Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae6bab35-f958-3a9d-b18d-f365cdcb5fbb.roa
File:                     ae6bab35-f958-3a9d-b18d-f365cdcb5fbb.roa (raw, json)
Hash identifier:          tRngKhBdiE/LHCfYgJ7xdNagSzrhc64XjPMVvYmetyA=
Subject key identifier:   F1:71:29:50:D1:BE:E0:97:7B:29:77:B5:1F:17:A0:B4:46:98:75:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E949BA6BCB595DBD3DF20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae6bab35-f958-3a9d-b18d-f365cdcb5fbb.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        68.83.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:94:9b:a6:bc:b5:95:db:d3:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=ea202c2a-e6da-4f96-93da-45a80a96398e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:e3:d2:6b:7f:0b:c1:d2:9d:d6:82:c9:7a:
                    66:3b:62:de:a3:c8:67:90:77:e0:fe:62:24:0a:2d:
                    3d:d0:01:fd:9b:10:ab:52:de:87:2b:86:44:14:c9:
                    05:b6:ab:ac:63:a3:d1:ad:91:ed:96:a4:5c:67:05:
                    d1:d0:e2:8f:54:76:37:d2:9e:21:a9:24:99:e3:13:
                    c7:27:55:1e:c6:ff:e4:3b:c3:70:24:f1:54:5a:af:
                    32:a8:f4:02:c2:2e:5f:41:f2:34:ad:6b:53:6a:f5:
                    c6:f5:b9:f9:0c:70:5d:51:8e:79:d7:11:2c:60:04:
                    d7:8e:cd:b3:92:27:c4:37:f6:0d:80:f4:54:96:ba:
                    d9:d2:58:a0:45:12:58:60:14:71:77:4b:23:65:3d:
                    99:e3:98:08:fe:ba:f1:9d:d8:28:3b:69:26:8e:48:
                    c4:58:5d:f1:ab:e2:03:32:29:23:bd:0d:c3:2f:f3:
                    1e:c0:74:9c:3f:25:15:a7:cb:5c:e0:71:e3:1d:6c:
                    0b:4f:66:35:9f:e1:fa:12:67:98:3b:32:37:f1:5b:
                    62:ed:99:7c:7c:91:1c:1c:cb:e8:ed:1d:06:b1:8d:
                    2a:1f:d3:a4:73:b0:24:2e:cd:4e:28:e0:55:10:e0:
                    c3:ed:79:98:c3:39:19:1b:c3:1a:ea:0d:43:ef:e7:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:71:29:50:D1:BE:E0:97:7B:29:77:B5:1F:17:A0:B4:46:98:75:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae6bab35-f958-3a9d-b18d-f365cdcb5fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:84:b9:91:4b:46:74:53:27:14:f5:24:67:73:18:2e:d5:67:
         1b:32:2a:2f:14:f1:48:43:83:48:f0:71:56:e5:5a:05:7d:93:
         9b:ab:73:f5:04:7a:63:aa:4f:c8:5f:81:07:84:92:83:3d:2b:
         8b:f5:1d:56:74:43:8b:90:df:b0:90:b4:5b:81:ad:13:cc:31:
         75:92:a4:23:e0:19:c6:f6:30:6b:4b:4e:83:6c:42:d5:1d:73:
         08:bc:68:26:76:bc:d5:02:b1:37:31:80:1f:32:86:92:9c:2d:
         8a:79:db:3c:bd:b1:9c:a2:d3:53:7b:f5:1f:f6:d0:25:51:2a:
         ce:61:63:3f:2d:ea:c4:84:05:ff:11:af:35:c0:c9:f9:88:53:
         f1:71:54:4b:cc:69:b4:2b:d8:12:ae:be:20:33:97:5f:41:3f:
         88:45:78:74:49:71:cf:ec:41:23:2c:4d:1a:71:6d:38:96:13:
         de:f7:c1:a1:3c:3f:66:da:c4:8d:bd:0b:62:5a:28:fd:29:c1:
         6a:a9:c0:3f:d2:86:6a:e4:82:40:b4:85:bb:2c:e7:0d:51:e6:
         ba:bb:72:63:2c:bc:36:90:a5:65:04:ee:66:88:7d:9b:5c:2b:
         d9:69:61:3b:1b:7a:ac:7c:7b:a9:fe:b9:17:90:95:35:0a:8b:
         33:c4:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:40:40 2026 by rpki-client