Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa
File:                     9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa (raw, json)
Hash identifier:          TV8UqYei875hw8pq4Q4f57+VOkhV559zkuhKFPnQdgo=
Subject key identifier:   4B:F8:7B:6E:9B:B0:BC:D9:83:1B:FE:0B:86:B6:F7:D4:DE:83:8B:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF628F66D2A7551541EDC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        68.50.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:28:f6:6d:2a:75:51:54:1e:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3474b7d8-29a3-4586-8869-459808891d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:d5:b8:11:4f:21:e6:bf:0e:64:7c:87:20:
                    da:7a:ca:de:26:df:70:5b:50:81:bf:14:7b:67:09:
                    45:81:e5:ae:d7:f5:db:91:69:f0:29:7b:c8:94:19:
                    ec:70:e3:13:db:c5:32:c1:50:a4:e9:2b:ac:46:02:
                    b5:51:b4:f5:84:ae:f7:6e:ca:02:39:fd:61:5d:a8:
                    2c:7a:93:69:f7:6e:fc:e7:f9:01:a2:4b:1b:71:24:
                    83:29:76:23:54:e7:b1:8f:52:48:dd:1f:11:76:10:
                    6e:23:ac:1e:37:79:46:f8:6d:18:30:da:0a:f4:cf:
                    32:a9:63:be:a6:75:ed:13:47:1e:91:76:d8:8b:39:
                    fa:e4:11:c2:19:af:e4:f3:12:c0:db:d6:e2:d4:82:
                    44:07:5a:71:24:1d:73:1b:af:82:59:67:cf:59:42:
                    2d:dd:48:cb:48:4b:d3:e8:c5:67:7f:04:b8:4e:86:
                    1f:48:e3:ed:cc:40:b3:7a:d9:f4:31:7e:08:84:3a:
                    bf:d6:35:7f:6d:e5:64:84:77:4f:b2:9b:11:22:a5:
                    aa:49:8a:95:24:53:b1:2f:d2:b1:f7:1d:b9:fc:55:
                    a5:95:1e:ad:97:c4:e0:9a:26:ca:b7:e2:eb:96:5b:
                    04:f9:56:c1:de:75:76:f3:91:a2:90:a9:c4:73:55:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:7B:6E:9B:B0:BC:D9:83:1B:FE:0B:86:B6:F7:D4:DE:83:8B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d8b5f51-49a9-3354-8a06-38303f1c5f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.50.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:62:09:5c:88:f1:8e:52:fc:2c:77:62:f0:af:d4:a9:1a:95:
         5a:9a:99:c5:68:28:97:3f:e0:37:1c:92:ea:3a:95:78:67:39:
         b9:dd:5a:91:7e:be:08:60:7e:e4:83:38:dd:c4:7b:4f:1c:03:
         fc:ba:5a:17:ad:74:91:69:bc:9c:c4:f5:1c:9e:1d:c5:e6:f7:
         8a:1c:4c:3e:d5:de:38:94:30:68:1d:b9:c8:dc:cd:b4:f9:43:
         06:6b:24:13:7f:10:38:14:9c:09:f7:9e:20:d6:e4:7b:f1:32:
         9e:53:2b:2f:7e:93:fd:e7:2f:c3:a2:2f:c7:3d:8d:d1:6b:cc:
         a5:d6:e0:e3:3d:6b:2a:eb:74:be:fd:54:cf:08:aa:da:51:2b:
         b0:56:97:0d:3c:34:b1:04:d8:95:a7:01:0f:ac:30:ec:34:53:
         d8:8c:79:d3:af:b4:48:f8:fd:4c:86:8a:9d:35:b3:5f:47:20:
         b9:1e:05:aa:29:93:ad:55:65:0b:ed:9c:de:37:87:b8:bb:5a:
         26:ec:10:ef:85:bd:5c:41:5c:24:d4:05:cd:31:96:82:9b:02:
         d7:c7:3a:ad:85:58:1e:33:54:39:56:85:f6:4a:e6:ab:43:61:
         10:c0:99:90:60:1f:42:46:a8:cc:51:00:4f:89:5e:86:46:e5:
         fc:ea:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:49:49 2026 by rpki-client