Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa
File:                     81cffdf8-b98e-3c19-815b-5041ea92309b.roa (raw, json)
Hash identifier:          UgTebe0mPMh57ivN3Xf+FgoikvlNSWjwF2sHUeq4oJM=
Subject key identifier:   92:90:A3:3D:F9:68:D1:EC:4F:27:7F:A0:E6:8A:CB:93:70:D8:44:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA552EB2C910A4F3F34300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.36.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:55:2e:b2:c9:10:a4:f3:f3:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=1b0282fc-877b-42d8-9428-b81e0a792106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:90:8c:ca:50:86:89:8d:a7:aa:47:f5:95:
                    c7:c3:f4:70:7e:94:6e:e4:f6:36:38:62:a3:dd:9b:
                    2a:94:d3:7a:8b:e4:70:48:60:06:09:cb:bd:24:06:
                    22:cc:5c:6c:92:9b:8b:c9:e2:bc:9e:12:f8:38:6b:
                    90:f2:5a:a6:27:ee:04:14:ef:21:d1:3f:c9:79:ee:
                    7e:a9:06:82:ee:e9:03:08:fc:be:af:6d:94:3d:8d:
                    47:52:34:42:2a:a9:ad:7d:99:39:f8:cd:40:16:1e:
                    29:bb:29:1a:8d:22:2a:98:d7:cf:56:e0:ac:00:b5:
                    88:a2:27:24:02:3d:48:47:f5:95:88:21:8c:3d:34:
                    ca:17:92:32:e7:9e:eb:e8:dd:89:25:e5:81:81:7c:
                    63:e0:b0:0a:21:04:ed:31:05:b8:33:1e:cc:c4:76:
                    c7:7f:f2:b5:d7:34:63:25:a7:55:03:c0:9c:43:70:
                    96:1d:9c:d0:42:eb:ab:07:29:3f:a1:0e:3c:87:69:
                    3c:20:1d:14:d1:64:b5:57:7f:76:78:9f:98:93:aa:
                    ce:e7:f4:2d:cd:b1:36:27:45:96:f8:0f:b5:9a:9c:
                    83:37:bf:30:24:69:71:17:f4:48:1a:22:be:cf:f6:
                    40:93:f2:41:24:d9:b0:38:0d:86:d6:bc:ad:a3:3b:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:A3:3D:F9:68:D1:EC:4F:27:7F:A0:E6:8A:CB:93:70:D8:44:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:df:c8:ad:45:9e:be:56:ee:8a:42:5e:cc:03:be:d3:57:27:
         ef:79:07:21:88:ae:d7:28:6a:08:42:e4:10:51:7a:11:64:7f:
         fb:8c:54:81:dd:1e:98:3c:43:dc:37:da:62:e9:33:47:3a:d8:
         69:05:d0:b1:a5:b8:ad:9a:56:f7:4b:44:0c:1a:cc:83:41:ca:
         84:0a:d9:73:c1:83:f4:5d:36:51:d1:47:5c:b0:79:76:ba:83:
         22:79:8c:c7:21:97:ef:48:f3:28:9c:5e:84:3a:19:aa:40:69:
         6a:02:8e:a1:31:f3:a4:2e:dc:0b:f6:fe:e2:0a:39:c6:3c:ad:
         20:89:0e:3b:a7:45:95:71:0d:b9:16:65:6c:07:75:7b:08:96:
         54:22:8e:48:b5:df:9c:48:79:87:4b:a2:87:1a:b5:3c:78:5c:
         2a:59:a1:9f:88:eb:3c:20:9b:99:70:00:fd:16:e3:b1:f4:5f:
         1d:51:81:e0:8b:12:41:be:dd:04:79:df:5b:15:07:ec:96:7e:
         93:40:f7:39:11:97:b0:57:71:58:cc:a5:28:7e:60:5e:23:df:
         f6:74:51:31:8d:77:64:ae:6f:4d:0a:c3:d9:9f:4c:0a:bd:2c:
         84:95:43:63:67:07:46:97:e3:ac:30:b5:30:40:e4:b2:85:0f:
         bf:f9:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:33:34 2025 by rpki-client