Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e6330cd-cc5d-3734-ada9-02289b798db9.roa
File:                     9e6330cd-cc5d-3734-ada9-02289b798db9.roa (raw, json)
Hash identifier:          PN8xpNDhCMwyT+NQqwLtHireyU7Ncaqn2ZUYAe+dkow=
Subject key identifier:   B3:C4:2F:8D:95:A2:E1:D0:DD:16:EC:81:14:58:56:F8:65:F9:E2:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AA1DB3CE0083EFA3B8480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e6330cd-cc5d-3734-ada9-02289b798db9.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        69.253.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:a1:db:3c:e0:08:3e:fa:3b:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7c25ca56-b801-49aa-b8ce-6d103c90cde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:3f:41:a6:87:c6:97:9e:2a:af:82:8e:5e:
                    75:71:29:ea:4a:5a:ef:53:54:cd:7b:60:ae:55:6d:
                    18:03:5c:04:e4:9c:fc:3c:59:1c:d6:4c:37:a6:f3:
                    46:15:b2:18:64:24:2f:44:87:39:32:e9:f2:1a:35:
                    ec:55:ce:78:eb:12:3a:96:57:0a:7a:ed:82:cf:96:
                    e2:57:3f:0b:ef:a7:f4:c1:ba:a6:4d:c5:cc:30:fb:
                    df:ab:9c:3c:f6:85:82:eb:f7:21:74:49:79:e9:e6:
                    e7:3d:b4:a9:1e:82:92:57:46:66:f2:73:11:86:9d:
                    72:1a:27:00:29:3a:ee:9e:f1:e1:51:e8:08:24:4e:
                    2a:b6:83:dc:0e:db:92:f0:dc:2b:3b:34:42:21:3e:
                    bb:f3:e8:17:b7:83:54:64:a2:e6:c1:8f:7d:97:56:
                    de:3e:9a:f5:0f:6a:b5:80:19:20:dd:44:43:1d:55:
                    ed:57:4b:03:54:9f:27:0a:89:ba:d7:25:e5:a8:07:
                    47:e9:22:de:44:b8:66:fd:7c:5f:90:35:bc:68:0e:
                    ab:24:1e:25:9a:59:17:56:c9:31:52:f9:81:16:54:
                    9f:d1:5d:9f:d1:d5:2b:e7:2d:f5:80:bd:3e:25:46:
                    d4:f0:06:18:79:64:e3:27:1f:26:52:73:f1:76:bb:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:2F:8D:95:A2:E1:D0:DD:16:EC:81:14:58:56:F8:65:F9:E2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e6330cd-cc5d-3734-ada9-02289b798db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.253.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:67:0d:14:7b:9f:ee:ec:31:82:f5:3f:59:66:77:f2:ba:74:
         06:49:27:cd:99:75:85:1d:99:0c:ce:89:4d:4c:b1:2d:95:38:
         27:97:e1:6f:55:4e:7a:cd:f9:6f:a1:b7:04:84:44:31:d4:8f:
         82:ec:b2:0c:da:fa:ca:1f:d3:59:8b:7d:12:52:0d:0c:1e:2e:
         be:0f:b8:9e:61:ca:46:dd:7e:c9:2f:22:3d:a6:31:d6:ff:dc:
         6b:3b:fe:69:99:b0:6c:3c:8b:74:26:f9:45:9d:b3:ac:6c:70:
         09:ee:0b:74:07:c9:f7:11:3d:2a:df:91:ab:cd:8c:c2:4b:52:
         1c:44:b5:49:0f:f8:89:01:da:e1:d9:20:4f:a7:5a:d8:31:c9:
         77:3b:b7:d8:98:61:bc:66:1d:89:15:b0:f1:11:cb:ec:67:0a:
         62:c7:00:9a:7c:85:48:48:d7:3d:ce:50:a3:62:45:31:a8:52:
         0a:dc:f1:7f:28:92:4c:c7:12:f0:22:f0:17:26:07:5f:1b:35:
         f0:08:47:17:03:3e:16:55:ea:ae:3b:63:1d:cc:c7:31:fd:26:
         12:82:87:62:57:a9:53:a4:01:4c:89:54:51:c5:40:95:86:94:
         d6:88:18:cb:0b:db:6f:7d:be:9c:00:23:86:95:1d:61:c2:f0:
         eb:8a:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:48:26 2026 by rpki-client