Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8557519f-18b3-3b8f-8b66-8c3848663510.roa
File:                     8557519f-18b3-3b8f-8b66-8c3848663510.roa (raw, json)
Hash identifier:          N35sO9l2jbUOhU1dKEAk8o92X0hr7cotgeR9Y+xe0Mk=
Subject key identifier:   89:33:BC:E0:4F:B5:2B:D8:71:86:53:12:B8:D7:CC:50:75:47:65:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE874455A41F1D75B7285840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8557519f-18b3-3b8f-8b66-8c3848663510.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33489
IP address blocks:        68.87.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:44:55:a4:1f:1d:75:b7:28:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=660e4f17-3a43-4d82-b460-d62475ba6469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:7d:3c:35:43:f1:b4:f5:90:20:17:50:e0:
                    d3:a6:f9:4c:dc:cf:c1:aa:59:d8:33:1c:20:5c:92:
                    d2:a0:65:b4:b7:4c:21:0a:ff:69:e1:d9:b8:5c:a2:
                    c2:b6:1c:ef:11:26:f9:27:b3:5c:d8:b1:f5:d0:f3:
                    44:80:5f:27:06:db:ea:60:55:df:81:bd:81:f4:61:
                    92:1b:b6:cb:96:c0:f0:66:7d:05:07:8c:2e:9f:a7:
                    ea:84:d7:a6:a9:35:f6:91:6a:e3:05:6d:76:55:dd:
                    31:02:ca:28:41:c4:50:ac:89:b5:43:59:62:eb:21:
                    f9:1a:57:b7:70:0e:bf:4a:9f:4d:c8:0c:55:bc:e4:
                    86:21:25:e6:d5:b9:02:c6:19:f9:14:85:92:91:6c:
                    69:13:ce:2b:60:f2:b4:6d:fd:58:ca:e0:3c:da:95:
                    e2:b3:8f:6c:27:1f:4f:60:47:d6:10:49:57:f0:a8:
                    94:0d:46:5f:29:3b:9d:93:c8:49:b2:6e:ee:a6:f9:
                    fb:c7:a6:0f:40:d5:55:81:de:f5:c1:6c:af:ff:bc:
                    82:e4:e0:97:a2:3f:0e:9e:fe:ce:c8:e2:6e:9a:a7:
                    2d:2e:9f:a6:f9:96:96:44:06:e1:23:f0:99:6d:7a:
                    52:77:f5:c6:ed:db:41:6d:4d:88:4c:fe:14:03:5a:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:BC:E0:4F:B5:2B:D8:71:86:53:12:B8:D7:CC:50:75:47:65:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8557519f-18b3-3b8f-8b66-8c3848663510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.87.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4a:31:2c:07:fc:b6:fa:67:d0:6b:b2:0a:b0:7d:69:2e:13:
         e5:54:42:03:20:a2:e0:fd:53:94:98:ee:b3:8a:2a:76:9d:c0:
         89:a5:77:13:32:7e:33:19:18:ac:1f:9d:8c:03:54:a9:a4:62:
         63:40:51:23:70:51:4a:ff:15:6a:9c:55:00:b8:04:1f:38:ae:
         5a:c6:b8:74:b0:ad:ff:4a:20:de:8f:97:26:85:7f:7a:91:d0:
         d1:d1:88:83:19:cb:a3:b8:61:58:bc:a3:cd:90:dc:da:ef:00:
         e5:39:f1:17:fe:b4:e0:f6:8b:a3:71:ad:0b:ec:2d:53:a2:02:
         67:4b:99:25:18:a2:0b:ce:2e:85:c9:d9:eb:1c:31:e1:60:83:
         c5:f9:54:06:30:5b:bd:10:62:ec:3e:b9:5b:61:e9:5b:4a:f4:
         06:14:ce:d9:d8:5a:6f:9d:ed:b5:25:f2:54:6a:fe:20:aa:49:
         7c:d5:32:3a:26:7c:29:7a:d7:5e:40:14:70:c5:e3:78:41:8f:
         a3:d8:57:c7:25:85:09:d1:2d:6f:fa:5c:10:b1:7f:bc:18:b7:
         bf:6e:c9:3b:c6:7f:be:95:df:6c:30:74:e4:8b:fe:80:27:05:
         e8:e4:72:ae:6b:b3:4a:53:64:4d:50:13:7f:08:50:aa:dd:8b:
         1c:9b:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:36 2026 by rpki-client