Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6faddcd7-c3d1-3837-bd8b-99bf96820403.roa
File:                     6faddcd7-c3d1-3837-bd8b-99bf96820403.roa (raw, json)
Hash identifier:          lAsaHmDF3/t/Ek2fFi49UywJ6Q/CTdzTqx6CgwIOO0E=
Subject key identifier:   96:A2:91:E0:10:5C:81:42:75:22:4E:56:88:EB:15:88:A7:C1:52:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F0FF3F296F5CFA7375400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6faddcd7-c3d1-3837-bd8b-99bf96820403.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        68.38.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:0f:f3:f2:96:f5:cf:a7:37:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2d2595ea-10c6-45ec-90dc-60c12191d46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:2b:91:df:37:76:37:4f:29:ee:2c:48:07:
                    d9:40:7c:ae:bc:0a:65:1f:28:1d:33:4f:5d:6a:63:
                    40:aa:59:02:7e:d3:b6:f8:eb:4b:6c:1d:df:fe:e6:
                    fc:4e:f9:a8:6d:cc:a5:0c:29:d5:fe:80:10:b5:cb:
                    bd:d1:29:94:ac:87:73:a2:c0:ca:45:61:38:5f:e9:
                    ac:ea:11:44:fb:9f:b6:23:6f:71:86:68:2c:0e:82:
                    a2:36:71:9e:ec:01:b8:e5:5b:56:01:a9:69:5a:1b:
                    46:f9:19:00:66:84:47:40:5e:06:d9:7c:cb:37:0d:
                    94:3b:53:7a:56:1c:76:3c:b3:62:08:17:5c:a1:f2:
                    17:f4:dd:ee:04:14:76:f5:cc:02:dc:03:b8:fd:54:
                    98:09:b6:19:85:65:c2:67:5a:0f:f3:62:a6:1f:88:
                    e8:9a:4f:7c:14:d1:2f:6f:a4:52:ee:8f:40:81:3c:
                    5f:c3:a5:e3:11:ef:8f:f4:ef:de:e7:eb:76:38:5c:
                    c0:bf:b5:4d:89:4a:de:f2:a3:2b:04:2a:e7:03:57:
                    61:1e:e1:54:45:33:c9:f0:aa:4f:23:ca:ba:ce:07:
                    e8:e0:51:3a:af:5b:ef:06:0d:b4:49:85:9d:c5:c1:
                    4f:40:02:85:b2:d9:66:d1:da:1f:3b:91:e3:ab:94:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A2:91:E0:10:5C:81:42:75:22:4E:56:88:EB:15:88:A7:C1:52:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6faddcd7-c3d1-3837-bd8b-99bf96820403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.38.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:11:09:16:cd:b5:e8:c7:dc:10:b8:0f:e7:70:d7:7d:6f:d3:
         62:f9:0c:44:30:c1:ee:b9:02:e0:7b:a0:65:64:43:b7:cd:d6:
         24:49:06:a2:cd:02:0e:a1:88:3a:98:a5:56:01:8b:04:4b:88:
         f9:6a:1c:cb:27:92:14:36:cc:b0:aa:06:fc:e0:34:8c:28:4d:
         c5:19:98:9b:81:35:40:e2:b4:fa:52:7c:f8:66:93:fd:9b:71:
         85:d0:80:26:a3:01:9d:b3:96:b2:97:98:ba:19:95:ce:5c:5d:
         1a:cd:5e:41:84:8c:3f:8d:73:df:25:74:f3:0b:79:2f:56:bc:
         45:24:f5:69:1f:71:49:55:11:ed:aa:82:8d:80:22:4d:d9:13:
         8e:2b:f4:52:17:c3:03:00:75:b7:f9:da:b7:22:18:61:04:8a:
         87:41:d4:79:5c:b3:8b:41:e8:3c:8d:7a:72:d5:cd:3b:14:38:
         d2:b0:13:5a:6d:97:f8:ed:ad:bb:5a:20:89:40:91:4c:7d:f6:
         1e:d4:a6:05:e0:62:0b:90:f8:5e:66:b0:eb:ac:bc:f7:33:e8:
         1c:23:5e:39:18:b2:97:4c:c4:6e:17:c2:3c:77:4c:8d:73:6a:
         29:e4:16:a8:a1:2c:7e:26:13:6e:2d:5d:f5:16:1f:50:3a:f5:
         56:f6:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:55:42 2026 by rpki-client