Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/16806579-5d59-367c-b187-1b30472f5732.roa
File:                     16806579-5d59-367c-b187-1b30472f5732.roa (raw, json)
Hash identifier:          IvoSA34R1b6YNe6yAT0r1YXDJXygSH+7qZv+Hxydre8=
Subject key identifier:   A5:E7:B0:2C:73:01:62:4A:77:DF:90:F8:02:20:72:77:6B:38:C9:9E
Certificate issuer:       /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
Certificate serial:       010D0C9F4328584EA795120DAE7CE7AAC0BC9FE0
Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/16806579-5d59-367c-b187-1b30472f5732.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6079
IP address blocks:        68.69.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:12:0d:ae:7c:e7:aa:c0:bc:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8a1aafb3-53bb-49f7-a8c0-956dce862dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:81:20:5b:be:40:8e:2e:df:d4:e0:b0:3d:
                    80:f9:2f:9c:d9:b9:e3:8d:93:93:83:17:d8:7c:17:
                    96:a2:00:f9:c2:02:b7:73:23:71:80:72:3f:16:8d:
                    18:ee:b4:23:07:81:35:cc:c4:85:29:b3:ab:f6:f2:
                    98:44:b9:de:9c:15:08:8c:85:48:17:7a:c2:5f:e1:
                    04:5b:37:ab:63:8d:f8:52:66:4e:05:49:3b:5d:0e:
                    db:8f:04:21:5d:3a:78:69:ce:ae:d6:20:5e:81:1e:
                    3f:c8:24:95:b5:af:57:66:c0:d7:73:ee:22:b8:ad:
                    76:70:50:e6:78:dd:55:eb:0d:42:ef:3b:7d:ef:4d:
                    f1:4a:e0:d1:d6:9e:2c:1b:ff:42:eb:53:3e:7f:e8:
                    d8:f8:69:f6:5e:9e:71:01:a3:d8:bf:8b:24:cf:ca:
                    7b:ec:e3:f6:12:a3:73:21:43:2f:1f:da:12:e8:1d:
                    a9:bc:e9:15:bb:a2:50:92:a7:78:cf:ef:35:bc:ea:
                    2c:0e:74:61:a5:f2:14:14:29:22:b0:38:b0:49:86:
                    7d:4c:79:8e:cb:c2:a6:3c:5a:dc:50:3d:54:38:d1:
                    19:95:70:1e:af:43:84:7f:56:e0:e3:65:ba:75:66:
                    a5:d4:61:8b:83:e4:33:f6:26:45:ba:d9:93:8d:5c:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E7:B0:2C:73:01:62:4A:77:DF:90:F8:02:20:72:77:6B:38:C9:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/16806579-5d59-367c-b187-1b30472f5732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl

            X509v3 Authority Key Identifier:
                keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:a5:f6:de:9e:67:fb:d8:70:c7:02:24:77:83:a3:82:c0:57:
         9a:8d:cd:9f:a3:ef:7a:43:74:4d:ae:24:3e:55:af:05:5a:f3:
         fc:d9:23:5b:d3:cd:78:dc:da:a3:25:53:b3:ee:f0:2f:98:77:
         49:e0:a7:78:78:eb:47:16:f3:de:7e:ef:89:5f:2d:e7:be:d6:
         a9:ea:d6:40:b2:04:86:8e:c5:28:cd:1c:26:50:2b:e1:da:5c:
         72:79:f5:91:cc:08:59:f6:46:17:85:cf:02:96:40:6f:96:52:
         7c:a8:a0:f3:9b:ca:b3:37:b4:8c:ab:86:27:01:74:0f:e1:07:
         be:d1:16:9b:14:c9:04:bc:82:09:c9:3d:a6:e9:32:fd:bd:37:
         23:96:e9:43:49:a9:c2:6e:b7:3b:60:e2:e1:ac:4f:66:b4:2e:
         58:cb:c3:e9:fa:66:94:3b:50:8e:c4:9d:24:14:98:5c:5d:4e:
         42:12:3c:a1:9b:4d:97:84:e4:9b:a5:d3:22:35:1b:5c:39:13:
         d7:90:c7:b6:8d:b6:4b:bc:49:b8:41:03:d8:7c:30:5b:d3:94:
         a5:cc:a4:43:40:22:85:79:db:5f:4e:6a:e6:3d:b1:a2:cf:ad:
         64:2f:60:0e:ec:a5:46:5c:3f:65:0b:68:ab:e7:aa:65:a8:5b:
         4e:ab:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:22:46 2026 by rpki-client