Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28614a10-e8e7-3ee2-bc85-4f5d40d129ad.roa
File:                     28614a10-e8e7-3ee2-bc85-4f5d40d129ad.roa (raw, json)
Hash identifier:          zqOsHhNyBv51gSZxXFSjwm076+gx2QjP83nJ4FLl1JE=
Subject key identifier:   4A:6A:D8:FC:14:93:04:09:D5:DB:B1:2B:FB:C8:60:0A:2B:64:0C:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58219872AD23748604E780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28614a10-e8e7-3ee2-bc85-4f5d40d129ad.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        68.57.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:21:98:72:ad:23:74:86:04:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=cc92ad44-dc82-46ce-a8ef-4ace23711882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:e8:64:06:33:7b:ab:c8:38:fd:96:ec:49:
                    cb:d8:59:ea:63:0c:63:bf:d9:ac:7c:4e:53:03:e4:
                    8d:cf:3e:8b:07:bb:a2:e9:47:a2:2e:a5:c1:ae:18:
                    27:b4:aa:82:8a:1c:ee:f2:8e:ad:f8:2e:24:ad:04:
                    5c:d3:9f:d6:fc:84:1b:c1:81:ab:6a:fc:ff:62:11:
                    45:6d:5f:13:fd:4e:35:7e:f6:0e:73:7c:94:35:dd:
                    de:94:7e:d9:d2:07:fa:0b:94:ac:9d:24:cb:05:16:
                    53:44:7d:7d:37:32:63:4b:e5:93:f4:60:11:49:13:
                    be:c8:0b:1f:78:5c:84:16:a6:5b:39:91:cd:c4:a2:
                    16:ba:33:3b:aa:d0:05:5a:54:7e:ad:ad:d1:24:3c:
                    d5:7a:7a:80:bf:ad:74:2c:37:f8:af:f1:e8:ee:b9:
                    18:1a:27:57:42:8a:39:fd:44:80:5a:8f:4a:d6:47:
                    5b:03:30:41:7c:6e:2c:15:f1:49:5d:fc:3d:bd:99:
                    78:df:32:f4:44:ae:43:a6:f2:fc:a3:4f:0d:de:15:
                    56:ff:bc:0d:94:f5:43:6c:1d:b5:ee:a0:50:7e:64:
                    58:3d:c4:b6:a5:8e:d6:e1:7f:f1:0e:35:f7:01:78:
                    df:bc:a2:b7:48:99:28:be:64:e2:49:10:fa:ee:52:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:D8:FC:14:93:04:09:D5:DB:B1:2B:FB:C8:60:0A:2B:64:0C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28614a10-e8e7-3ee2-bc85-4f5d40d129ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.57.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:89:98:4e:d1:1c:3a:05:36:43:43:d7:56:6c:4b:94:62:ce:
         cd:30:92:eb:0d:57:f8:a7:45:fb:a4:2b:b5:02:99:04:0a:18:
         0a:97:0c:b1:aa:e1:67:80:c1:1a:ac:36:6d:c3:3b:79:a4:64:
         e6:8e:4a:4b:6a:d1:ef:94:c9:c3:c1:33:5c:52:50:c0:15:48:
         d6:14:2d:7a:60:d7:a6:dc:8b:60:87:f5:b9:1e:a1:2e:1c:35:
         24:72:2e:ca:b3:c0:f7:9f:90:92:77:04:ff:fc:4f:f2:56:fc:
         6c:24:5e:fc:bd:0c:82:4b:52:63:09:59:f2:ac:bb:f3:b5:8b:
         e7:1e:df:ab:90:49:3c:9f:95:f9:ea:3a:56:8c:2d:93:51:9f:
         05:86:8c:bf:d6:e0:ba:04:2e:3e:48:e9:ef:c3:29:96:16:3d:
         19:7e:6d:3b:ad:db:69:55:9d:10:b8:e4:cf:33:57:36:dc:84:
         8b:08:82:4b:5e:b8:22:71:9b:71:40:ef:b8:53:5a:47:4b:4c:
         a1:cf:35:c3:e9:2e:c0:96:80:42:ca:77:9a:73:72:e4:08:c7:
         ec:0f:40:4d:dd:c5:fa:41:30:aa:5e:5a:f3:41:6b:26:20:19:
         43:9a:08:f7:25:5c:ff:e1:9c:98:e0:07:3b:12:7c:75:d6:85:
         8c:2b:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:03 2026 by rpki-client