Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f9d9f86-9bc8-3406-b260-6114ca0b3301.roa
File:                     6f9d9f86-9bc8-3406-b260-6114ca0b3301.roa (raw, json)
Hash identifier:          zZ5LvRirNbPf73+lELaV9uTI1y6E46cSl3fW3z0HB4E=
Subject key identifier:   3D:DC:FC:E1:39:A7:A8:9E:D1:2E:0D:96:87:7F:B1:9B:17:C8:42:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FA221F75B3063E38AFFA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f9d9f86-9bc8-3406-b260-6114ca0b3301.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        68.56.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:a2:21:f7:5b:30:63:e3:8a:ff:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=bc313290-2c2a-4051-be8a-e04c879ffd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:2f:a8:23:30:0a:5a:f3:33:44:27:87:e5:
                    3e:5a:16:13:37:d7:a7:4a:bf:6c:a0:ec:b6:25:4d:
                    d9:de:93:8e:30:80:ed:8f:c9:8e:b5:ac:49:b1:0c:
                    0c:e4:24:4c:e2:ef:a7:a8:0d:28:26:2a:41:35:f2:
                    24:e1:c3:47:e0:95:93:13:8e:c3:3c:5d:42:af:94:
                    86:5a:36:09:1d:a4:74:3d:52:ea:f3:bf:64:33:51:
                    76:32:6b:e0:41:93:f7:bb:a1:3e:ce:a1:77:2d:e2:
                    7a:8c:44:7e:c4:3c:b7:10:b3:2d:ff:6c:78:b2:10:
                    fc:e6:65:cb:a7:e1:5d:b0:d5:4b:db:ce:9e:c1:af:
                    d1:f9:ea:9d:2d:96:61:c8:56:2c:4d:2a:26:22:e4:
                    44:36:80:d6:6b:c6:1b:35:64:be:28:97:1a:ae:97:
                    61:8e:5a:6f:61:96:64:4d:ad:fb:83:04:4f:77:1b:
                    3d:1a:7c:0e:f8:eb:cc:3b:b2:f3:d6:1c:f4:4f:27:
                    cd:7d:52:b5:54:8b:c5:44:74:97:48:7c:96:08:50:
                    fe:58:09:57:c2:82:a3:11:2a:19:21:00:ca:5b:31:
                    a7:66:fa:d3:09:94:7e:ee:21:95:ba:58:dc:a1:6b:
                    35:b0:e4:24:6e:2f:a8:9f:b9:61:92:22:30:c9:a8:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DC:FC:E1:39:A7:A8:9E:D1:2E:0D:96:87:7F:B1:9B:17:C8:42:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f9d9f86-9bc8-3406-b260-6114ca0b3301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.56.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:36:34:20:4c:48:d2:72:53:b5:9a:04:9e:c0:37:c7:7f:e4:
         df:59:23:2b:ae:0c:f0:89:c9:f3:e4:b5:bd:8d:80:cd:fe:5a:
         7d:d8:6d:b2:4e:9c:e8:87:b9:9c:ec:6f:39:23:5f:78:1f:48:
         c6:b6:01:cd:8e:6b:f3:b9:1c:10:1d:04:3a:fb:a3:71:93:ce:
         03:fe:31:e8:7f:2f:09:ed:9d:cd:4a:26:32:eb:76:e8:d2:63:
         b0:fb:cb:bd:6f:64:92:c8:13:20:14:c5:a5:77:82:a7:84:98:
         31:59:55:27:79:38:dc:d5:8d:64:1f:88:12:44:e7:1e:5c:94:
         60:c8:f8:ae:ef:19:60:7d:11:ed:9c:5a:55:95:ad:2b:de:e0:
         87:9c:ef:55:aa:3f:9d:0b:36:80:39:0a:03:e2:60:fa:57:30:
         f0:34:6f:fc:a0:ac:76:0e:e1:99:2b:13:af:a9:20:cf:75:cc:
         bb:1c:e5:13:ba:c6:77:3d:c0:57:81:13:1d:bd:89:13:47:95:
         39:42:fd:44:b0:3b:34:88:55:14:da:68:f7:85:80:7f:29:02:
         9e:70:1f:bc:9a:99:0f:65:35:a7:34:f4:58:f9:76:6d:0b:dc:
         c5:d5:ee:d0:99:47:88:8c:28:6a:bd:c1:56:fa:4b:de:bf:b2:
         f1:df:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 02:42:50 2026 by rpki-client