Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daee571b-bd02-31d9-a708-92032e0b8f37.roa
File:                     daee571b-bd02-31d9-a708-92032e0b8f37.roa (raw, json)
Hash identifier:          8jPuswi5f4g8iFda7zEayuhKFoj0jtLaJvYuw1AQVG4=
Subject key identifier:   B4:26:43:24:AF:FE:ED:6B:B3:C6:F7:B8:2A:7B:F4:4E:72:8A:84:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF62AB6BEB8E2058112BFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daee571b-bd02-31d9-a708-92032e0b8f37.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        68.50.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:2a:b6:be:b8:e2:05:81:12:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2411742f-b3c4-4316-af18-d336d9b1b44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:16:a4:10:90:a9:4f:da:4e:bd:64:5f:0c:
                    e6:9b:33:af:aa:33:aa:60:99:78:6c:e7:a1:af:a4:
                    1f:b9:e0:df:44:69:e1:83:85:e4:10:3d:33:69:a2:
                    25:fd:4b:b3:4f:39:3b:7a:51:9d:8c:a6:37:83:a4:
                    f5:d4:42:32:26:b8:63:39:8b:f1:c6:3b:cb:07:3f:
                    c2:38:a8:ab:2d:74:dc:00:cf:44:fb:c0:f1:cf:be:
                    67:14:2b:e8:44:b8:0e:5b:1e:06:a9:bb:8c:c5:08:
                    ac:b4:75:aa:cf:3a:ac:e1:50:40:8f:6f:00:da:e5:
                    b2:b0:56:3d:53:38:af:78:f9:77:b7:94:b8:39:d1:
                    80:47:62:b0:08:de:86:76:d1:3c:ec:ac:fc:4c:e2:
                    8a:46:6f:69:7c:45:54:47:e4:99:bc:ca:5b:5a:a8:
                    82:13:28:af:83:85:7a:92:f1:19:79:7e:a8:4f:3d:
                    74:f8:89:cc:5f:87:56:99:12:8b:1b:47:04:9a:f5:
                    5d:72:5b:c0:9b:11:e2:77:5f:3e:64:cb:93:35:d3:
                    71:46:0f:85:7c:f0:3e:2d:ae:44:79:59:61:83:b0:
                    03:f6:6f:ce:4f:cd:f3:c8:15:cc:1a:8b:0f:1b:33:
                    d5:f0:4c:bd:6d:26:ce:f3:22:3c:11:ab:50:7b:7d:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:43:24:AF:FE:ED:6B:B3:C6:F7:B8:2A:7B:F4:4E:72:8A:84:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daee571b-bd02-31d9-a708-92032e0b8f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.50.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:9f:da:f7:15:8e:27:0e:58:83:3b:48:af:1f:88:e9:d8:9f:
         5e:57:3f:4d:dc:2f:31:6c:f1:73:80:41:0f:76:d7:16:f4:68:
         71:3a:7c:74:91:1a:3d:50:a9:f1:ba:75:99:8c:40:6f:5d:a1:
         e8:42:8d:13:bd:1d:ba:b4:94:39:86:8a:63:df:d1:be:76:06:
         d2:17:1e:c0:a2:17:45:d4:db:18:d5:3c:e7:cb:61:75:b5:33:
         31:3f:92:5d:1b:0e:3d:4b:24:4e:7e:34:bd:ed:28:38:4a:03:
         8c:41:e4:87:8e:66:a4:b2:6c:e6:8c:11:ef:68:d6:2a:3a:95:
         7e:7a:46:03:1e:2a:c3:71:ba:87:7c:51:35:81:9f:84:54:04:
         19:02:8e:b7:cf:06:f6:12:0e:38:4c:d4:c3:01:bd:d8:ff:b8:
         ef:a6:ea:6b:55:ac:ef:c2:39:06:87:63:a0:96:0f:66:8c:c4:
         d6:19:1a:69:a8:2c:90:1e:b6:ac:9e:08:17:78:bf:02:78:d7:
         12:55:17:49:b8:85:c9:86:28:a6:6d:3f:64:71:8d:06:a3:16:
         05:6f:c8:e2:1c:de:6b:8c:f7:85:2e:81:35:55:93:6d:0a:f1:
         56:1a:70:45:2a:cf:5a:ef:a4:32:a9:fe:8e:64:4b:5f:38:b4:
         32:3f:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:14:45 2026 by rpki-client