Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ce54f9b-1694-37da-b17f-a6737c752488.roa
File:                     6ce54f9b-1694-37da-b17f-a6737c752488.roa (raw, json)
Hash identifier:          Oxfc+TzEzSB5mBzU9urIlbuLXcfaUrmakuSGK3nqsEY=
Subject key identifier:   4D:93:51:F9:5D:CF:66:28:07:27:72:99:5C:FB:17:91:47:EE:C0:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D5E35D2E01C60C338E340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ce54f9b-1694-37da-b17f-a6737c752488.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33491
IP address blocks:        69.243.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:5e:35:d2:e0:1c:60:c3:38:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=3a483904-c5b7-4a66-bc4d-cc8444a02ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:39:4a:ea:8b:3f:0e:50:7b:cb:81:64:d9:
                    3b:d5:12:63:16:79:31:fc:5f:e2:37:ae:39:63:b4:
                    5c:27:96:e1:39:d3:29:fb:18:b2:81:ab:49:44:65:
                    0a:71:91:36:d6:e9:ac:f0:4d:b7:6b:aa:aa:fb:a7:
                    94:28:e1:38:6f:42:ac:45:e6:fd:79:a1:c8:e1:ab:
                    af:3b:cd:9e:73:29:7b:6b:0f:70:61:5c:36:10:b6:
                    48:5e:62:94:a8:9f:03:d4:5c:a0:31:fa:68:0a:70:
                    de:2a:a7:93:53:d8:e1:b5:ac:35:c1:2d:44:ac:38:
                    4e:79:13:95:5f:e7:b3:88:7d:0f:42:05:91:ab:84:
                    08:78:ba:a1:2d:83:7b:8b:ae:c2:29:27:f3:b6:13:
                    36:61:fd:e6:1e:fd:b7:0c:8f:83:32:31:cf:09:03:
                    75:b6:28:00:69:d8:d2:2e:82:57:da:e8:0a:4c:0d:
                    67:31:ab:96:a8:ea:b6:89:3c:de:ab:50:65:0d:48:
                    b8:74:0d:b5:57:6b:eb:37:f1:53:7a:0c:7b:38:76:
                    a7:f7:b6:36:1c:bd:b7:7c:06:80:47:f9:a6:4e:61:
                    ed:c2:59:36:fb:0d:d9:27:1e:a7:98:0b:c5:ee:b9:
                    55:d4:50:10:21:dc:9b:45:e1:42:d7:46:0c:f0:6a:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:93:51:F9:5D:CF:66:28:07:27:72:99:5C:FB:17:91:47:EE:C0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ce54f9b-1694-37da-b17f-a6737c752488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.243.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1b:9f:56:d8:50:cc:d2:a0:c9:f7:c8:e7:71:b2:70:1b:10:
         e4:4c:3f:fc:d8:89:b8:03:08:02:65:eb:c1:3c:64:61:65:ff:
         d9:a3:3c:13:30:d3:91:38:50:bc:6e:3a:0c:06:f4:26:a9:10:
         f7:72:28:f2:66:6b:b5:0f:df:6a:4c:52:07:91:0f:f7:73:92:
         18:46:1b:e4:68:49:1a:92:be:66:c9:ae:27:cf:8a:93:fe:1e:
         99:ce:96:01:4a:15:78:71:b8:5b:fa:91:8e:7e:bc:f0:9e:32:
         b6:66:23:89:3b:cf:a5:8b:6d:09:00:c2:5e:3f:b4:f7:16:62:
         e9:7c:f2:88:2a:0f:32:d7:47:81:29:75:00:d4:a6:a7:4d:7d:
         92:51:1b:9f:d8:98:0b:bc:42:fe:f2:6e:d9:29:ce:e7:17:39:
         e7:cf:d7:26:48:40:b8:fa:52:05:e9:93:df:2e:d7:5f:99:d7:
         12:49:82:e6:5a:f6:b5:a9:6a:6a:92:d5:d0:f8:70:32:07:a5:
         3c:5e:2a:07:29:76:c1:ee:72:89:4c:eb:f9:7a:ea:8c:10:42:
         82:21:c2:9f:74:71:b1:9a:80:c6:27:e0:fc:9b:f0:5c:15:6c:
         52:f5:9c:bc:ef:cd:1f:92:30:5d:0f:8d:d6:fb:d5:5a:4d:a0:
         30:09:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:10:53 2026 by rpki-client