Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1af4f4e-1f38-3739-be8e-77bcfe9bb6cc.roa
File:                     f1af4f4e-1f38-3739-be8e-77bcfe9bb6cc.roa (raw, json)
Hash identifier:          W8SsWXUtrB2TiGOwz2xGlHearxMyU0sgr54P8CTDDOI=
Subject key identifier:   59:72:BD:2A:4F:0F:EA:D7:78:D9:EC:45:9D:BC:BD:DF:80:12:24:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BE3A093E5C14C63B15580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1af4f4e-1f38-3739-be8e-77bcfe9bb6cc.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        68.82.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:e3:a0:93:e5:c1:4c:63:b1:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=539237f2-835c-4640-9293-69e703d5e457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:34:84:72:b4:dc:37:bd:64:07:9d:0d:38:
                    35:bf:c1:56:d0:04:54:6c:ad:68:64:83:23:6b:ab:
                    4b:c8:f7:f2:4e:77:6b:96:14:b2:c5:6e:9e:8f:c8:
                    81:7e:b6:82:8d:be:f8:f8:42:de:f1:f0:4d:3c:96:
                    67:d7:d5:3a:09:6d:db:c2:e4:ce:bd:28:53:b6:f8:
                    13:39:e3:c8:3e:87:35:e0:c4:a0:1b:2a:32:fc:a2:
                    f3:42:f9:5d:f7:2e:16:7a:0a:91:93:d7:71:32:a1:
                    3a:e5:5b:0f:ad:a3:e6:6c:8e:ee:23:6e:9f:86:81:
                    3a:2b:c3:ba:bd:9f:c0:c6:4d:ec:01:df:0e:47:1d:
                    3d:65:be:a7:50:ef:b0:3c:dd:db:4d:66:ae:b5:34:
                    ea:da:74:d3:d6:41:b5:3d:09:53:39:e8:ac:e7:c0:
                    09:ab:57:d7:7d:0e:01:21:ec:3e:31:e0:25:2f:b1:
                    37:ba:9c:b4:84:7f:a7:f4:d1:f4:f1:3c:6b:6d:45:
                    52:5d:2c:02:51:35:5b:68:6f:0a:ef:51:ab:55:1d:
                    d9:a1:c1:c3:79:a7:b0:d5:2d:32:f8:58:22:d1:63:
                    56:66:0b:19:18:cb:1b:44:36:47:59:56:fb:2b:00:
                    f6:5f:5e:ee:b3:e2:ba:a9:2d:ef:d7:bf:14:6a:89:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:72:BD:2A:4F:0F:EA:D7:78:D9:EC:45:9D:BC:BD:DF:80:12:24:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1af4f4e-1f38-3739-be8e-77bcfe9bb6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.82.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:9a:d0:fb:b2:fb:7b:68:ad:cb:75:4a:a4:4f:70:c5:0f:
         0c:83:03:d9:5b:11:37:b9:8b:66:be:14:00:e8:8e:43:eb:63:
         bf:75:2f:be:d7:ca:4d:d3:b0:c9:32:5e:f5:6e:dc:3e:8b:ef:
         d7:ec:b0:c5:98:cb:17:dd:97:25:74:74:79:5a:63:d3:e6:ce:
         5c:e8:4c:30:fc:bf:05:46:6e:69:b3:bd:07:1b:ac:b2:55:5e:
         be:a8:4c:05:9f:39:44:47:45:40:62:1f:4f:c7:c6:cb:4e:b7:
         03:bd:80:72:2e:c6:ce:aa:eb:b5:90:74:74:2b:22:a6:0d:f3:
         b2:bd:16:b9:66:47:01:8f:4b:04:bb:99:77:a1:99:88:ff:d2:
         7d:84:33:ed:cd:0f:7d:b0:60:ab:b4:e7:d0:96:04:38:12:c3:
         60:81:20:d0:02:fd:bf:68:f2:be:d8:0b:03:89:2c:55:29:a3:
         7a:6a:58:20:57:e5:8b:20:a8:e4:a6:a5:35:11:2a:b8:f1:a5:
         62:79:69:02:e9:73:9a:49:05:21:65:7b:35:fa:fd:1d:d5:51:
         95:41:d0:17:ff:04:9c:3c:37:8c:e5:c6:4c:19:c9:41:4f:55:
         5a:07:d3:8e:e1:7a:7d:16:57:bf:4b:15:14:d0:9e:a7:dc:e7:
         b6:62:fb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:39:11 2026 by rpki-client