Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898b342-99d9-38c5-9336-1fe74e8caafa.roa
File:                     2898b342-99d9-38c5-9336-1fe74e8caafa.roa (raw, json)
Hash identifier:          lzEMjVdFMHNaui+VwC4QA1KdkNH5hGvNiVK1HtB+Glc=
Subject key identifier:   44:63:4D:EF:85:50:22:AB:17:DA:5E:F8:2D:F2:E3:F2:9A:54:04:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78BC3F6386CDF709FC558C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898b342-99d9-38c5-9336-1fe74e8caafa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        68.53.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:c3:f6:38:6c:df:70:9f:c5:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c4d5f67-bb42-45fa-9ebd-0c11f4298726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:be:e7:92:4e:df:76:19:b0:9b:9f:59:95:
                    af:09:3d:d0:cb:ae:46:37:81:3c:21:01:2f:c3:ea:
                    ed:04:e2:b1:b6:3b:a1:27:ae:f6:7d:90:ee:48:a9:
                    f4:39:20:35:7b:6a:98:28:da:86:4d:e2:a1:c1:0a:
                    f2:a7:cf:f6:8d:b7:0e:c7:af:96:d9:6b:69:ed:90:
                    67:82:dc:06:23:f0:35:8e:00:f1:4f:40:14:43:88:
                    e9:be:4b:99:58:d5:58:08:27:40:04:2e:fe:66:96:
                    98:cd:b8:79:a9:03:ce:41:a1:c3:9b:79:e9:51:28:
                    a0:60:20:58:32:f3:d8:71:74:1a:1f:16:1a:36:0a:
                    dd:09:09:f4:d8:b2:c8:d6:b7:d1:76:f7:20:95:40:
                    c2:6f:d0:8e:ee:2b:2b:05:d0:35:ab:cf:72:64:e1:
                    fc:52:03:54:53:22:f7:b1:16:e9:6d:e6:42:e3:9f:
                    09:e1:8b:65:2e:06:58:2d:d2:6f:71:bc:76:c7:0a:
                    79:ae:f2:77:26:c7:62:93:bb:4d:c9:37:42:d5:8d:
                    06:62:1c:60:5f:66:6d:2f:09:5c:36:d5:aa:d6:e6:
                    94:bd:b8:df:83:69:a4:a8:59:45:6f:c7:27:9c:36:
                    68:be:3f:2b:93:69:b5:fb:92:c4:22:c8:6a:ba:5c:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:63:4D:EF:85:50:22:AB:17:DA:5E:F8:2D:F2:E3:F2:9A:54:04:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898b342-99d9-38c5-9336-1fe74e8caafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:78:34:da:d5:5d:22:3b:5a:cf:63:95:dd:3f:b9:3d:d3:
         ca:86:d1:6e:c8:1d:59:76:26:04:3e:25:c6:7e:13:9f:eb:08:
         6b:3e:b4:4e:59:24:40:99:4f:21:d4:f7:ae:78:ed:d0:e4:13:
         e0:08:4c:59:2f:f2:4d:e2:8f:da:90:d2:00:a2:80:94:96:cc:
         ab:6f:c9:80:ca:af:20:19:71:50:08:79:04:99:92:64:86:02:
         99:31:59:73:4f:5e:19:0f:d2:4c:f1:f2:5e:b1:4a:ed:dc:5b:
         75:c0:ad:b1:6f:c4:aa:77:3b:1d:08:e5:32:4d:de:1c:8f:81:
         b9:a5:22:ee:76:6c:fd:25:b3:b0:f1:a6:dc:83:91:3f:23:eb:
         3b:14:dc:b2:61:ee:95:43:24:dd:e0:09:85:2b:25:da:12:eb:
         70:40:34:00:18:8e:4b:ae:32:26:1f:18:62:4b:45:d2:ed:03:
         d0:bc:fa:59:15:71:ed:e9:78:e6:96:0b:be:f6:f9:6b:55:00:
         0f:c5:ef:51:14:bb:27:3d:cb:49:ce:95:ee:53:26:f7:88:75:
         6c:ab:24:fe:4f:ea:1d:a0:3e:7b:3a:1f:14:34:31:90:d6:7b:
         4d:d9:2a:15:d2:aa:62:6e:69:45:c0:c3:15:a7:da:9e:d6:f1:
         32:f9:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:26 2026 by rpki-client