Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e64019-fa94-36c4-800a-315df9a99bcc.roa
File:                     b7e64019-fa94-36c4-800a-315df9a99bcc.roa (raw, json)
Hash identifier:          QCs++5xQF/cpSEAoA8jRmb1aB+LivOapTkR/u4wg+OI=
Subject key identifier:   A0:22:7B:DA:70:C1:4D:8D:92:60:4D:F1:9E:F7:9C:09:6F:B8:2C:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFDB619327E2F56039B900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e64019-fa94-36c4-800a-315df9a99bcc.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.40.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:db:61:93:27:e2:f5:60:39:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=1572147d-15e8-473d-9397-e6d44e6d69fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:61:e7:9a:3f:a8:45:ed:6c:23:fa:ab:d2:
                    ff:31:62:fc:31:4c:93:09:46:9c:99:b4:58:61:b1:
                    45:b7:ed:fb:2b:65:84:d1:75:36:85:42:14:07:89:
                    52:51:31:80:69:5f:78:27:10:d0:c7:46:c9:cd:3b:
                    25:e8:55:67:08:53:8d:83:31:89:5c:14:4b:41:4c:
                    b6:bf:6f:c4:1f:1a:fc:7a:6c:7d:91:8c:2b:ca:6f:
                    5a:c1:1a:a7:58:7f:11:a5:6e:41:ec:b4:4f:98:33:
                    3c:97:fe:a4:b6:9c:09:e2:27:05:fa:07:71:fc:8b:
                    1f:0c:db:9a:a5:e4:2e:e3:fb:40:27:ae:4f:02:9c:
                    a9:d1:1f:5b:51:f5:af:fc:1d:d3:68:3f:14:74:1c:
                    ea:2c:29:4a:7b:64:a7:c3:7b:8b:07:73:87:81:40:
                    34:39:fa:72:06:0b:c9:58:38:79:16:47:bb:45:89:
                    ce:70:82:c8:fb:4a:7e:d8:53:09:88:3a:3d:e3:df:
                    03:ae:3c:b3:fe:5e:5c:3f:60:40:df:95:1b:40:b5:
                    68:c9:00:9b:98:df:5b:26:e3:aa:fc:67:7e:e8:b1:
                    46:08:47:69:d1:92:f4:0d:ce:19:77:ac:5c:73:f9:
                    50:31:e9:81:9b:6b:ee:b4:64:a4:dd:d5:13:c3:a1:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:22:7B:DA:70:C1:4D:8D:92:60:4D:F1:9E:F7:9C:09:6F:B8:2C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e64019-fa94-36c4-800a-315df9a99bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:c9:2f:f7:e5:2e:d4:fa:ed:f5:0b:e9:e7:7b:c1:82:31:f5:
         d2:cb:9a:f4:98:b7:de:37:f8:e8:e5:58:eb:60:78:0b:78:9b:
         f2:3c:2a:75:24:f0:d7:1f:6b:ad:e0:8e:36:c6:9f:de:06:15:
         5c:ad:90:2c:17:86:86:35:e3:b8:14:7d:33:c8:50:d3:35:0b:
         96:78:38:4c:93:55:80:89:a1:7f:ae:35:ef:9a:57:15:36:1a:
         11:09:05:ba:de:0d:3f:53:cd:11:95:b8:c6:e1:fd:2f:af:17:
         4c:80:d8:ed:85:b0:60:20:01:26:98:c6:78:14:ec:31:0b:1e:
         f8:f9:58:fa:8f:c7:0f:b1:67:6b:6a:87:90:9b:0e:73:16:2b:
         3a:9c:aa:29:d5:46:64:34:70:8f:94:eb:a9:55:e5:b4:17:a5:
         a0:7f:02:6e:f7:f5:f9:34:7f:f2:89:16:54:0b:c5:1e:b6:d4:
         30:db:7d:7a:b7:4c:9d:c9:e5:3b:e4:39:da:ad:4f:8d:dd:d5:
         dc:20:ef:e9:1d:9f:b0:f4:34:ca:f9:b0:84:aa:a7:a2:b0:68:
         d6:f4:94:49:7a:56:53:f1:16:9b:87:ff:87:08:96:e1:5a:6e:
         b2:8e:42:de:4e:2c:3a:3a:15:6f:33:f1:bf:b3:7e:8b:c5:50:
         d0:fa:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:33:22 2026 by rpki-client