Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01adba4e-fbea-3643-8408-e0198afca638.roa
File:                     01adba4e-fbea-3643-8408-e0198afca638.roa (raw, json)
Hash identifier:          AA3ZT4JiaSHbYfA8/2o9BaokZ1QALIg4d4q2599+tHk=
Subject key identifier:   3A:85:B0:E0:D6:3A:17:79:09:A0:8B:FD:B9:2B:0A:FF:13:1E:2A:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC3BF46A141DF917FE5780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01adba4e-fbea-3643-8408-e0198afca638.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        68.36.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:3b:f4:6a:14:1d:f9:17:fe:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=d633c49e-f397-4972-80f4-7aa1ad895e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:59:86:3e:24:de:ff:05:68:f5:ba:25:63:
                    f9:aa:4b:2c:9b:78:2d:64:64:4e:c1:ba:5a:60:b8:
                    c2:e7:04:66:c5:7e:ba:2d:c0:0b:b7:0c:4c:86:55:
                    52:dd:30:ef:7c:dd:96:27:d0:93:65:7e:55:85:ae:
                    a8:33:b2:90:38:5b:5f:0b:a3:69:c4:77:95:e0:ae:
                    1c:f8:8e:3c:89:51:8e:c9:99:ae:65:6b:43:19:90:
                    c5:52:72:80:f9:6d:17:67:fe:bf:c6:81:59:c1:af:
                    59:1e:eb:28:b8:a2:b2:80:da:e0:52:65:22:7d:7b:
                    04:97:f7:a9:83:f3:66:36:d2:18:85:85:de:d8:d2:
                    53:ff:a3:61:b8:7d:31:29:0e:5a:bc:c1:c5:9e:c2:
                    52:81:9d:7c:3f:cc:ff:fe:2e:32:c5:ca:90:f7:22:
                    8c:e5:0b:9a:b9:7d:16:c5:6f:06:7d:18:04:36:29:
                    e7:64:77:3c:60:eb:1f:70:39:57:16:2d:9c:f7:ce:
                    f6:e6:18:1c:d0:45:00:d8:ad:67:c4:ed:44:16:2d:
                    ba:46:1d:ad:48:67:b7:48:e9:d0:f5:62:c9:cd:b1:
                    d3:25:f6:47:3d:74:10:68:5c:c0:da:34:cc:a8:bc:
                    89:38:0e:ae:cb:42:0e:e7:89:a1:10:31:2f:c0:cb:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:85:B0:E0:D6:3A:17:79:09:A0:8B:FD:B9:2B:0A:FF:13:1E:2A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01adba4e-fbea-3643-8408-e0198afca638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:19:13:6c:ba:15:7c:dd:ed:7f:70:c8:ca:96:4b:af:cc:
         75:99:dd:4a:67:84:96:e2:16:94:7c:e5:f1:a1:a0:31:99:81:
         76:b4:33:7e:4b:30:9e:af:61:14:40:8d:73:bf:b3:84:dc:95:
         16:1c:29:8e:f1:e5:0d:64:29:fa:f8:6c:8b:2f:a0:10:1d:c2:
         ab:fb:8c:cc:c7:8a:82:ea:77:d6:b1:3f:5d:4f:cc:5d:74:c9:
         80:32:25:6d:95:fa:9d:e2:bc:6b:1f:13:6b:53:2b:06:40:df:
         8a:30:3b:c0:8e:bc:3c:07:f0:7d:31:97:d3:8f:e9:ae:9e:a0:
         9f:b8:9d:41:20:78:8d:1a:ff:91:a7:a0:00:19:ee:e9:a2:84:
         9c:c0:0b:a6:6a:a9:f0:39:ae:cf:94:ea:d6:ac:eb:e5:47:1b:
         65:3e:2d:3e:80:37:2f:c8:9c:4e:d1:d7:82:f9:24:f6:5c:b4:
         6f:a7:77:1e:2d:eb:51:e0:2f:ce:f1:92:1c:02:aa:3b:13:0a:
         97:10:07:cc:ab:8a:b1:22:60:aa:5c:e6:02:e2:77:d1:76:56:
         d9:6f:2b:26:56:ab:88:65:8d:63:4a:91:48:62:2f:99:cf:cb:
         72:03:1e:a3:2a:5e:e3:3c:1c:5b:7e:3c:03:f4:40:5f:0e:4f:
         3e:52:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:15 2026 by rpki-client