Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e1dfa7d-95b2-302a-90e7-793eda8a3094.roa
File:                     3e1dfa7d-95b2-302a-90e7-793eda8a3094.roa (raw, json)
Hash identifier:          AD5yti+i/kjp7pgoQXRKsXc5BC5p/9DMuvD2LitWCfc=
Subject key identifier:   C6:CB:1B:A6:5E:FD:A1:BC:27:64:20:E5:7A:D6:3F:00:33:78:EE:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497772DC925D343A0CFEDCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e1dfa7d-95b2-302a-90e7-793eda8a3094.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        68.52.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:72:dc:92:5d:34:3a:0c:fe:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a0990e68-41c0-4e7d-9956-13a57925948e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:b5:cc:d8:f9:23:fa:92:c1:6f:58:b1:3a:
                    87:9a:3f:f0:31:14:df:e3:f2:e0:f0:fd:b1:40:0b:
                    7e:30:71:7c:41:f5:4e:a3:06:44:bf:8c:99:58:90:
                    e0:26:5c:e8:a8:6a:e2:94:9b:bb:03:2d:73:25:1e:
                    90:98:31:cc:40:37:f6:14:12:9f:53:9d:bc:85:a4:
                    99:43:9c:93:3c:6e:51:e6:aa:8e:c3:2d:d5:16:f2:
                    e4:13:1d:65:86:1e:00:12:0e:8f:df:cb:85:12:a5:
                    47:47:61:b3:ea:54:65:3e:3d:17:c9:47:4a:3f:b8:
                    52:98:03:8c:b7:6c:3f:57:05:30:a5:76:2e:a6:b1:
                    c1:50:9b:93:28:6a:0d:4c:ac:de:54:1f:d6:9c:c1:
                    88:d1:1f:1e:24:44:3f:24:f6:86:89:2a:84:e1:d8:
                    e9:36:1c:89:a6:16:fd:bc:75:9c:0b:ce:11:06:c9:
                    6a:06:95:62:5b:1e:b5:db:b0:9c:5a:87:2f:3a:07:
                    d9:a9:58:69:c5:0d:38:b6:58:9a:82:4e:29:9f:4c:
                    66:34:b8:cc:cb:2e:ca:f5:19:c8:41:cc:c4:db:2c:
                    28:9c:90:ef:bb:3f:6c:c6:0f:87:3c:f5:38:69:b0:
                    e4:bc:bd:da:a1:84:10:96:42:c6:dd:35:65:26:38:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CB:1B:A6:5E:FD:A1:BC:27:64:20:E5:7A:D6:3F:00:33:78:EE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e1dfa7d-95b2-302a-90e7-793eda8a3094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:13:c5:ab:9d:04:ef:88:f2:95:99:08:38:7c:c6:e0:1f:9f:
         07:ef:17:b2:8e:fd:a3:b9:f2:e0:3a:17:87:50:a2:38:f4:95:
         33:1e:5e:39:cb:49:7e:1d:3e:22:0e:b3:25:6a:4c:f9:d9:8e:
         2e:c1:1e:7f:3a:58:75:07:77:d0:f6:ef:61:7e:ab:aa:d2:00:
         19:88:dc:a3:93:60:f9:47:85:ec:4f:32:23:0f:70:07:3d:96:
         5b:19:76:1f:9e:24:f8:0c:f6:36:cc:46:cc:64:3c:e8:5f:a7:
         f1:c0:c0:13:ca:13:e2:00:07:b3:45:f1:35:ef:e2:1e:26:8b:
         55:f2:09:d5:9c:72:07:ce:c4:3e:e2:e7:f4:f1:1b:3c:c4:29:
         2b:d7:87:c0:af:dd:39:4f:d9:68:72:f9:6c:48:00:c9:7e:ff:
         e7:eb:73:93:28:1d:c2:39:bf:7b:fa:88:7b:a3:b1:3a:8c:16:
         fc:89:0d:26:fe:28:ed:07:bd:1e:c7:fc:87:aa:37:71:fd:f4:
         95:3b:9a:e9:71:ef:0c:2a:a3:6d:55:37:bc:76:38:a9:ef:a0:
         50:41:6f:c4:0c:a2:e7:6b:e6:32:bd:bb:4f:f3:d3:02:d6:75:
         16:a5:a6:2e:2d:54:be:04:fe:a8:40:32:a1:eb:72:a3:5a:99:
         07:33:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:45:14 2026 by rpki-client