Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caa6707-d887-31aa-9555-6c07e276be6c.roa
File:                     5caa6707-d887-31aa-9555-6c07e276be6c.roa (raw, json)
Hash identifier:          Oa0CjD/UmolDc7o5pI87eUV8fHXhzdU6nG3j3f6DJHA=
Subject key identifier:   C3:56:0E:CA:90:A3:A0:C2:1C:6B:77:A6:DB:1F:A2:E6:46:DF:66:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78BC29297730756441CC5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caa6707-d887-31aa-9555-6c07e276be6c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        68.53.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:c2:92:97:73:07:56:44:1c:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=82e5a426-0f88-48e7-976d-71f4d5212687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:75:de:be:cc:1f:23:40:92:61:5d:81:89:6f:
                    fc:64:0b:b1:fe:d0:86:33:ad:5a:24:83:21:f4:18:
                    4a:92:3e:d0:a6:ff:d1:92:a4:19:63:8d:63:94:6c:
                    ad:fc:6a:91:e5:88:cf:48:53:55:47:6a:9f:ef:96:
                    38:98:a6:75:12:1a:c1:a6:86:a8:7c:a8:6f:5f:6e:
                    f2:4e:40:75:ae:75:9c:1b:6c:b3:ad:ea:b2:7b:59:
                    3b:5c:b3:66:22:83:50:56:03:99:0b:42:6f:0d:99:
                    3a:ab:f7:8a:e5:a0:41:ab:30:23:02:cf:c9:27:a9:
                    9c:ab:f8:3f:53:2a:cd:9a:b2:ab:74:ff:43:7c:95:
                    77:85:bb:48:19:19:cd:90:7e:76:64:25:11:f4:22:
                    f9:5f:2a:57:0b:0e:ba:8e:bb:d5:80:58:19:2a:20:
                    7a:3c:ea:bb:07:a6:f5:ba:83:c9:67:2d:90:82:68:
                    d6:af:b5:78:41:ca:6c:02:c0:6d:5f:1c:cc:3d:eb:
                    19:5e:a5:b9:1b:71:2c:9e:f2:fa:fa:32:5f:09:c6:
                    fc:fe:ea:1c:2d:f4:d8:2b:22:06:0e:43:17:ad:55:
                    72:d6:35:b6:bd:6f:0f:a2:db:f8:3c:87:7c:c5:38:
                    cb:e4:3a:40:55:58:4e:e0:61:a1:ff:9a:e4:74:ef:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:56:0E:CA:90:A3:A0:C2:1C:6B:77:A6:DB:1F:A2:E6:46:DF:66:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caa6707-d887-31aa-9555-6c07e276be6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:bb:6b:32:4d:24:07:93:29:b0:6e:3f:a6:98:60:92:90:27:
         90:55:91:01:6a:02:6b:6f:dc:c6:a2:52:9a:81:f7:59:e6:9f:
         6e:ff:a8:42:d0:29:7f:6e:7a:83:b2:cb:b7:f5:a5:75:b5:2d:
         b0:43:1a:ee:a6:d6:ee:01:59:0d:e2:ea:cf:40:40:82:ff:12:
         06:f5:cb:7c:35:8b:32:97:42:97:45:37:6b:b5:78:78:64:79:
         99:2c:91:8e:f4:97:cb:c0:d2:cf:08:59:b9:73:1f:15:1a:b7:
         0a:68:d5:30:2f:0c:71:14:e1:bf:90:fb:85:ea:d9:7c:1d:d2:
         19:83:fa:b1:1f:c3:f0:cf:36:1f:c2:b8:d7:77:48:c6:78:21:
         a3:17:fe:29:04:00:4e:1a:6f:bc:90:97:4d:31:09:13:81:fa:
         ec:41:28:75:0e:2a:8b:c9:67:27:09:bc:3d:d4:7e:1c:59:21:
         4e:ed:dd:91:8d:42:ee:f2:df:e4:3a:99:ff:74:10:7e:8c:e8:
         ae:c5:db:b2:71:a8:21:d4:91:91:7f:67:74:84:ac:1f:26:43:
         dd:07:13:73:51:9e:e8:5c:71:71:fc:db:87:98:0c:3f:e4:be:
         8b:2a:4a:80:5e:59:2f:b5:1e:5c:81:31:38:34:91:16:ee:4e:
         8f:83:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:33:58 2026 by rpki-client