Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93b8a20a-55be-39aa-9b7c-829c59474c04.roa
File:                     93b8a20a-55be-39aa-9b7c-829c59474c04.roa (raw, json)
Hash identifier:          EZBalnzFGrzY2L8Vj87y92a4jXE1Ty98JCWmd/GBJCk=
Subject key identifier:   87:A8:40:C1:9A:EF:57:AE:40:C8:53:2A:96:7B:55:5C:7A:EB:87:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC3E9E612539726E614700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93b8a20a-55be-39aa-9b7c-829c59474c04.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        68.37.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:3e:9e:61:25:39:72:6e:61:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=703a77df-2a51-4402-bab4-60e35463ec42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:a9:af:bc:c2:af:d1:23:ac:92:64:97:f7:
                    07:9b:f2:58:44:32:c2:ff:bc:9b:ac:0c:77:8b:b4:
                    4f:00:e2:c4:23:e9:68:fb:f3:15:36:53:6f:4a:8b:
                    79:62:9e:7a:9c:a8:22:b8:75:b9:d6:8f:f5:a3:bd:
                    91:b8:0c:4f:53:90:3f:90:d3:c3:94:bc:3b:e1:0f:
                    d7:74:b6:ff:fd:90:4c:25:c3:f7:c5:a0:f5:08:9e:
                    b8:88:5c:30:3e:df:db:2e:bf:86:6a:ba:d5:41:62:
                    d3:03:e7:4f:98:1b:4a:dd:b0:b1:4a:21:7b:3b:1b:
                    fe:be:72:d5:c7:e6:37:92:94:1f:ce:86:23:52:6a:
                    b2:70:5e:85:56:a1:a9:38:00:6d:6c:14:27:70:f8:
                    e3:3c:e7:95:df:11:df:70:39:1a:ce:57:55:d5:9d:
                    72:c9:16:f8:ca:96:9a:20:d8:22:d2:59:a4:9e:64:
                    55:1b:5a:95:0b:34:91:cc:54:92:8e:ed:68:0b:e3:
                    52:a7:17:1f:d3:08:fe:9a:e5:18:f3:fe:96:3a:e4:
                    d2:3d:82:d8:d7:f1:29:27:44:4d:55:83:93:4a:6b:
                    da:5e:76:c5:73:fc:2e:cd:2b:90:3d:5f:88:c4:a1:
                    80:cd:17:05:8c:07:50:00:e5:19:57:fe:df:d6:f1:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:40:C1:9A:EF:57:AE:40:C8:53:2A:96:7B:55:5C:7A:EB:87:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93b8a20a-55be-39aa-9b7c-829c59474c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:a5:97:1c:db:05:62:57:b4:50:a2:a3:bb:ef:17:bc:b1:b2:
         32:68:f2:8b:b8:b8:85:c6:26:35:76:9a:72:c8:0a:3a:a2:65:
         21:4b:c5:6c:bb:cb:33:63:fb:69:2d:a7:04:34:7e:58:b0:78:
         bd:27:12:5f:cd:5c:fe:95:fa:41:21:da:c1:eb:f4:3c:48:0a:
         88:64:df:8e:78:b6:08:1e:c5:80:22:67:ae:72:20:47:ee:ae:
         21:4c:f5:9a:fa:50:3d:7b:6d:74:23:56:31:9c:16:34:2e:d2:
         e1:fe:bb:9e:6d:22:13:d9:e0:1b:ff:b2:5d:80:df:5e:94:13:
         b0:cb:dd:77:4c:f9:23:08:92:75:48:bb:a4:d9:4a:4d:3f:75:
         ad:04:4c:39:bd:e2:fe:6f:1f:93:4f:2c:bf:ec:58:ae:0f:6b:
         b5:99:01:d5:e2:c9:1e:56:3b:73:84:e6:76:01:4f:fd:73:f8:
         da:59:fb:d8:7a:6e:0d:a9:f5:9e:2d:7b:6c:0c:76:79:d0:ba:
         df:14:f5:d3:0e:d7:6f:46:07:82:2a:cb:e9:9e:7c:61:23:b2:
         96:89:b1:66:32:c0:f5:b4:9c:ce:4b:b0:ed:b0:c0:9e:3d:ef:
         fc:9a:c1:0b:6a:42:b1:61:3e:f7:93:d5:86:6b:65:ca:96:1a:
         45:cd:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:42 2026 by rpki-client