Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa
File:                     960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa (raw, json)
Hash identifier:          iA0ug4MAa8CGVnczfnZBNstmB1TcyFQF2E+1XfWODtU=
Subject key identifier:   4E:0B:A9:F6:86:0D:AD:4D:8E:28:12:F4:79:03:95:63:33:62:77:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F0F7CB30416CA35BFFC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        68.38.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:0f:7c:b3:04:16:ca:35:bf:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=8fa736d7-ab89-44c5-9fb9-df1cd2a1dca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c4:63:e6:ea:da:0d:53:f8:34:92:0a:9e:a8:
                    4e:e5:8a:3e:05:fb:8c:72:9e:9b:59:19:9f:bd:86:
                    fe:5c:71:13:a7:b2:cf:d4:94:4d:9a:8b:02:b9:90:
                    f1:3e:92:6a:3c:01:de:8a:c3:8e:65:1b:fe:90:1b:
                    57:7a:94:38:0b:aa:7b:39:66:de:ac:fd:ae:20:a4:
                    f3:22:f0:86:6b:23:29:77:2c:80:b5:ff:a4:f8:1f:
                    2e:3f:36:d1:9a:fc:25:a6:2b:b7:14:fb:6a:51:3a:
                    55:b8:59:68:10:59:58:09:1a:4d:0e:fa:63:db:a8:
                    87:a5:a0:e5:5b:7d:c9:32:64:7b:f0:f7:09:32:83:
                    e0:3f:1f:d0:73:ba:6b:f1:bd:b7:16:b0:b3:b9:5a:
                    3d:ea:71:6a:5f:16:69:78:10:67:21:e5:17:17:61:
                    03:75:93:5a:ac:79:5c:54:16:3a:91:a5:93:78:57:
                    15:23:94:27:63:d5:6c:ed:c6:aa:f6:c1:3d:ad:d8:
                    c7:20:bb:b1:0e:46:96:df:b0:e2:13:7c:10:65:02:
                    b0:0d:b0:05:12:41:9c:8c:ad:05:e1:71:d9:9b:03:
                    76:7b:b7:f8:39:e3:61:9b:a0:77:39:66:d0:d4:f4:
                    44:f6:00:1f:85:e0:71:25:dd:b3:99:b3:9d:bd:5d:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0B:A9:F6:86:0D:AD:4D:8E:28:12:F4:79:03:95:63:33:62:77:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.38.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9d:09:1c:f3:e2:05:e6:ee:92:85:64:83:9f:8a:6b:dd:f0:
         e9:77:2b:8e:83:c5:8a:75:4c:52:03:ca:f3:5b:7e:22:50:57:
         40:d3:f2:dc:b7:29:d9:78:50:42:2d:cc:aa:33:b5:00:8e:0a:
         3c:cb:07:6f:7e:b0:91:b1:c3:44:62:e0:9e:84:6f:3c:80:71:
         b9:83:0e:5f:dd:9c:ab:83:f4:bf:47:ae:29:e0:98:2e:e1:29:
         20:8e:73:55:b6:13:e6:80:82:e0:b8:b5:1d:30:af:9e:2f:e6:
         66:bf:b3:f3:d0:2e:1b:a6:ac:2a:e8:44:7f:48:9c:0e:ff:c7:
         21:ac:e3:0e:de:59:f3:ca:e1:41:51:bf:d7:19:2c:a6:30:f6:
         1d:c6:bf:2f:a5:bc:44:d7:da:d3:d2:d1:32:7c:6b:cf:8b:eb:
         06:e8:bc:f6:df:bd:7d:38:53:f1:de:1e:0f:8a:09:84:c7:89:
         59:34:29:e9:4b:50:4e:1b:94:49:a1:2c:1f:32:0d:30:ca:4e:
         cd:55:e2:cf:5a:6b:34:eb:05:40:96:c9:f2:90:15:52:c7:d7:
         ce:44:85:8f:ba:2b:58:1f:71:6e:18:1f:97:c5:16:16:a5:b9:
         9a:2c:a8:fd:ea:64:ef:94:7e:39:37:2b:64:6b:ed:d7:8c:79:
         5c:8c:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:14:18 2026 by rpki-client