Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0aa4a42-2a17-335c-8806-7b066b8ad650.roa
File:                     e0aa4a42-2a17-335c-8806-7b066b8ad650.roa (raw, json)
Hash identifier:          IzsbPePvq3Rt0DfMrmYGJJM3450CoxqhhBibfkqd2BU=
Subject key identifier:   C8:1D:A3:AD:E2:62:8E:01:93:97:83:A7:1C:17:54:4E:71:88:AF:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E69887880A16CB74E8B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0aa4a42-2a17-335c-8806-7b066b8ad650.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        68.43.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:69:88:78:80:a1:6c:b7:4e:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=ed7892ad-2798-49dc-80dc-7066f3fc0cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:8d:6f:61:62:45:2d:e1:b8:3b:30:7b:de:
                    a9:24:33:d4:19:5c:39:3b:37:0a:aa:30:88:92:12:
                    70:27:88:e8:bc:eb:91:d2:d6:e7:f2:61:4d:43:8a:
                    9c:c9:26:bd:bb:da:04:cb:77:96:de:9d:37:20:ee:
                    7c:24:1a:c4:0b:1c:ff:9b:43:51:36:c0:68:12:4e:
                    cc:fe:ba:da:bb:a9:d2:dd:c3:bf:44:74:ec:c3:54:
                    95:25:00:b7:a2:ba:ea:c3:8c:08:5a:6f:1a:31:6b:
                    b2:41:04:b5:8d:2a:89:8e:73:0d:63:a0:ec:9f:ac:
                    29:35:14:ec:6c:0c:7d:fd:72:6b:e2:55:45:37:47:
                    6c:65:db:28:91:0f:44:ee:d0:9f:23:03:c6:63:ff:
                    0a:d0:df:3e:1e:eb:d2:8f:1c:a3:38:bb:25:6b:ca:
                    8a:02:c2:b4:7e:12:fe:d0:c1:55:4a:2d:bf:5c:d6:
                    e2:4d:6b:91:8e:bd:a7:b7:14:e5:95:76:f5:08:6c:
                    10:e3:fd:13:94:c4:03:71:8c:88:3e:b0:6a:4f:76:
                    e4:85:85:ff:3a:9d:73:ec:3e:9f:c2:0d:06:d4:9a:
                    d9:a2:e8:88:e7:b7:c7:42:d1:a3:c9:63:b1:fe:69:
                    32:3f:89:0c:b4:a4:82:e5:60:a9:74:60:7a:00:a8:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1D:A3:AD:E2:62:8E:01:93:97:83:A7:1C:17:54:4E:71:88:AF:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0aa4a42-2a17-335c-8806-7b066b8ad650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b7:0f:60:ee:8c:f2:d2:5a:61:76:7f:e0:f7:14:f6:98:d4:
         2e:b1:31:6a:d1:93:7e:ce:78:65:3c:b3:ab:2e:7d:de:73:7c:
         d5:3e:32:c9:a7:d1:ed:0d:6b:00:cf:0a:5d:0a:14:f5:94:6d:
         f8:7e:0d:60:a2:92:cd:28:9d:73:88:2a:d8:d1:5a:ba:2d:31:
         8c:54:8a:37:b3:b1:00:33:45:66:f1:90:9e:7f:73:32:b2:fa:
         fc:ad:8e:84:bd:99:ee:42:5b:b9:22:10:55:82:38:b5:74:bd:
         e0:dc:41:f8:5b:84:07:75:d5:31:7f:80:ca:f5:45:54:46:87:
         84:a8:fb:16:92:b0:25:66:21:94:4e:1d:1a:90:f6:0b:f4:ed:
         36:84:51:7d:7e:29:08:4c:44:20:81:9c:45:cf:81:31:e5:57:
         f5:ed:ec:b2:6a:a1:a3:4c:a5:0b:d8:7c:85:db:ac:37:74:2e:
         36:c4:02:fb:97:cf:03:00:ee:c6:68:c6:b1:a4:24:f0:f7:da:
         05:b6:2f:47:bf:a8:ff:f3:c3:10:ac:ef:93:9e:a7:64:bd:57:
         7a:9b:a3:96:ce:1b:7d:0f:9e:09:4a:b0:b8:6a:0e:70:72:bb:
         25:70:03:3c:26:e6:94:91:ac:17:4a:ea:ea:bc:14:6e:73:16:
         0c:ba:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:16:08 2026 by rpki-client