Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d37e5a5-4870-37cd-8677-006080cdf776.roa
File:                     0d37e5a5-4870-37cd-8677-006080cdf776.roa (raw, json)
Hash identifier:          7shTpEfNVx+YNX150sBi7Mt/Ujnlkb55tXN9mvOrCcg=
Subject key identifier:   F6:D5:57:EF:E1:C0:DF:00:9A:AE:5C:A4:AD:8F:06:F9:19:4B:57:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE863FB00824259EB613BE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d37e5a5-4870-37cd-8677-006080cdf776.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33660
IP address blocks:        69.139.128.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:3f:b0:08:24:25:9e:b6:13:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=0818aa5e-2c5f-4ace-afd3-3c26820bb341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:d7:85:b4:c5:33:c6:8e:17:70:f8:81:8c:
                    90:db:6f:24:55:43:a0:aa:77:99:9f:5c:c6:fa:34:
                    13:24:05:95:d9:56:fd:e2:c2:13:78:79:f2:3b:23:
                    0f:f2:38:6d:63:a1:d6:7d:d6:06:cc:6a:90:ff:0b:
                    61:c3:34:9c:80:e1:cc:f7:e8:2b:30:32:ef:8c:5a:
                    3d:43:02:29:fd:a1:19:8c:e8:f6:92:14:59:e4:06:
                    1a:d2:33:a5:2a:8f:9a:05:a0:60:d2:07:48:eb:b0:
                    2c:70:12:f3:14:a0:49:f3:9f:a3:69:17:7b:bb:ed:
                    90:c9:5f:22:81:97:d4:1d:c0:3a:cd:15:9a:e6:a5:
                    cb:03:f5:25:9e:51:b1:e9:d3:bf:29:d3:32:e1:20:
                    1e:6d:dc:25:f8:a1:84:fc:3c:5f:4e:9e:ee:ef:3e:
                    c0:16:0c:ce:2e:ac:34:90:06:77:17:05:69:4e:d4:
                    c7:0e:0a:81:98:ea:36:e9:6d:9f:c9:af:26:3e:c9:
                    b5:ca:b6:bc:22:3f:0c:44:c5:98:c9:f4:29:56:fa:
                    64:63:83:a4:6e:90:61:a9:bb:4f:73:cf:a6:51:8e:
                    45:af:52:d1:fc:fd:4f:56:08:72:46:64:12:4d:fc:
                    6b:1c:80:0e:f5:a9:a5:61:f3:d0:1e:fa:aa:af:90:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:57:EF:E1:C0:DF:00:9A:AE:5C:A4:AD:8F:06:F9:19:4B:57:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d37e5a5-4870-37cd-8677-006080cdf776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.128.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:82:50:7d:2d:01:57:aa:7a:02:bb:5b:7d:37:7f:ea:d4:fc:
         36:71:25:5f:ef:de:e7:40:da:8c:52:5d:61:5d:df:e8:72:1c:
         50:35:6a:bb:de:26:0b:4a:51:19:9b:d9:78:2c:16:ff:d4:3d:
         1a:de:9b:2b:79:b3:81:78:45:ff:48:0e:ff:38:3c:a3:21:39:
         c5:eb:cc:1b:69:81:8b:44:15:2d:ae:6d:77:c3:64:07:60:20:
         3a:99:dc:85:ca:75:dd:69:c8:4f:ed:ae:5e:74:7f:dd:91:24:
         9c:09:c5:7c:85:ac:e5:9f:c8:53:af:fe:cd:98:0e:c8:43:ba:
         16:ed:1e:77:4b:4b:2c:f8:5f:84:81:1d:a6:51:da:b0:2e:c2:
         7c:41:1f:91:4c:92:a6:c2:b1:88:03:c6:31:60:be:c8:f9:95:
         14:d2:73:a8:c8:a2:b5:73:fd:88:46:fb:1c:a5:94:43:ff:a8:
         c5:d6:55:cf:dd:05:bd:50:91:cf:8a:b5:0d:11:2f:00:c4:cb:
         f3:6e:b2:68:74:65:0d:12:5a:34:91:66:49:d5:ad:cf:e9:25:
         d6:05:6f:a4:95:81:66:fb:6e:24:3b:f5:91:57:43:e4:ad:ca:
         4f:7f:b1:24:9b:00:91:ad:d8:e4:19:a0:7d:f4:d8:ba:25:9b:
         91:2c:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:16 2026 by rpki-client