Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa
File:                     864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa (raw, json)
Hash identifier:          luaOixwmbwLCClcdAZFdVjZHa1F/qnpjDKbBqNgz6gw=
Subject key identifier:   F5:BA:EC:0B:56:1E:25:E9:E0:C0:1C:D5:1A:4D:39:B0:23:11:2F:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980B28B10622B5271AA0F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33489
IP address blocks:        69.136.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:b2:8b:10:62:2b:52:71:aa:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d2300221-5365-4045-b2fc-dd9e76f27d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:18:96:5c:74:17:03:0c:5a:dc:4b:4f:ed:
                    36:19:5d:31:fd:85:bc:28:6a:27:a6:95:3f:5f:ee:
                    8b:c2:6e:c5:fa:b9:06:d9:38:ac:40:ee:d8:0a:5e:
                    52:d8:47:7d:6a:3e:f3:d0:b4:b6:b5:fb:ce:ff:ef:
                    e2:81:53:df:d7:e9:5b:19:b6:1b:f2:8a:9d:dd:b2:
                    35:07:c1:fc:f2:ad:46:89:2e:12:e4:7c:cf:f2:48:
                    67:da:55:d5:96:69:a3:5f:12:41:ff:7f:db:64:00:
                    c8:a7:62:1e:86:f5:92:98:d7:ae:a2:07:d9:ad:d9:
                    00:af:e3:35:67:54:ae:a5:e7:47:c2:c6:f9:a2:0e:
                    c5:b5:bb:e4:4e:f3:05:5c:4e:07:c7:3c:8d:20:63:
                    2a:fb:f9:91:40:00:9f:3d:62:f1:ff:3d:8f:fa:0a:
                    f9:9d:cd:84:54:a7:8f:52:18:07:40:bb:a6:f1:62:
                    fe:c6:ab:84:ba:0b:65:09:60:c2:31:04:91:3f:15:
                    54:05:ea:80:f7:21:18:5c:3d:23:08:f6:cc:a3:1f:
                    d7:e6:f0:43:54:77:f8:4f:d6:41:40:f1:59:40:22:
                    fa:20:8c:80:16:32:f5:c2:9d:89:5d:94:8b:93:1f:
                    05:37:1a:8f:11:14:6d:b5:5c:45:57:a6:da:63:54:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:EC:0B:56:1E:25:E9:E0:C0:1C:D5:1A:4D:39:B0:23:11:2F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.136.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:82:82:2b:fe:1f:6d:c8:3e:49:5e:48:47:4d:7b:bb:ee:
         df:b1:aa:71:b0:f5:4e:85:57:bb:9f:2f:de:41:4e:ca:35:00:
         84:71:c8:be:e5:75:e5:d9:1a:0e:93:7c:b3:cd:5b:95:f2:10:
         b1:e9:4a:ef:12:1c:8e:44:05:c7:a8:dd:d2:09:41:dc:11:66:
         8c:58:6f:96:53:b9:2a:63:04:3b:94:02:9f:01:ef:13:fe:46:
         c5:3c:42:52:7b:3d:22:23:05:fd:54:ad:2a:5a:f9:9d:b0:9f:
         76:4e:61:9b:03:4f:e7:b8:4f:d9:85:e8:c0:47:8d:7d:c1:9b:
         2c:c5:40:45:5b:26:2c:f8:bd:c4:ce:d9:d7:a5:51:fc:e8:99:
         b7:5f:74:51:b7:bb:dc:c1:75:90:23:ba:0b:29:17:dd:c2:df:
         ae:33:c6:f0:e1:07:6c:de:e5:6b:8b:9a:10:61:b4:1c:7d:19:
         e5:0c:ac:0f:60:47:2b:de:37:46:c9:93:89:02:d7:f0:48:01:
         48:23:47:80:95:ca:37:0e:92:a7:0f:da:eb:5f:77:62:bd:87:
         55:fb:8a:22:ce:e7:e2:cc:dd:56:00:89:94:9a:e7:4e:17:2c:
         bf:d4:61:5b:b4:b9:65:6e:8a:af:ee:fc:9e:c7:b0:17:31:52:
         1c:07:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:31:57 2026 by rpki-client