Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e42cb3a-bd29-33b2-8746-b3b5c0e36f60.roa
File:                     1e42cb3a-bd29-33b2-8746-b3b5c0e36f60.roa (raw, json)
Hash identifier:          CwbUDnCciccEIh+lSC7APQb0F0tf5uklztYqa7CAblo=
Subject key identifier:   A5:6C:FE:B8:E8:BE:FE:B7:46:1E:42:E2:3C:57:24:14:FF:F9:C2:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5BB981CB8D4938F92F7B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e42cb3a-bd29-33b2-8746-b3b5c0e36f60.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        69.243.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:b9:81:cb:8d:49:38:f9:2f:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a5240217-77ef-4f55-bbce-4c73371e26e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:df:0e:56:6b:17:a6:9e:31:18:1f:34:70:
                    88:c6:40:a4:e8:ae:89:9f:8e:c5:2e:ec:30:44:72:
                    c4:5e:0f:4f:7f:0c:6c:92:46:c9:9a:ec:0a:05:6b:
                    33:f8:d8:f5:20:53:c4:5a:75:23:d6:16:97:0f:ac:
                    92:98:6e:70:e3:ab:5e:63:dd:f6:9b:8f:44:1a:ab:
                    05:66:3c:30:1e:e1:35:00:63:13:5e:b0:82:a1:18:
                    cf:c8:63:54:38:37:24:28:a2:9a:a6:4f:63:c4:82:
                    31:c5:dd:be:b2:1f:01:3d:a0:a6:98:d6:d2:d1:d9:
                    43:67:35:de:d5:1f:bf:6e:d5:c5:e0:14:68:81:75:
                    ee:3f:3b:20:53:a1:ef:ed:19:8e:f1:42:a3:7a:67:
                    92:f3:07:e0:02:ec:1b:4f:e0:08:fe:fb:e3:b6:0d:
                    8c:27:b5:40:a5:77:cc:19:0e:9e:7c:a6:ce:91:b9:
                    d4:86:0c:32:ca:e5:b1:b0:4d:8d:0c:d5:e9:c8:64:
                    f9:b2:09:4a:81:d5:a0:02:d1:3e:65:67:6b:c1:0a:
                    48:da:cc:13:16:6e:5f:32:11:32:aa:68:45:cc:ac:
                    6d:aa:74:79:8b:cd:bc:ef:08:da:36:7a:d7:30:32:
                    05:ec:d2:d1:71:78:b4:71:8d:3f:62:1f:1d:b5:a9:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6C:FE:B8:E8:BE:FE:B7:46:1E:42:E2:3C:57:24:14:FF:F9:C2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e42cb3a-bd29-33b2-8746-b3b5c0e36f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.243.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e3:78:02:3a:12:02:c6:33:9b:a7:8b:68:89:b6:0b:ed:1f:
         c2:73:20:1e:b3:3d:2b:3f:9a:50:18:84:83:c8:0a:98:00:6e:
         9a:33:92:49:e3:11:ec:10:bb:35:2c:fc:09:15:e4:53:45:12:
         9e:c1:8e:8b:ae:67:73:a6:32:aa:a2:45:62:80:44:b5:22:66:
         fb:38:c2:45:e1:df:98:ef:88:22:b4:96:68:e8:c0:60:4c:37:
         ac:67:bd:ef:ff:db:c3:ad:ae:dd:a6:4d:4d:6f:3d:47:49:15:
         f9:dd:04:56:d8:d5:94:d8:48:d5:70:66:e0:07:5b:77:50:99:
         d9:69:5e:36:75:25:16:af:7b:bb:56:65:1d:20:57:98:70:88:
         b3:85:d2:ce:c5:3b:42:70:56:ba:c2:54:03:b5:29:42:b3:52:
         32:38:67:e7:b3:62:41:8f:a1:e8:70:98:d8:36:d0:14:eb:74:
         17:d5:97:5b:1b:7d:a7:85:1b:a9:56:ee:e1:60:1e:f9:42:4a:
         36:45:8b:94:8b:c2:8b:f5:cd:3a:09:3d:d5:4a:e9:95:4f:1d:
         e7:f5:3c:0a:a0:7b:e6:c7:c8:ab:ae:8f:39:ce:29:ca:46:27:
         a5:80:a4:7f:27:db:93:33:39:30:23:ef:b9:50:80:c1:f8:02:
         56:6c:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:41:23 2026 by rpki-client