Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd3607d2-f084-39db-933f-392f63951c59.roa
File:                     bd3607d2-f084-39db-933f-392f63951c59.roa (raw, json)
Hash identifier:          rwCB1eV0ckErleerWk4ytDEd9BqqRn4yi3iiB2rwrqg=
Subject key identifier:   4F:AB:5F:91:B8:29:14:E2:5B:13:AF:15:CF:8A:78:58:E0:1C:6D:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144DBE62B06B6DEA690B340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd3607d2-f084-39db-933f-392f63951c59.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        71.56.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:db:e6:2b:06:b6:de:a6:90:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=47e1c62e-e0d6-441e-a425-2af435dec552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:3d:03:4f:0a:f3:e8:d3:4d:4e:ba:d5:dc:
                    4e:b4:e2:31:bc:17:72:65:7b:d0:25:ea:b6:81:51:
                    db:b9:1f:41:39:42:65:a4:c5:13:f6:92:bc:65:e4:
                    7b:ff:90:bb:d5:d2:95:78:29:54:c1:fa:05:18:6b:
                    b4:bc:45:cb:44:f7:81:b4:6c:54:02:85:63:f0:40:
                    69:f0:cc:ab:1b:06:1c:c8:26:a7:e9:40:dd:ba:59:
                    5c:0c:ae:8b:9c:67:d6:56:7c:d0:f6:76:27:fa:bc:
                    5b:b7:f6:00:f1:e3:3b:0c:25:c9:cf:3b:85:12:06:
                    2f:89:52:77:02:19:f9:ac:37:a1:c1:b1:e8:8a:50:
                    db:b4:4c:29:6f:53:b6:b5:7a:89:07:6e:6a:69:d4:
                    bc:ea:91:03:b2:0d:60:a5:6b:c2:dc:4d:c8:82:a2:
                    b6:34:97:e6:fb:fd:ee:f8:4a:64:25:0f:55:8a:ee:
                    81:91:58:23:5e:97:26:b4:75:39:c4:f3:74:ef:26:
                    13:9b:c4:a1:4c:17:81:d0:9d:7b:d0:cb:cf:39:4b:
                    bc:fb:9a:bf:9d:48:29:d4:74:4c:eb:86:5f:75:48:
                    1f:ef:d6:12:3c:71:b2:ad:fb:9e:44:d7:19:79:87:
                    79:ac:b5:a9:11:49:10:e7:51:24:78:15:82:b2:25:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:5F:91:B8:29:14:E2:5B:13:AF:15:CF:8A:78:58:E0:1C:6D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd3607d2-f084-39db-933f-392f63951c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:67:b5:ce:24:46:ba:06:c9:7a:79:bd:ee:0d:cf:a6:08:
         02:97:70:97:19:80:58:5c:29:af:cf:bd:32:f4:3b:70:6d:bf:
         68:77:d0:c5:f9:37:dd:a3:96:6e:da:de:ff:d0:fc:c6:47:ad:
         66:10:fd:de:89:9a:1c:ce:ca:b2:4a:33:e7:92:01:d6:06:67:
         23:79:94:86:e3:74:86:bd:36:0e:5c:6d:e9:68:84:9c:fb:db:
         a8:5a:1b:42:b7:1c:58:82:c9:b9:5a:9e:ae:ca:e6:08:de:4a:
         23:61:83:f1:a4:d7:56:07:87:35:e6:f1:77:1c:6b:42:20:d8:
         71:4e:3e:e0:c0:4a:1c:50:e6:e3:34:7e:ee:92:c4:c8:d2:1a:
         59:ee:36:ce:80:cf:f8:92:5f:6b:9d:56:27:3a:df:3f:ef:5e:
         9a:01:a1:9e:58:45:4a:b9:a9:66:ce:ee:91:b7:46:92:91:4c:
         ff:0c:42:3f:82:b3:c2:2d:a1:bb:52:fb:ab:6b:4e:b6:dc:6f:
         f2:7b:08:96:da:d6:16:7b:09:3d:ba:c5:e2:e5:ca:2b:40:82:
         40:6d:15:b8:af:18:05:ef:50:40:cd:8f:46:10:2d:bd:d8:bc:
         7a:fc:12:7b:1c:8f:52:d6:84:ca:be:7f:94:a6:f7:3c:01:d5:
         16:ac:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:37:45 2026 by rpki-client