Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/144dfb68-1da8-311f-8729-b802f3176095.roa
File:                     144dfb68-1da8-311f-8729-b802f3176095.roa (raw, json)
Hash identifier:          5omM5+ZOTCl3b0oSciHHvy1EojwyectZcF9c/RXpk9s=
Subject key identifier:   2C:4F:E8:35:F4:32:18:C7:4C:6E:4C:38:49:25:27:9F:4B:33:F5:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB229CD2A2AEAEA976D560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/144dfb68-1da8-311f-8729-b802f3176095.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        68.61.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:22:9c:d2:a2:ae:ae:a9:76:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=79a9cb75-ee56-43f8-957e-76954cedd2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0c:1d:9c:1a:af:56:77:bd:74:ca:13:d2:80:
                    07:92:42:7b:bc:e3:0e:5e:cf:47:43:37:3d:90:96:
                    24:bf:c6:26:17:53:2e:32:f6:09:02:ee:01:6e:de:
                    a3:60:8e:f8:23:09:bf:c7:05:a2:cc:35:e6:70:36:
                    89:35:84:79:28:e8:48:f8:b0:8c:43:7f:b7:d9:fc:
                    52:ae:91:e5:fa:fb:be:ef:02:8d:05:48:85:a1:fd:
                    80:73:81:03:6d:ee:2c:e3:2f:80:d6:55:4f:20:77:
                    e1:61:2c:66:2b:d2:bc:b7:98:fd:1b:79:62:71:9d:
                    d8:e5:cd:17:3b:09:bd:49:29:cf:77:a1:22:ec:34:
                    58:a2:f0:b7:06:2e:3f:3a:08:af:66:74:9a:69:3e:
                    10:0b:b3:39:a7:cc:4e:45:e9:d1:8d:c3:8a:d2:09:
                    4e:97:7e:ab:37:ee:b7:03:f9:84:28:1c:8b:6d:b4:
                    ba:ad:2b:64:05:6c:ee:26:9f:35:f9:6d:54:8c:b4:
                    5a:7e:87:93:1b:e2:a0:70:68:fd:30:0c:24:da:25:
                    1e:38:b9:07:44:32:08:38:f4:ad:66:35:c0:15:06:
                    e6:10:0c:e1:ba:c5:1f:f8:4c:e6:27:24:9d:fc:90:
                    6d:51:f8:d6:1e:ac:0b:15:52:35:8f:b5:77:af:49:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4F:E8:35:F4:32:18:C7:4C:6E:4C:38:49:25:27:9F:4B:33:F5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/144dfb68-1da8-311f-8729-b802f3176095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:af:8f:0d:a6:ee:c4:15:95:1e:e8:13:ae:ca:d9:c2:34:
         78:66:77:d7:1e:6c:27:95:70:a5:9e:5b:5f:cb:e9:eb:35:7f:
         d5:b9:5f:60:16:6c:fd:f0:c8:09:9e:9f:ae:e1:0a:14:70:e6:
         b8:c3:c0:7d:ef:66:ee:b2:1e:85:f9:12:0e:31:c5:09:0c:4b:
         5f:30:f1:b3:55:8d:df:b4:b3:c2:56:ec:dd:df:e5:37:e4:31:
         e9:e2:28:f4:51:06:12:15:f5:09:4b:5b:3d:b8:17:2c:41:53:
         a3:66:2e:c6:d6:82:03:6b:70:a6:e3:8d:80:e2:2e:ef:85:01:
         e4:5d:cb:91:42:45:88:b0:66:fb:72:22:75:ed:5a:c6:ef:43:
         d9:21:0c:bd:26:f5:ce:21:f4:17:00:8f:00:09:08:77:57:fe:
         59:65:27:62:c1:c5:0b:5a:85:82:5d:a2:c8:5f:e8:dd:24:06:
         36:9f:92:5f:20:58:5c:c7:79:12:17:36:b6:bb:a7:aa:23:c6:
         1f:5b:2c:6f:7a:d3:5e:c5:79:5a:69:a5:4e:e5:c3:0f:2b:13:
         a5:ca:52:48:e4:54:ad:bc:7b:d8:6b:2a:40:ed:6e:9b:90:78:
         4e:86:85:be:9f:e1:40:99:26:88:e1:b5:48:16:1b:90:96:83:
         80:86:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:13 2026 by rpki-client