Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa
File:                     8b0133f6-1583-3502-8817-00f78f135afb.roa (raw, json)
Hash identifier:          IMueuDuuicwGK2bWgW8oaw604Pk3j4hKzmRJBtgrVDc=
Subject key identifier:   90:ED:3F:8E:1E:E4:A4:56:D7:58:23:C5:E8:25:FD:D8:BD:B1:A4:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA789448DBAB9D8226961ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21508
IP address blocks:        68.86.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:44:8d:ba:b9:d8:22:69:61:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c0f856bd-e979-4a1d-b51e-ad01fe1e71fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:cb:91:da:43:87:24:e6:bf:86:5f:5e:2b:
                    1f:70:6a:9d:9b:7d:75:0c:51:08:58:56:94:5c:a1:
                    aa:d1:47:4d:4a:02:ee:7d:4b:38:7c:91:3b:50:36:
                    f1:c0:14:17:f0:c8:e4:b6:78:46:be:05:ff:6c:7e:
                    9e:f8:dd:13:44:3b:82:bd:9f:e5:a4:9b:e5:af:8c:
                    82:dc:b9:77:c6:ea:41:5f:46:40:fd:cf:40:fd:a1:
                    fa:98:a9:a0:90:4c:78:34:29:07:ea:be:86:6a:57:
                    45:55:fd:f9:b5:fb:8e:d0:5a:bd:f5:b8:d8:33:8f:
                    95:12:0b:e1:3f:e6:ca:3f:b4:c9:d6:fe:6c:8a:02:
                    ba:82:a4:30:4f:a8:21:7f:2b:17:75:15:57:c7:51:
                    3c:e1:17:b6:33:03:a3:0a:64:7a:52:ed:5a:1d:e8:
                    d2:24:05:f0:f3:7e:a7:fa:cc:de:08:dc:02:d7:ca:
                    b7:8a:b1:97:ac:f4:91:4d:dd:74:7c:16:c5:b8:62:
                    09:c1:e7:05:4d:1a:d1:c4:7f:76:f4:57:98:9e:45:
                    8c:c1:09:f0:d3:01:13:7b:a5:90:74:82:38:0a:9a:
                    38:69:50:8c:bc:f0:74:5f:6f:aa:db:c7:45:34:33:
                    db:40:0f:89:e3:4c:24:5d:61:cc:73:ea:d5:32:b3:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:ED:3F:8E:1E:E4:A4:56:D7:58:23:C5:E8:25:FD:D8:BD:B1:A4:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4b:61:23:a6:2d:18:22:a4:d6:b5:21:9f:62:59:f7:95:7a:
         80:0e:1a:26:fd:a2:75:c8:a4:a9:7d:a0:70:2f:23:d1:6e:68:
         b0:e9:67:70:c4:02:12:05:c3:58:7a:cc:0f:7b:ab:58:97:4f:
         28:1f:2c:61:ff:a7:f6:63:96:3f:c5:fc:bb:c1:3e:bd:8c:e3:
         8d:db:85:61:bd:ca:32:f0:87:2d:04:b1:2b:b2:7d:4a:5a:7f:
         fe:13:89:ab:99:5c:91:d1:97:78:20:ef:aa:19:05:ee:62:ea:
         48:c0:80:a8:bc:ab:6b:7e:be:a1:13:ad:1f:81:4a:17:3d:28:
         50:1f:b1:db:c4:8a:20:ba:4d:5b:72:3d:a7:d7:1e:99:08:f3:
         2e:b1:fc:9f:b3:f7:4d:66:e2:43:54:aa:a6:c8:45:17:7d:50:
         7f:dc:f1:46:bb:02:94:3d:c5:ff:5f:7e:74:05:e6:3f:60:02:
         d4:81:71:9b:42:c2:05:3a:5f:55:ec:ea:4f:fc:b6:7a:6c:f0:
         97:3f:de:36:45:c4:79:b3:30:5b:9b:c0:f4:21:f3:ef:af:92:
         e7:01:ac:8f:d0:da:d7:66:c7:07:15:ff:63:09:43:b9:39:25:
         b7:a2:29:fe:c7:e6:e7:af:02:4c:d9:7f:76:4a:2d:fe:31:e3:
         4f:1f:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:12 2026 by rpki-client