Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69851cb7-9e94-3c69-b8f1-cdbea29fcce1.roa
File:                     69851cb7-9e94-3c69-b8f1-cdbea29fcce1.roa (raw, json)
Hash identifier:          qvBHRxZUvaua7GxgS+WmIP4QSRO6gr2ynNnygDxq+RA=
Subject key identifier:   09:1D:0F:34:DA:BE:A0:BE:DD:13:27:4C:0C:93:AA:AF:C5:69:9A:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB13C061966180E9E11680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69851cb7-9e94-3c69-b8f1-cdbea29fcce1.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        68.43.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:13:c0:61:96:61:80:e9:e1:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=552830d7-07a4-4de6-bdde-5784fadddb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:34:00:db:46:41:c1:47:04:bf:1f:5c:bc:
                    29:f1:48:75:c9:40:fa:a2:1a:f9:16:98:f8:43:dd:
                    e3:3c:fd:21:46:ac:3d:16:ec:b9:ba:14:42:ea:ba:
                    12:75:65:f5:57:7e:44:0b:c5:7c:09:67:56:34:4d:
                    b2:3d:58:9a:44:7b:01:85:5d:ad:81:c1:46:7f:bf:
                    d4:58:53:05:9c:fa:93:96:48:b9:69:ef:45:ae:17:
                    da:c2:88:66:8c:44:9f:26:95:46:1f:26:f2:6b:55:
                    47:5c:37:4f:d8:07:87:58:3d:c4:a9:4e:f5:e0:87:
                    db:58:a9:24:ce:88:1d:04:e2:62:6e:33:8d:63:38:
                    cf:3a:20:36:41:0a:25:9f:9c:fb:de:dd:45:cf:6f:
                    86:23:47:23:b5:05:00:51:60:c0:df:c3:d9:6e:39:
                    b9:26:6b:f1:d8:4f:79:5d:13:89:13:23:c1:04:bd:
                    80:33:c7:61:7e:c6:6d:cc:eb:d7:82:69:db:b6:e7:
                    c4:04:ec:19:1a:7f:ed:bd:07:8e:99:10:34:26:ca:
                    d8:80:0c:86:2f:b6:a1:47:ee:2e:48:4f:ff:c7:3c:
                    8c:35:91:1e:71:7a:e8:16:9a:5c:15:c0:47:dc:2c:
                    e6:11:69:e1:6e:83:ac:56:b1:49:23:55:78:2d:8c:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1D:0F:34:DA:BE:A0:BE:DD:13:27:4C:0C:93:AA:AF:C5:69:9A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69851cb7-9e94-3c69-b8f1-cdbea29fcce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:a7:11:06:56:10:bf:51:d4:4b:29:69:c3:91:d2:78:96:
         b9:b3:36:51:99:d3:9b:12:36:17:e3:6e:45:cf:93:a1:23:9e:
         16:cc:fe:31:e2:29:c2:0f:b4:77:36:fa:df:53:78:7a:c6:06:
         94:bc:47:cf:4d:f5:c8:7b:a8:e4:fd:2a:d2:c3:8e:15:8f:0b:
         49:18:79:8d:11:30:b1:fd:50:1b:91:a7:9e:16:7f:b3:fd:aa:
         07:e8:90:a4:e8:e2:bb:44:39:6f:08:86:d2:51:de:84:52:1b:
         2b:3c:5c:c9:a6:ed:87:83:8b:24:b5:d6:f0:3d:2f:d9:ce:f1:
         4d:a3:41:c0:be:ba:fa:8c:f1:79:ad:d7:81:99:3f:b6:61:c1:
         ff:2a:d2:39:2b:0f:fb:b1:62:05:df:32:75:34:70:12:38:97:
         a0:bc:7f:37:ea:5b:7b:f6:fe:81:29:7b:32:cc:74:36:69:eb:
         ae:71:7a:56:71:12:a6:11:71:56:2b:0a:72:50:3c:3f:07:32:
         db:a4:1e:64:bb:36:9b:e7:03:55:c3:c4:68:4e:4f:be:4a:18:
         1b:56:b5:de:77:fb:3d:05:08:1e:7e:da:69:b0:86:20:3e:52:
         dc:21:75:77:50:b5:b1:45:2a:95:81:31:ef:f8:9c:f3:00:a9:
         2a:71:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:51 2026 by rpki-client