Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05c6b4ed-6e0a-3cc2-bd93-77b9182d1b7c.roa
File:                     05c6b4ed-6e0a-3cc2-bd93-77b9182d1b7c.roa (raw, json)
Hash identifier:          Q3eIS6RxkfUbStbetofvUMxMLmrg06RrfZZH1Fk0z7o=
Subject key identifier:   62:BB:E1:23:40:B1:2D:3A:F5:3B:FC:2A:08:A0:CC:77:54:20:95:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE93D6CBDFC11FD03102300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05c6b4ed-6e0a-3cc2-bd93-77b9182d1b7c.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        68.57.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:3d:6c:bd:fc:11:fd:03:10:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=437a099d-e836-4f5c-aae5-a79c378e6e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:45:fa:55:1c:3f:85:e3:35:93:37:be:a3:
                    65:63:6c:85:27:7a:99:54:02:7c:96:e9:62:8a:40:
                    60:f5:d8:a1:4c:52:f2:01:b0:3c:ac:88:c5:7e:4e:
                    69:0c:be:47:15:e5:33:e5:11:c4:0f:af:3a:2e:d5:
                    0c:66:ca:5e:7c:b0:dd:ed:04:cb:6c:aa:c8:44:70:
                    a8:7e:cd:2e:c2:57:b8:24:67:69:d5:91:d3:44:e3:
                    fd:5b:b7:7e:1d:24:f9:00:04:1f:80:24:cd:66:44:
                    b7:bf:b5:5f:c0:c5:d3:f7:9b:3a:b0:13:6b:c8:ea:
                    6b:0e:c2:73:4e:93:fb:af:75:71:95:63:42:48:9f:
                    0c:00:58:07:e0:e0:b4:94:ab:e1:ee:dc:a9:30:40:
                    30:77:19:f8:28:d2:7a:08:a4:84:dc:5a:d8:21:40:
                    61:89:17:93:34:01:98:b6:c9:f4:e6:b6:40:9e:4a:
                    11:b4:15:69:e7:c3:5d:a6:fa:79:bb:8b:3c:ed:b8:
                    66:20:69:07:36:88:60:da:96:7d:4b:72:59:c8:a1:
                    52:82:dd:c9:c7:10:dd:31:84:d8:f9:65:23:6a:b4:
                    8d:45:f5:10:98:e6:cc:d4:6f:32:62:d4:86:e1:28:
                    d8:ef:3d:3c:c8:57:42:53:c8:ad:23:41:88:37:a9:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BB:E1:23:40:B1:2D:3A:F5:3B:FC:2A:08:A0:CC:77:54:20:95:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05c6b4ed-6e0a-3cc2-bd93-77b9182d1b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.57.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:d7:08:d3:c4:af:70:ad:54:77:51:42:b9:f7:94:8b:96:
         ff:40:ed:66:04:00:bb:8d:05:f7:ee:fa:bb:50:d2:34:24:ce:
         fc:9c:a5:f6:f6:c2:29:bf:d3:07:78:37:b5:e6:ee:0f:e1:36:
         bd:db:92:67:84:15:5c:1c:40:c5:87:93:16:1d:b4:1b:a8:bc:
         b6:c4:34:62:36:49:f8:2a:8e:55:0c:f7:74:29:38:b2:3c:37:
         ee:69:f3:e7:06:09:1d:b6:2b:4d:cc:13:74:7a:02:17:ad:10:
         0a:b4:85:ca:65:0a:63:21:29:0b:a0:22:a4:bf:25:7b:e5:b9:
         95:98:06:e1:4c:f5:44:e8:0f:62:0f:b9:ba:11:98:6b:09:37:
         0e:d3:c7:73:d3:18:fb:ed:3a:59:d3:7d:1d:24:f8:9b:65:a6:
         bd:a2:68:8e:05:75:f3:0b:4e:da:99:35:67:47:cb:97:34:5f:
         ca:79:fa:c2:06:9e:91:57:d1:7a:ec:e1:b7:11:cc:c4:c1:dc:
         2e:21:5a:21:80:df:25:5a:29:53:7b:60:a1:10:8e:6c:f3:23:
         a0:b8:61:74:24:5c:15:d9:bd:61:2d:48:38:5b:f7:7d:19:d9:
         b0:a4:cd:52:28:9b:df:f2:d4:b9:56:c4:80:87:f2:ba:8e:0b:
         67:4e:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:39:18 2026 by rpki-client