Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8811c2dd-848c-39e4-8304-39179ff73be0.roa
File:                     8811c2dd-848c-39e4-8304-39179ff73be0.roa (raw, json)
Hash identifier:          gxAfMOP9HWOPYz+O8/gYfpk9u4lY2kPQGeCO5Xx/RQ0=
Subject key identifier:   5A:CF:62:03:A0:53:5A:EA:CB:28:E5:EB:00:F3:66:FD:67:5E:7C:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862BC94D749146E8675A220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8811c2dd-848c-39e4-8304-39179ff73be0.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.55.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:bc:94:d7:49:14:6e:86:75:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=d06f8207-2d6f-4440-9206-1bc6261467a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:24:22:11:c6:47:b5:3c:de:f0:83:da:73:
                    d9:3b:c9:53:86:c5:2c:0b:ee:39:81:2a:d9:2f:a3:
                    27:65:10:e5:82:5e:48:32:0f:1b:20:45:a1:1f:ab:
                    cd:b7:e6:ae:ad:f7:68:15:e9:5a:ae:57:84:b1:82:
                    87:43:29:d1:a3:33:68:7b:fb:10:d0:6d:bb:5d:68:
                    c6:8a:86:59:8c:1f:b5:7d:0b:e7:69:24:d6:e1:3c:
                    bc:66:7b:55:3b:a3:95:63:c8:6f:6c:c2:90:1d:54:
                    c3:ab:1a:7a:a7:48:c6:e8:45:21:60:ab:58:f0:7d:
                    70:ac:7a:7e:dd:c8:c0:55:26:66:73:ae:5b:58:38:
                    2c:b6:6e:39:93:6b:e7:31:9c:f8:0c:18:cd:aa:c8:
                    54:54:c3:83:8c:98:ab:0c:86:55:77:a8:68:2d:4b:
                    83:5d:de:1a:57:57:56:f9:f1:4c:b7:7f:20:bf:42:
                    77:4f:22:76:59:5d:ca:df:0d:11:55:75:75:0a:e7:
                    a6:47:90:28:97:0e:97:27:6d:c9:75:04:04:a8:ef:
                    95:86:df:6f:58:1b:f2:35:d9:96:e2:4c:78:c3:1a:
                    88:a9:64:95:ba:da:c8:c0:60:e6:a2:dc:32:16:93:
                    7b:93:d4:e5:e4:b7:a8:dd:3a:43:a5:8e:95:e4:46:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:62:03:A0:53:5A:EA:CB:28:E5:EB:00:F3:66:FD:67:5E:7C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8811c2dd-848c-39e4-8304-39179ff73be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.55.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:6b:2b:91:63:17:ed:57:4d:43:bb:ed:d8:c9:ac:d2:3f:
         2b:bc:74:1d:d4:f6:c0:5d:23:0f:0d:9c:ef:f2:c9:21:eb:77:
         d5:b2:bd:4d:d1:48:ca:4e:12:c1:b6:1d:ed:0b:3b:99:2c:8a:
         c6:49:40:4a:eb:37:23:62:a3:c8:b1:dc:09:81:32:fa:9a:1c:
         02:b1:3d:18:d5:0a:f6:9b:1d:0f:91:7a:d4:99:b2:66:e3:ed:
         27:d6:42:2b:f5:40:87:7d:99:dc:79:55:ac:35:c7:8d:11:81:
         14:fd:1a:41:e3:8f:4d:24:6f:5f:29:4b:96:d0:23:8e:17:4a:
         46:aa:4d:da:4e:46:32:20:db:bc:fe:8d:04:f4:b5:ae:40:e3:
         21:8b:99:91:2c:b8:89:52:ba:40:0d:37:08:2f:c3:f5:07:42:
         a9:7a:bf:6b:76:bd:dc:d5:d6:69:ba:75:8b:b1:db:16:90:06:
         6f:65:fc:40:1d:61:24:05:7a:bf:21:55:9f:4a:d2:db:6d:ec:
         52:64:ed:ff:6c:0a:da:4b:4e:42:48:1b:6c:a3:3b:b3:93:d2:
         59:c1:3a:71:70:61:3e:cf:43:50:e2:07:77:90:5a:8e:26:07:
         0f:bd:6f:8b:51:af:f3:68:5c:02:14:a8:d8:4e:15:bd:b1:d3:
         ff:3f:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:39:07 2026 by rpki-client