Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4350e495-01a9-3632-b629-9cfc8b22a1dc.roa
File:                     4350e495-01a9-3632-b629-9cfc8b22a1dc.roa (raw, json)
Hash identifier:          N9GrE200dIrVGtYMhMfYzNFziFmLKHP8d9EqEC12PPE=
Subject key identifier:   0F:18:00:AC:89:52:71:D6:7B:0D:8A:33:59:40:26:0C:F3:27:8B:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5B97825E2458CB0389CDA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4350e495-01a9-3632-b629-9cfc8b22a1dc.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        68.39.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:97:82:5e:24:58:cb:03:89:cd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=f81c8c96-32a4-48a2-b6dd-665bd84ce988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:4d:d6:86:50:0a:5a:ab:08:2a:b8:4c:44:
                    ba:16:6d:f8:95:35:fc:9c:f6:9b:3e:f9:de:ac:36:
                    99:37:3a:e5:b7:e1:3e:20:41:e5:f9:9d:0b:00:2e:
                    b2:30:48:85:ec:9b:0a:4d:ab:46:93:5e:0b:ba:43:
                    e7:f3:63:7f:48:f0:52:47:e3:f7:76:bf:c0:d2:80:
                    3b:e4:4c:6d:43:a6:74:c4:00:b7:7c:37:46:7d:eb:
                    88:aa:52:b2:9b:ea:81:68:c5:21:b8:dc:81:86:3a:
                    bc:a4:56:d5:d7:21:39:2f:f1:a5:65:47:4d:da:85:
                    59:23:9b:ad:5a:47:29:b5:32:ba:33:84:5f:55:78:
                    7c:cb:c5:7c:f1:92:5f:a3:17:fa:81:1c:f9:d0:e7:
                    88:f0:6f:a8:53:00:67:7b:18:7f:9a:fa:e1:3b:aa:
                    36:7c:e9:7e:02:72:c7:7a:07:15:a9:5d:e5:1a:09:
                    14:13:36:0b:94:93:ac:53:c8:ae:e2:cd:f1:4e:58:
                    c1:82:1f:40:50:30:ca:d5:cb:87:fe:44:c5:3c:63:
                    1d:31:4e:23:b8:8a:0d:d8:40:ae:6b:cc:86:17:7f:
                    a2:69:06:b3:5f:d7:57:49:8b:83:22:70:a6:32:44:
                    d2:69:e4:5e:93:a8:85:87:a9:9a:06:bc:e0:5b:0d:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:18:00:AC:89:52:71:D6:7B:0D:8A:33:59:40:26:0C:F3:27:8B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4350e495-01a9-3632-b629-9cfc8b22a1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.39.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:35:ae:26:39:91:c4:32:0d:18:54:1c:db:0a:d6:f8:ed:82:
         b6:fa:5a:79:9f:b8:84:6a:52:1e:e6:b4:7e:d2:b4:89:31:95:
         33:e6:0f:86:05:14:4e:5e:d7:1b:b1:40:54:3c:82:10:cb:f8:
         b6:be:a2:a0:4e:41:8c:33:bc:45:c1:52:c4:ef:74:55:0d:e3:
         0b:be:00:f6:c0:66:59:1e:4c:76:34:b9:30:99:fe:3d:12:2f:
         53:f2:98:fd:ab:12:bb:de:27:cb:d3:fc:83:21:dd:ff:e9:6a:
         d5:e6:0f:58:a5:11:30:7a:9d:9c:96:a6:2f:aa:41:f9:44:13:
         90:02:9b:f9:b7:2c:84:4f:0d:13:5e:68:41:42:9e:27:e0:e4:
         4f:eb:bd:b1:68:b4:c1:46:91:44:0c:e2:e6:86:1c:33:4e:20:
         af:b6:00:92:0c:01:45:42:50:06:bc:9b:9e:74:b1:1c:02:41:
         63:95:64:8e:a1:bd:0c:31:fb:f9:60:9c:76:f8:93:3b:a4:7b:
         e4:af:19:9d:f7:41:e4:de:b0:96:f2:f9:ef:c1:2e:29:71:62:
         54:e6:bc:48:c9:33:d7:78:ca:a9:50:ab:28:b4:29:6e:1d:90:
         04:df:3b:5d:76:17:47:43:8d:fe:2e:62:bc:91:64:b6:fc:f4:
         75:cd:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:43:46 2026 by rpki-client