Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9675316f-e5ad-3ee4-bd2e-450023a706ee.roa
File:                     9675316f-e5ad-3ee4-bd2e-450023a706ee.roa (raw, json)
Hash identifier:          XCUePlbhXT/GL1fSQ9PQ5WaK6z4Lge2N2bq4t0upDSg=
Subject key identifier:   74:2E:7E:DF:A7:AE:38:C4:6B:06:5D:1C:B5:2D:09:8C:D6:65:22:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863B406FDE6E7CA11FD2880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9675316f-e5ad-3ee4-bd2e-450023a706ee.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        75.67.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:b4:06:fd:e6:e7:ca:11:fd:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=2425d3f8-5359-4151-af8c-f56db3f61b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:e9:9e:39:d3:e3:c7:0c:17:08:86:bb:7b:
                    70:39:19:bb:51:db:99:48:98:ec:0b:48:3b:47:dd:
                    f0:8a:83:17:05:c3:2c:68:b6:1d:be:de:fd:6f:51:
                    74:36:9b:07:9a:a9:94:46:2d:3d:b5:44:d6:9b:58:
                    7a:de:a2:18:ec:1b:bd:f5:c4:a2:83:f5:16:05:39:
                    4d:c5:0d:da:0a:33:c6:cd:3c:dc:07:df:1e:82:d1:
                    26:95:cd:d6:8f:d3:9f:a9:f4:3d:fe:43:02:2e:50:
                    72:fa:be:b9:14:b8:83:36:a7:fe:af:9c:7e:97:13:
                    05:22:7f:93:82:8e:18:06:a9:2c:72:ee:e2:bc:df:
                    88:e8:7c:f2:d8:a9:85:ac:57:83:f1:ed:96:8f:e6:
                    cd:af:f2:0b:16:bb:55:e4:87:cb:ce:ea:ea:f2:d8:
                    2b:8f:db:4a:34:08:ce:75:70:00:7f:d8:b7:30:ea:
                    16:e1:73:81:7c:10:fa:c2:51:29:65:2d:c3:c9:d1:
                    3a:c7:7e:29:0a:77:e5:b8:c2:90:bb:95:10:f6:95:
                    b7:9f:ca:b2:fb:ee:c1:4b:22:4b:5d:b0:42:d3:18:
                    a0:54:d4:67:4d:e3:76:db:2b:86:1d:0f:83:d6:a6:
                    4e:ae:20:12:f6:dd:13:7c:56:a0:43:8d:95:b7:89:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:7E:DF:A7:AE:38:C4:6B:06:5D:1C:B5:2D:09:8C:D6:65:22:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9675316f-e5ad-3ee4-bd2e-450023a706ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.67.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:a9:06:be:4b:b3:0d:52:e7:df:29:09:ec:af:b5:a6:6b:
         db:cc:95:e1:8c:69:8f:f0:44:15:41:bd:9c:54:0b:d1:ae:6a:
         cc:d1:f7:be:94:22:a7:fb:20:c2:67:06:cc:7d:b6:fc:69:66:
         84:85:cd:09:ad:1a:31:ab:19:31:0f:7b:0a:38:34:45:ec:83:
         3a:04:01:78:f7:e7:9b:e3:bc:d0:8a:e0:79:7f:a0:aa:7d:ef:
         d5:d3:35:77:b8:54:be:bd:6b:f3:0c:99:c2:df:63:af:a8:77:
         11:28:f6:23:52:f9:53:57:46:3d:c2:0e:b7:49:1b:b4:93:84:
         11:90:c7:7d:42:cf:bc:64:68:2f:db:39:ec:a9:ff:2e:f7:a0:
         a1:f2:5c:b9:2a:e3:40:6c:ec:09:1c:36:51:f3:df:af:61:80:
         1b:49:42:58:46:39:7e:f4:b5:25:60:ea:3f:34:72:b5:91:8e:
         5b:e6:7d:97:56:8f:a7:75:69:99:3a:a7:c4:35:cc:69:a6:73:
         0b:a4:9b:60:0e:ad:bc:ad:a3:4c:4f:7d:0c:a0:75:ee:42:df:
         74:c9:4f:7b:f8:9c:3d:87:ff:b9:5b:25:18:df:33:a5:12:f1:
         4a:af:80:db:02:f9:2c:6f:2e:c5:8c:db:a5:9c:65:9f:5b:ac:
         14:f9:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 19:41:12 2026 by rpki-client