Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ef8a10-d979-34af-beb5-290f3eb34861.roa
File:                     b0ef8a10-d979-34af-beb5-290f3eb34861.roa (raw, json)
Hash identifier:          iaiXtM+cElqMw+Mueg4iHl7OXAy4aYzL2VxmqacZ+WQ=
Subject key identifier:   1D:05:54:40:9F:5C:A4:65:AB:0A:1D:6E:D5:59:19:2D:62:C1:38:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8749628CC750C65D016140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ef8a10-d979-34af-beb5-290f3eb34861.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33490
IP address blocks:        68.85.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:49:62:8c:c7:50:c6:5d:01:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=121016bb-abcd-47a9-8a13-91cef8b2cbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3f:f9:ff:b9:29:f6:fc:00:08:e2:38:27:3b:
                    55:cc:6b:37:e7:93:30:24:f9:ed:c4:66:d2:41:66:
                    01:a4:d5:71:8c:4d:2e:d1:0c:0d:71:b1:80:22:43:
                    5c:28:d0:68:15:04:8a:16:d6:a1:9c:ff:ab:dd:ab:
                    ed:15:48:6d:e7:a9:66:3f:bb:3c:48:9d:ab:5a:86:
                    31:fd:3c:30:b4:28:27:98:b2:67:d2:c0:0c:7a:dd:
                    f5:90:6d:96:4c:86:09:63:8d:d9:2c:51:3e:f6:40:
                    bb:2c:b1:de:9e:5f:79:c3:47:86:89:5b:e5:f8:7a:
                    9d:43:8e:a3:db:ac:ef:7a:47:9a:fc:6a:0b:b3:1f:
                    52:5a:4e:44:d8:03:ee:25:67:08:da:6e:f2:47:5d:
                    6b:26:ad:ed:dd:9a:31:4f:7c:5a:a0:57:98:5a:36:
                    ea:2e:46:87:fb:7f:e4:7d:cc:be:84:b6:23:14:ec:
                    0b:af:5b:59:e2:a6:0c:3a:ca:df:02:bc:10:b9:c4:
                    1d:fb:38:4d:0e:24:78:7b:93:88:0b:03:68:72:3a:
                    bd:d2:11:ff:b9:d7:27:75:7a:2d:c7:e7:e6:6e:2c:
                    d6:52:98:cb:84:fb:92:14:9a:24:0e:1f:63:b7:01:
                    19:ab:5d:c6:ae:fa:64:60:20:30:2a:99:bf:b9:a8:
                    79:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:05:54:40:9F:5C:A4:65:AB:0A:1D:6E:D5:59:19:2D:62:C1:38:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0ef8a10-d979-34af-beb5-290f3eb34861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:bf:5f:0e:9e:29:1b:55:6c:3d:60:36:64:ac:44:75:ee:36:
         de:ab:0b:45:0e:e1:b4:ee:f3:e1:b5:b3:fa:3e:10:0b:cc:f8:
         79:2e:ae:94:f7:e0:5e:1a:8e:ce:c8:9b:ff:0a:f6:3d:37:aa:
         96:7c:39:9e:cc:db:82:28:4f:99:e4:44:d0:01:31:a9:6c:4f:
         9c:4a:95:f2:03:b6:4d:51:6c:36:c1:90:60:c2:0c:4a:33:eb:
         a1:f0:db:e2:6e:b3:fd:6a:61:8b:c2:fa:92:46:d6:5a:94:61:
         d5:d5:88:e2:10:a5:a9:04:69:82:f4:93:34:e5:c3:94:a1:e9:
         a4:41:47:3b:94:20:e1:56:10:56:20:32:39:f4:fe:c8:18:83:
         74:eb:d6:9d:cf:f5:96:3b:86:0c:b1:27:1c:8d:27:18:59:24:
         13:c1:66:77:a6:f1:29:18:36:5f:cd:bc:95:2b:68:6e:5e:48:
         dd:d6:8c:2f:6e:6f:31:b5:df:a7:c3:2e:5a:85:9a:40:c0:f0:
         b6:93:30:ba:80:e2:9f:b2:14:44:d6:13:20:27:2f:49:34:6c:
         d6:c0:cf:7d:f7:da:f6:8f:22:57:bc:eb:e4:82:72:6c:38:6d:
         d0:0f:b3:79:cb:2a:7c:78:4c:d4:98:6d:93:c4:ea:eb:8e:e5:
         39:89:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:33:14 2026 by rpki-client