Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d08122-3eac-3508-be93-67d2859a5b39.roa
File:                     94d08122-3eac-3508-be93-67d2859a5b39.roa (raw, json)
Hash identifier:          Y3gsmot8UmfSsY73g7+TpVLNr9/z2sYZIa1pK995/h4=
Subject key identifier:   08:E8:75:27:9A:5C:78:1B:68:AA:8D:C8:40:FD:88:D8:D1:1D:EE:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFF0234207916E7DE3F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d08122-3eac-3508-be93-67d2859a5b39.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.62.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:f0:23:42:07:91:6e:7d:e3:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=d8a37b2c-9131-470d-83aa-842bb01c5c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:da:6f:6b:a9:4a:80:ea:59:32:a2:2e:04:
                    ed:09:50:6e:c7:e5:62:24:35:82:22:96:6a:0e:4f:
                    65:63:53:09:42:10:28:0f:1c:12:4a:8d:89:ab:c3:
                    08:db:a2:fd:12:6b:4e:18:44:cf:30:fa:1e:9b:a5:
                    b9:3b:1f:91:e6:85:d2:6a:bd:b7:bf:ec:4e:14:6f:
                    65:bd:47:03:d1:db:7f:ef:1d:18:e5:fc:47:11:dd:
                    c3:18:60:d5:7d:16:e0:51:ca:bb:72:1c:be:88:40:
                    68:ff:9d:11:3c:ad:7a:04:11:7d:e9:9a:bd:26:b8:
                    92:5a:97:50:54:ec:85:f8:c8:7d:98:37:4a:69:f1:
                    44:78:e4:47:15:dd:ad:60:fe:2c:b1:47:bf:cf:18:
                    e2:04:42:f9:e4:da:e1:6a:b6:32:b2:bb:8a:50:3f:
                    1b:aa:cd:99:65:99:d1:a2:e3:b3:8e:c9:20:67:a6:
                    63:69:e2:d3:fc:17:bd:5f:8f:6d:51:93:d0:f7:ad:
                    0f:ad:81:b1:28:b3:80:91:07:1d:ca:6e:86:65:95:
                    ef:ec:2c:b7:28:fd:8a:4b:71:76:64:f5:1a:a2:0c:
                    8c:9f:0c:bd:ce:36:c0:96:a6:99:06:1c:08:28:1c:
                    61:0b:28:a3:42:b3:b4:a6:06:c1:32:82:92:60:50:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E8:75:27:9A:5C:78:1B:68:AA:8D:C8:40:FD:88:D8:D1:1D:EE:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d08122-3eac-3508-be93-67d2859a5b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.62.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:ab:69:f6:03:5e:17:c8:31:1c:53:b9:2a:a8:a9:56:fb:
         9f:b8:3b:f0:bb:b7:ea:26:2d:1a:4e:66:24:80:3f:17:b7:f3:
         f8:1f:82:73:2a:db:68:08:bd:65:1c:95:d6:d5:15:01:6d:29:
         07:5e:4a:64:47:07:8f:b3:51:79:8b:54:77:ca:17:da:02:89:
         9b:28:ef:5d:7e:3e:33:fc:9d:3a:f4:8d:f8:66:eb:f1:1b:e7:
         17:f2:05:6b:13:1d:19:d1:5d:34:a3:56:1e:1c:8d:01:4d:80:
         67:2a:89:0f:b1:7c:98:cb:65:b8:9f:e3:1d:c5:df:9e:4a:5b:
         e6:f0:2c:69:37:0f:0d:21:e5:53:cf:df:89:25:e5:9c:a7:49:
         bd:96:62:3e:b5:87:38:c2:65:6a:f4:04:b7:d1:39:2f:0a:bf:
         fa:ee:a5:92:ab:c3:bf:e0:12:cf:96:ee:2c:93:76:d8:a1:70:
         33:a6:e4:e7:e8:8f:e9:1b:ad:9f:9e:27:b5:43:6b:55:ec:53:
         03:04:df:25:38:d7:50:14:18:aa:ab:12:59:2e:82:f4:13:e0:
         ec:00:ff:0d:be:21:d9:ad:ca:b9:aa:1e:23:57:35:ef:7f:87:
         67:2f:ae:74:52:29:8f:46:29:14:73:7a:57:06:d9:c9:26:9d:
         05:8d:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:40 2026 by rpki-client