Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e0004e-0022-302e-bc85-a4d7c749ba3c.roa
File:                     d4e0004e-0022-302e-bc85-a4d7c749ba3c.roa (raw, json)
Hash identifier:          U3QDoQ91ENkmUvKTYuMDPDLaNhSyD3Xv7bAaadHl4Q8=
Subject key identifier:   7D:78:E8:A0:DB:F7:93:C5:A3:BB:0E:26:21:3C:11:71:0A:FD:25:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144D7DF15670F0403A15080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e0004e-0022-302e-bc85-a4d7c749ba3c.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        68.62.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:d7:df:15:67:0f:04:03:a1:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=a9279ea3-dd37-40e2-ad5c-234ecd6415a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:c3:ba:56:ba:6f:da:76:21:8a:cd:02:cb:
                    40:e0:1d:6f:95:15:8f:a6:ca:65:a5:f5:c7:c5:78:
                    26:d4:57:9d:26:ea:d4:59:bf:f3:6c:aa:8e:a1:d0:
                    2c:7b:5d:8f:d3:96:38:43:7b:1b:05:c6:8d:2c:9b:
                    cf:01:a8:d9:59:1b:6b:4a:4f:77:c8:6c:34:d1:ee:
                    1b:95:f5:0f:13:29:91:78:89:ef:71:4d:fd:a3:44:
                    06:68:43:b1:d7:c1:3e:ac:54:73:7c:4e:34:b1:3f:
                    c7:e1:65:31:15:60:2f:f7:50:b8:fb:7c:75:5d:70:
                    c2:71:21:8f:6b:92:68:e3:ff:3b:5a:27:94:6c:79:
                    44:eb:57:0f:f5:2e:da:4c:69:03:5c:f7:8b:e2:d8:
                    92:e4:13:7d:0e:cd:f3:de:b3:53:ff:68:0e:74:a5:
                    df:24:f6:0c:2b:02:c9:2d:2f:46:e3:0c:77:37:c3:
                    40:33:68:c8:d2:72:5e:e3:92:86:e3:eb:d0:a7:da:
                    b0:7c:56:97:d7:f8:89:0a:0e:e0:56:3a:f4:bf:d0:
                    e5:99:3c:26:4c:52:75:f5:f1:24:42:0b:d4:b1:c4:
                    82:3b:6e:83:ec:37:7a:63:2b:c9:20:76:8f:2f:54:
                    c6:a8:9e:1c:3e:a7:f1:85:84:54:eb:ce:3b:a9:69:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:78:E8:A0:DB:F7:93:C5:A3:BB:0E:26:21:3C:11:71:0A:FD:25:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e0004e-0022-302e-bc85-a4d7c749ba3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.62.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:51:12:86:2f:1c:ca:38:9a:e2:70:cb:23:3f:38:22:7f:0d:
         d5:94:bd:ae:8c:32:91:19:ad:d8:bd:14:81:de:a5:02:fb:42:
         58:49:23:f8:49:86:b6:f3:77:ef:b6:18:94:a8:55:c8:3e:2a:
         23:8c:6b:f4:12:f2:bf:09:ee:1c:8d:d1:70:e1:db:1c:3d:f4:
         5a:c0:0f:fd:f1:e9:56:9d:b6:72:cc:c8:97:3a:43:3c:80:a5:
         c3:ca:35:96:85:85:9a:47:53:d8:10:ea:1e:11:0b:48:55:18:
         59:3e:8b:d5:9c:00:8d:7e:e3:f1:96:ba:ea:5e:27:2e:d9:d5:
         6d:a6:7f:9f:7b:d4:66:ca:fd:a1:f3:c0:24:5c:70:43:1c:f8:
         88:d2:86:ed:fb:e6:60:e6:ec:d3:7e:f2:1b:76:b1:61:ef:f5:
         c0:4d:95:2f:af:31:e6:7f:69:95:c3:59:ed:2e:bf:96:bf:8f:
         fc:69:b7:8a:21:1f:eb:8d:d0:28:98:27:87:5c:00:c6:1d:be:
         65:0d:fb:ba:ff:57:5c:a4:d3:ce:2c:57:e8:b6:e6:35:e7:0e:
         06:46:ee:86:24:dc:f6:a8:1f:3a:c9:2e:d5:ce:7b:88:d0:8c:
         88:3b:57:03:04:97:9d:0a:0b:63:80:5d:2e:0a:8b:c6:c8:81:
         a9:29:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:29 2026 by rpki-client