Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93f5262b-c31d-31f0-b9ed-2a579ef1df28.roa
File:                     93f5262b-c31d-31f0-b9ed-2a579ef1df28.roa (raw, json)
Hash identifier:          UG8mBpcIpf2WDT1VLJUtbhtX2nfuB9fSJHH1oTB6Vqw=
Subject key identifier:   45:85:74:79:FE:CF:10:A5:92:16:3B:77:65:85:82:5C:C4:03:2B:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC3AA6774E2D084EBC4080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93f5262b-c31d-31f0-b9ed-2a579ef1df28.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        68.34.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:3a:a6:77:4e:2d:08:4e:bc:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=29b874d4-565c-487f-898b-f5ef3aa170b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:c9:e8:89:c3:d6:13:29:8b:95:59:a5:e0:
                    c6:ec:42:6c:1d:f7:f2:24:71:a6:13:2d:32:6d:16:
                    d0:01:45:f4:af:83:dc:ac:d6:5f:75:9d:91:df:1c:
                    b4:f4:b4:e7:88:06:b4:ae:70:05:15:5e:92:e7:03:
                    81:3c:ac:3b:cd:6b:4c:ea:a8:fa:46:24:a1:0c:ff:
                    b7:c7:18:11:a6:1d:13:0d:3c:da:c2:a1:80:ea:b2:
                    5c:99:e8:96:7f:98:e4:16:fe:59:9c:8c:05:3c:04:
                    6b:22:1a:2f:db:f0:98:b1:a8:fe:23:f9:b6:fd:16:
                    65:a7:c9:eb:1a:1f:c6:07:87:82:53:7c:f2:37:8c:
                    69:2f:e6:b3:55:6a:46:34:cf:24:4d:de:59:bf:ba:
                    6a:24:de:a3:02:13:87:86:08:ce:d9:29:18:5c:05:
                    40:93:28:7c:b9:d1:5e:ed:b3:61:38:45:07:f0:32:
                    02:24:5a:a8:c3:36:7a:3a:3e:d5:89:0e:5e:01:74:
                    46:98:37:5b:fa:89:c8:b9:55:7f:aa:11:fc:5c:cc:
                    96:49:ea:65:4a:19:44:2b:3c:2d:84:f8:43:b4:ff:
                    31:4b:66:80:ea:81:f8:6a:17:84:5e:c5:b8:85:8c:
                    31:9d:4a:9f:60:18:d9:4b:ac:51:19:27:fc:e0:08:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:74:79:FE:CF:10:A5:92:16:3B:77:65:85:82:5C:C4:03:2B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93f5262b-c31d-31f0-b9ed-2a579ef1df28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:84:aa:b9:8e:b5:1b:53:12:22:e9:87:e2:d4:d5:21:8c:74:
         12:6a:c6:43:31:a8:d3:e3:ad:c4:ad:60:de:3e:88:cd:47:06:
         6d:70:5f:4c:48:a0:c2:ec:3d:ff:54:a9:a5:68:c2:50:d8:a0:
         0b:0a:b3:2d:aa:ee:9c:65:f8:a5:07:d4:01:0a:9c:46:7f:62:
         06:ec:81:0d:d0:fa:f4:d1:a0:eb:66:97:57:b8:8e:67:cb:7d:
         2e:c2:29:1b:8e:48:1f:8c:4f:32:d2:f4:df:b1:21:a5:6b:85:
         2d:62:9e:1b:55:9f:57:14:ef:9f:f1:35:1e:0b:83:66:5d:4c:
         89:94:26:7b:b4:86:cf:4d:e4:1c:25:c6:3c:f1:82:39:78:dc:
         64:76:39:a8:de:0a:21:46:10:a7:03:71:16:3b:a8:a7:f8:c3:
         f7:49:ac:cf:04:38:cc:f2:b7:3d:6c:81:e8:c3:e2:e7:e9:38:
         bb:26:47:07:e3:d2:9f:61:d5:e1:ab:52:7d:ac:a7:a2:4a:50:
         1a:20:67:47:50:07:65:17:5a:3e:be:6e:ee:60:6c:b1:ae:90:
         81:c9:c9:e1:f7:1c:4e:18:04:b6:9a:ab:c7:12:6f:f0:fa:1b:
         90:4a:b3:81:45:09:df:fb:e0:81:6b:9d:50:07:09:15:04:f9:
         40:f5:38:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:43 2026 by rpki-client