c4-842b07e07be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:bc:ed:4a:34:db:c1:59:68:82:fd:0f:e8:
                    72:40:8e:ee:ad:dc:ce:be:45:5d:c3:02:bc:7b:20:
                    8a:d4:ee:d7:f1:5f:2e:c9:3d:fe:fa:29:38:75:df:
                    03:75:8f:f4:c1:cb:52:2f:65:b8:04:61:6e:8a:78:
                    50:42:96:03:c7:a3:b6:a6:e0:5e:36:29:b0:17:bb:
                    46:85:57:5e:8a:f0:c8:eb:ff:29:b5:a6:dc:dd:f6:
                    b6:8b:34:af:72:1c:42:f9:e7:cc:2d:60:f6:b3:f1:
                    fb:cf:66:28:56:6d:db:68:c7:43:e4:11:2a:27:12:
                    50:55:81:5f:f7:61:d6:cd:94:9e:5f:ba:f0:b5:f9:
                    cd:74:47:64:ba:0c:81:7d:87:8b:2b:7b:0e:72:86:
                    73:ca:4e:64:2a:9c:01:dc:e9:25:ae:ee:42:51:88:
                    85:8c:17:a4:0a:f7:f5:0f:b7:c3:7b:55:42:12:78:
                    b2:5d:76:7e:39:38:79:c3:49:d7:93:65:b3:40:18:
                    ae:a5:b9:20:e9:d7:c3:b5:d0:cf:3d:25:c2:62:f4:
                    90:2d:d7:b3:3a:08:bb:f6:64:7d:06:17:71:c8:55:
                    6e:49:0a:36:e7:7e:6f:87:47:36:b6:97:74:82:12:
                    12:03:ac:19:a8:ba:3d:df:d7:6f:7d:a8:33:17:a3:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:7F:C3:63:C6:AC:82:6D:30:88:72:C2:4A:2F:19:CF:23:9F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6be5165e-e4e5-33df-a7b8-7e1cb6892e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:67:26:cf:cb:49:80:bd:97:8b:a1:31:45:a5:da:3b:cf:
         11:55:ca:ad:d9:b6:1d:b3:bd:a9:68:be:56:38:97:8d:95:ea:
         25:b6:e7:f2:0e:47:42:76:79:b1:77:6d:3b:9b:24:19:52:01:
         f2:f2:02:ab:46:21:0c:60:f9:9b:ed:23:c2:b0:f0:81:9c:77:
         c1:3e:10:2d:bd:40:63:93:9d:26:aa:f5:01:b1:b3:3c:3a:bd:
         7e:f5:98:dd:fe:54:23:74:a3:d5:da:30:f2:46:82:e8:f2:c2:
         9e:97:4c:b9:04:08:ff:a6:e6:0c:b2:15:29:71:71:50:64:fe:
         8d:f0:3a:65:45:36:fb:c1:f9:d4:62:ed:1b:00:23:76:c0:59:
         2c:10:8b:63:1e:6a:c0:69:97:90:2d:2b:53:01:82:ae:9a:53:
         39:dd:1c:c1:2b:37:66:57:1a:b6:83:5d:7b:a3:76:c1:c3:b2:
         45:8c:12:88:8d:a4:ea:6a:81:98:95:69:21:6c:65:be:f1:e8:
         2e:78:ea:a2:03:28:04:f6:6c:b6:ba:dd:d6:e9:aa:b1:94:15:
         a5:3f:3d:28:ab:78:65:55:5d:fa:b0:77:1d:71:15:81:fe:92:
         6d:a8:c6:84:e5:bf:85:93:7c:b0:9d:b9:b5:0f:fc:f1:c7:b3:
         0a:cb:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:14:39 2026 by rpki-client