Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be1afbe6-bfb1-3e81-9b03-187ae37779f5.roa
File:                     be1afbe6-bfb1-3e81-9b03-187ae37779f5.roa (raw, json)
Hash identifier:          amKLZewwriO+oU2vxP4vVKQT64yFHi5AvpMIY0q8sr8=
Subject key identifier:   54:28:5C:96:35:F7:72:06:58:4A:4A:48:E7:B3:7B:A2:AA:20:3F:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E71736ADF649A4307AA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be1afbe6-bfb1-3e81-9b03-187ae37779f5.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        68.55.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:71:73:6a:df:64:9a:43:07:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=2855f7ca-cf79-4f3e-9ce3-dccca40366e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:5c:23:e9:d8:36:41:68:6f:10:9e:24:78:
                    64:15:d1:e5:2d:34:44:25:11:39:f9:a9:c5:c9:ed:
                    bc:f6:d5:8e:09:3c:81:5c:1f:81:10:8f:af:3c:38:
                    00:42:c9:e6:32:7b:94:0a:dd:3e:b3:c2:2d:43:23:
                    c3:24:af:73:0f:06:7a:0e:bd:86:5d:a6:82:7f:f3:
                    f4:c4:a3:55:cb:dc:67:16:61:5e:53:54:17:19:63:
                    5c:a4:25:d8:85:dc:b4:ba:fd:56:64:eb:d9:31:b5:
                    77:0d:ae:a9:e9:26:40:03:f9:8b:e7:be:35:86:59:
                    10:bd:aa:c4:23:15:09:1f:f5:0e:e6:3c:a7:83:f5:
                    22:90:78:8d:68:06:0f:e7:24:bc:0e:8e:91:15:7e:
                    2a:36:09:0b:f4:63:ec:f6:5e:82:d4:e7:7e:f5:cf:
                    1a:68:6a:be:ae:64:5c:24:31:e7:72:24:67:9d:e9:
                    ba:c3:c4:4c:dc:16:ac:83:a0:6c:cb:b5:b0:11:6f:
                    13:20:50:24:0c:2a:41:84:d2:9d:19:80:2f:c5:da:
                    c9:69:bd:bb:41:02:1a:9f:2d:f6:3d:03:54:b2:ed:
                    db:bd:a0:fc:44:83:3c:6b:73:00:6a:d5:59:b1:5f:
                    9a:00:0d:cf:a5:7d:88:c6:8f:77:5d:bb:37:17:cc:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:28:5C:96:35:F7:72:06:58:4A:4A:48:E7:B3:7B:A2:AA:20:3F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be1afbe6-bfb1-3e81-9b03-187ae37779f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.55.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:14:5f:ae:b2:92:9a:d9:64:6d:4c:3e:68:98:df:39:3f:39:
         8d:1a:05:a9:65:3f:1c:58:59:df:a8:f7:f9:e6:2c:fe:cd:69:
         cb:53:98:17:76:cd:ea:cf:92:fe:54:63:42:f0:76:c7:46:3d:
         81:75:0f:d3:fc:30:04:dc:2c:f1:fd:76:f4:95:22:ea:24:04:
         c5:f1:27:c7:14:b1:d3:47:8c:cb:b3:be:0f:a6:2c:a9:aa:bb:
         33:f8:8a:95:45:df:3a:05:79:f5:74:70:75:7b:91:ed:35:b8:
         1e:78:18:ff:bb:60:f6:b6:aa:00:99:40:2a:d0:34:fb:27:e2:
         38:0f:ba:fa:33:e6:b3:0c:f5:ef:98:05:7f:c7:a2:b3:96:eb:
         92:c1:40:07:4b:8f:2b:18:54:a5:d7:97:78:fc:17:cd:69:85:
         15:1e:4a:6e:ef:30:04:50:f2:1d:83:54:45:ab:66:3d:fa:3f:
         c6:c3:b4:5f:9e:92:90:51:83:90:fc:9c:c7:47:21:a8:9f:24:
         f0:2e:fd:d4:5b:20:7e:33:48:87:9b:94:af:c7:a1:e7:c3:da:
         57:ba:22:06:5b:e0:6f:c1:4c:f1:b1:e0:a5:b2:01:25:ca:e7:
         27:4d:d8:c6:5e:55:82:1a:a0:7e:81:51:f8:b5:46:8e:07:bf:
         eb:76:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:09:45 2026 by rpki-client