Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13ddcc5-0029-334b-858d-b42fa99ea31d.roa
File:                     b13ddcc5-0029-334b-858d-b42fa99ea31d.roa (raw, json)
Hash identifier:          K+x3GWq79/87DHKmYUOBh5+25B0BwBppuP4NX+TezX8=
Subject key identifier:   8D:2C:6D:A6:CA:38:06:E1:82:13:B5:B0:2A:64:1F:12:63:CC:DD:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B5960F63E588FD309AE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13ddcc5-0029-334b-858d-b42fa99ea31d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        69.181.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:59:60:f6:3e:58:8f:d3:09:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=bb3fe22b-1028-494c-9fb8-4be886af8760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:61:d2:a1:50:8e:5d:00:31:af:26:cc:78:
                    f0:44:0a:9b:ab:13:d3:6b:37:96:a4:57:27:8f:78:
                    53:7c:a5:a9:12:4e:02:6f:87:c6:42:bc:7e:19:a2:
                    5c:d2:ec:31:b0:97:36:9f:7b:f0:32:0c:68:7c:18:
                    8c:6f:ce:82:8a:2f:13:b5:89:1c:5e:1e:52:52:ea:
                    a7:22:e6:c1:5d:c3:01:c7:6c:87:2d:4d:a6:1f:89:
                    df:b3:44:fb:fc:c5:4d:58:9d:98:34:4c:3d:1d:0e:
                    8e:7e:80:1f:82:84:64:37:38:b5:bb:a1:5b:86:90:
                    ee:57:68:03:c7:af:a9:67:c6:7e:e2:47:10:9a:c6:
                    bc:f6:b0:d2:b9:6b:4c:08:92:cc:c4:94:70:92:c3:
                    03:18:72:05:3a:f6:c2:1b:66:78:01:7a:d4:82:8b:
                    34:f2:de:b6:18:f9:c7:89:e9:9e:9b:cb:45:66:5a:
                    b4:4d:31:64:96:44:57:b1:da:bd:49:be:3d:27:06:
                    a2:1b:d4:eb:de:82:0b:a5:50:c8:83:f2:19:bb:84:
                    92:86:73:fe:6a:41:91:fe:04:5a:2a:4f:f8:e9:89:
                    0f:e0:8f:21:d1:0b:c1:12:3e:3e:ef:63:30:b9:06:
                    45:e6:b2:31:26:98:7b:35:ad:1c:ac:40:7c:b4:50:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2C:6D:A6:CA:38:06:E1:82:13:B5:B0:2A:64:1F:12:63:CC:DD:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13ddcc5-0029-334b-858d-b42fa99ea31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.181.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:92:ea:79:0c:ab:71:00:67:2d:3a:61:71:86:c6:96:89:04:
         41:b5:0a:4e:10:c4:bb:2c:2c:2a:e2:fc:b3:16:fe:5b:49:95:
         2b:b0:aa:02:4c:3f:de:ae:8a:24:e5:86:6c:64:c5:28:37:be:
         53:00:27:e8:80:4e:97:64:be:04:63:eb:8a:48:e3:55:11:1e:
         85:2e:85:16:ea:0f:96:3b:7e:94:97:d5:af:d2:88:1f:25:ba:
         e2:3a:52:5b:29:4e:cd:7e:cf:72:ae:44:41:07:81:ba:da:93:
         bf:f3:af:fe:ae:81:e8:ee:6a:73:44:60:7c:06:0b:fe:eb:2a:
         d3:94:6c:2b:f8:5d:c6:e4:11:15:a3:35:68:45:8f:e6:d2:51:
         c5:2a:e9:ed:58:6e:0f:94:38:87:56:06:4a:15:91:ca:48:14:
         3d:d5:8f:0b:0e:7e:4c:c1:34:c0:15:13:02:ca:f3:52:56:0c:
         25:c2:66:61:b9:d3:84:88:36:18:1f:16:b8:80:78:72:2a:c7:
         5e:d6:3d:c2:74:70:69:df:1d:ea:fa:0c:4a:44:41:11:bd:66:
         3b:62:55:40:86:82:f5:d7:eb:e8:67:47:5a:93:ed:15:dc:4e:
         69:e0:19:da:d6:a0:fd:be:c2:d6:38:7a:8a:9c:5b:cb:41:a9:
         01:5d:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:06:27 2026 by rpki-client