Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98d3de9a-357f-3365-a56e-0374de304c4c.roa
File:                     98d3de9a-357f-3365-a56e-0374de304c4c.roa (raw, json)
Hash identifier:          pjK1/H8tsKwoToHGPukDyfCFeETdunBhr2mQDalDPxo=
Subject key identifier:   67:A4:23:05:D3:CF:6B:0A:CB:06:48:17:AA:F6:BB:00:26:25:68:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E3273E7EC646C49ECDA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98d3de9a-357f-3365-a56e-0374de304c4c.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        73.68.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:32:73:e7:ec:64:6c:49:ec:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4c63d3f3-41e8-406a-9624-007e8aa191ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:ff:ef:1c:3c:de:e5:32:27:28:e9:9f:5b:
                    d1:5b:8f:b1:28:89:6a:14:54:78:44:c4:02:ea:0b:
                    f3:25:87:52:2d:d1:69:a3:73:ea:7f:5d:80:76:f3:
                    8c:26:c0:b0:06:b8:9c:43:2c:10:32:df:0b:d3:0f:
                    80:1a:79:ae:e8:07:09:e5:76:0b:ed:20:da:6a:e2:
                    99:dd:d1:3e:8a:17:a1:aa:ec:8a:e4:6a:75:5a:a1:
                    2c:b4:af:58:37:3f:7d:6d:2f:00:08:94:e8:54:4e:
                    45:a5:00:de:56:14:26:b4:39:27:f0:81:52:03:de:
                    8c:9d:7c:ce:9f:35:43:06:bb:e2:48:15:4a:ad:88:
                    5e:21:f7:4c:d7:a3:2b:5e:cf:24:e4:04:7a:45:d0:
                    54:cf:74:84:4b:04:28:8a:58:a3:da:a0:2e:61:cc:
                    c6:17:46:d9:25:b2:ea:30:f8:2e:a5:75:cf:28:6d:
                    db:ce:e7:14:5e:30:74:c4:55:c7:81:9a:7d:1d:a0:
                    cc:f3:19:82:58:27:88:74:3d:36:d8:d6:22:de:3a:
                    a7:a7:ec:d5:f5:76:e1:e6:58:5f:3f:5b:6c:69:7c:
                    95:90:90:64:45:4a:b8:b5:98:7e:2a:81:c1:0d:be:
                    f0:fa:81:1b:cb:5e:cc:ee:e9:1f:cc:61:c0:cb:41:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:23:05:D3:CF:6B:0A:CB:06:48:17:AA:F6:BB:00:26:25:68:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98d3de9a-357f-3365-a56e-0374de304c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.68.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:28:34:d9:31:f7:14:ec:4d:05:b1:22:f5:3a:7b:85:a1:62:
         b3:1b:53:27:61:fc:17:c4:da:e1:3e:85:55:26:49:b1:8f:45:
         a6:cb:1e:ce:a9:06:aa:c5:d4:d1:56:4b:5f:59:6c:40:e0:5b:
         d0:26:88:cc:8d:47:82:1c:ca:6d:7b:05:45:4b:a8:b6:1c:e8:
         2a:21:ed:b1:f8:77:94:2b:a6:9f:c5:9c:d4:3f:ed:d6:49:d4:
         d8:ce:33:f7:47:57:9a:62:e3:75:b3:46:67:a3:40:c7:cc:b2:
         a0:db:c9:4b:70:10:0a:3a:9f:63:7b:aa:5e:3a:b2:ee:94:c7:
         0a:34:c6:cf:4c:51:76:b8:bb:76:e7:bd:0c:2f:ab:b0:c7:3b:
         81:e6:7f:72:38:15:8d:78:f8:7d:1b:be:b0:8a:89:81:b2:24:
         62:a9:e5:59:8b:33:02:93:c3:09:08:4f:ff:13:36:95:a3:52:
         28:62:b1:fb:4c:9c:f5:b3:ae:73:43:fc:78:29:d5:70:f9:d4:
         6f:53:52:6e:a9:59:f3:dd:c1:a1:7c:06:84:b6:b7:64:5e:9f:
         4c:d6:7d:8c:ad:de:97:cd:b7:f4:3c:51:2f:24:22:e5:de:7d:
         81:82:04:65:96:5d:11:ef:ba:62:37:c6:0f:93:95:b2:ba:9f:
         2e:63:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:31:51 2026 by rpki-client