Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7746ce-d2bc-35d6-a376-eda96c1237ac.roa
File:                     2c7746ce-d2bc-35d6-a376-eda96c1237ac.roa (raw, json)
Hash identifier:          cGGTAd/v7a3quKwF6fmfu5Klvfha8MSlxvYqnHPVTsE=
Subject key identifier:   5B:85:E9:22:E3:11:49:38:7E:5B:97:DA:53:A7:6E:78:08:88:5A:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE576B3176DBA7A813EB9440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7746ce-d2bc-35d6-a376-eda96c1237ac.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        69.248.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:6b:31:76:db:a7:a8:13:eb:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=393422af-db64-4a85-90e2-02b1ab32d784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:fd:a4:e4:55:dd:7d:b6:f2:6d:23:be:b9:
                    92:3f:9a:68:de:17:ce:c1:a7:94:ee:00:c2:cb:69:
                    bb:5a:1d:c9:18:2c:8a:a8:6a:fb:98:44:81:f5:cd:
                    c2:69:08:4e:86:b6:1a:67:ec:ae:85:f2:ab:d8:83:
                    cd:ac:48:ad:d2:e2:2d:20:95:0e:75:f2:0e:74:ef:
                    a3:13:bf:ea:71:0b:c5:0b:ae:11:a9:f3:5e:af:82:
                    32:ff:d2:0f:cf:ef:ef:d9:e2:46:9b:9a:a7:9b:b7:
                    f6:d0:b3:89:38:39:41:d8:31:2d:56:fe:36:7a:3c:
                    d7:e7:4e:89:cc:64:a0:50:f6:ea:a4:f8:e0:37:b6:
                    40:e4:1b:65:62:bb:cd:93:c7:2c:bf:35:f1:2e:e7:
                    63:8d:3c:75:dc:2b:a7:6f:92:49:f9:58:39:30:a1:
                    41:42:58:28:5f:7a:ce:ad:db:27:f7:34:39:9f:32:
                    ab:83:e6:03:9e:41:dc:84:93:d1:c5:3a:33:e2:b8:
                    99:6d:d4:ff:72:1c:57:68:e2:91:d8:a2:3a:e1:ca:
                    ce:e5:e3:c7:db:c2:36:7e:3c:2e:44:ea:2a:bb:6f:
                    f5:4a:f4:95:8a:66:f0:d4:e0:2d:a0:1a:9a:d8:af:
                    f7:1e:33:fd:63:62:90:21:d7:54:c4:af:39:22:94:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:85:E9:22:E3:11:49:38:7E:5B:97:DA:53:A7:6E:78:08:88:5A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7746ce-d2bc-35d6-a376-eda96c1237ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.248.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:68:4c:aa:de:e6:b5:42:9b:fe:86:67:da:7b:2e:06:71:a6:
         49:05:2b:f8:40:12:93:16:7e:0c:56:9d:e1:c6:77:a0:56:ae:
         f5:e1:42:71:38:9b:30:34:37:a0:ae:0b:54:82:0c:2a:3e:31:
         32:0b:20:a8:65:1f:b0:8d:f1:6e:5d:4e:f3:ba:fa:ff:16:da:
         96:82:fa:4b:cb:72:2a:0f:14:55:bb:7f:c8:84:38:81:1b:95:
         a5:cb:12:0c:dd:cf:76:16:d7:bb:7f:21:30:5d:a1:67:24:c7:
         dc:9d:55:4d:bf:ac:79:71:56:54:2e:c6:e0:30:17:f3:d9:46:
         2a:01:fe:c0:0f:c3:fc:a9:b1:86:73:a8:73:a3:48:d6:28:e4:
         26:76:8a:64:83:02:34:b9:7b:17:ce:6f:1c:d5:e0:e2:0f:d2:
         96:a9:d9:ef:75:1f:8a:2c:75:e4:b4:82:18:59:c4:a2:23:90:
         41:b1:ee:83:00:11:9f:02:16:c9:b1:00:03:d5:84:49:19:97:
         7b:fc:8b:63:a5:ef:ec:24:3f:8e:80:e7:cf:8a:ca:11:fa:f5:
         25:27:51:1d:0c:d8:8d:d1:63:0f:66:ab:67:16:ea:68:04:80:
         c8:db:15:91:c7:7e:9b:85:b3:fe:2a:41:a7:f8:24:4d:79:af:
         8e:41:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:27:21 2026 by rpki-client