Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e4df0a-5d1e-3a0c-a566-4dc83d5ef7be.roa
File:                     03e4df0a-5d1e-3a0c-a566-4dc83d5ef7be.roa (raw, json)
Hash identifier:          1juoPbcI65Pk5wi+RwsYb3wpD2peA25qCxNV0JO/R8c=
Subject key identifier:   A0:90:41:B4:CB:BD:1E:FF:D1:9C:39:DE:E9:B9:1F:F8:D1:ED:39:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78CBA7099C29AFD90842780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e4df0a-5d1e-3a0c-a566-4dc83d5ef7be.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22258
IP address blocks:        69.241.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:ba:70:99:c2:9a:fd:90:84:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=be44a1b7-2171-415d-84c8-b09681d3f911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:b9:20:b9:3a:ad:7e:62:a5:1e:05:53:07:
                    c5:0c:6d:dd:a7:7c:72:87:85:fa:a2:16:5b:1f:f3:
                    20:f4:ba:f8:04:2f:85:46:17:5e:28:31:cb:f6:32:
                    e0:f1:73:50:e3:f1:e6:a1:ea:72:a1:87:17:c9:69:
                    3f:36:d0:d3:93:c0:2f:a4:ee:d0:c5:6e:72:27:28:
                    3c:6d:a7:76:98:94:ec:b3:61:10:31:ac:25:0d:36:
                    d6:96:8d:c1:2f:d4:cc:5d:22:a0:66:53:97:6b:ca:
                    f9:f1:7f:4a:cb:c3:8b:78:b7:39:be:4c:56:d5:3f:
                    78:18:c9:e6:16:a1:bf:77:dc:3e:2e:95:3d:82:a9:
                    36:d1:f6:b1:09:b6:ad:5c:e7:0c:fd:d2:74:64:36:
                    ef:ec:95:68:37:af:df:f6:d5:f8:b0:32:30:07:5d:
                    41:96:1a:6c:62:c2:a1:3b:44:4f:69:84:c0:ef:2a:
                    9d:71:71:29:82:35:45:e3:87:bf:a7:d0:c1:52:02:
                    8c:aa:3b:0b:21:08:96:fa:16:c1:3b:2b:bb:7e:e9:
                    e3:a4:cb:22:78:f8:b5:2a:19:89:50:14:a8:8d:57:
                    e7:67:e2:e7:27:ac:07:1c:aa:73:62:bb:f1:5f:42:
                    c5:9f:f3:d3:85:db:5d:50:c4:54:c8:35:a7:86:07:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:90:41:B4:CB:BD:1E:FF:D1:9C:39:DE:E9:B9:1F:F8:D1:ED:39:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03e4df0a-5d1e-3a0c-a566-4dc83d5ef7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:04:68:bc:5b:e6:7f:bb:9d:40:76:19:9e:80:96:a3:06:31:
         e8:b1:b3:56:12:f4:f8:ad:e1:ab:4d:27:25:06:8e:4f:71:56:
         22:0a:de:10:23:db:63:5a:b2:33:72:73:47:ee:03:66:2a:7b:
         61:e2:31:b7:b4:82:5a:e1:3d:84:f8:ef:72:7b:f1:ab:80:5f:
         42:95:a1:a5:69:e6:e6:fa:3f:0f:f2:04:f9:2a:21:3f:45:5a:
         e8:0c:c6:7a:66:38:5a:1d:e8:0a:52:bc:97:07:01:0e:e4:7d:
         a2:57:1c:be:ab:dd:01:1a:cb:6c:9b:8f:c2:45:2d:c5:f2:28:
         d1:f3:63:5b:e8:0d:98:72:e2:c5:52:1a:1b:4a:34:a1:9f:c6:
         c7:e8:eb:a7:d8:92:0e:c5:55:bf:66:5b:17:d4:f6:71:50:8b:
         c4:e6:a2:06:9b:8d:17:48:8c:41:56:09:90:68:bf:db:57:99:
         ce:ba:dc:b4:18:36:c4:99:fc:71:f4:5e:d8:0a:af:4d:6d:4c:
         63:8d:6d:0f:3e:c7:3f:72:79:f6:e6:76:7c:9d:67:1e:95:4c:
         5b:dd:dc:d4:33:cd:f2:0a:85:6f:02:b7:e8:cb:7d:c4:56:1e:
         df:31:b3:c3:8b:3d:65:2a:dd:c8:c6:2b:76:9b:fc:f5:c9:2f:
         be:8c:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:14 2026 by rpki-client