Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb5dc9a7-1b7b-37cd-a408-38e1d5fda9e1.roa
File:                     bb5dc9a7-1b7b-37cd-a408-38e1d5fda9e1.roa (raw, json)
Hash identifier:          a5mmk+CHsPPDUfdyPCzYTjwlI4lBmLivgftovLrm7OU=
Subject key identifier:   05:70:5A:2E:B7:EE:FA:BA:07:78:E8:38:A5:C2:29:09:EC:80:37:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA794936B826D991681910700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb5dc9a7-1b7b-37cd-a408-38e1d5fda9e1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33661
IP address blocks:        69.247.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:93:6b:82:6d:99:16:81:91:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b314088b-efb4-4ef8-a344-d196fb84794c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:7b:d4:b5:06:33:67:69:49:19:7d:49:6c:
                    4f:e2:6c:74:8b:46:fd:1f:a9:8b:d6:23:4c:f7:6a:
                    94:25:3f:cb:aa:ea:7e:63:b3:fa:95:4e:8f:c7:ec:
                    b6:78:ae:6b:76:86:b8:70:df:8b:33:60:ed:d2:6f:
                    23:66:5c:11:83:ad:a1:01:c9:bd:b1:4f:b4:40:b5:
                    32:af:e3:5b:60:03:0a:84:1b:01:bc:06:b0:b9:05:
                    6a:c9:c0:91:43:ec:39:7d:cc:45:36:48:f2:20:94:
                    b3:80:8b:62:54:50:e2:b0:b4:2f:8e:8c:dd:0f:27:
                    35:5a:cf:2d:a1:7b:47:bc:7a:ce:33:0c:7c:61:fc:
                    f4:fe:eb:a4:5f:1d:c6:db:66:20:ae:23:68:d6:ae:
                    f9:c2:03:83:a3:b5:90:22:4f:a8:62:50:9f:82:53:
                    63:3c:f1:c7:de:9f:32:71:a8:ed:c7:f2:cd:4a:f8:
                    21:de:0e:21:54:48:8e:b8:1b:29:a1:89:f4:26:63:
                    ae:4a:73:23:5b:3d:79:71:67:8c:af:ce:22:9d:1f:
                    97:6c:19:9e:3a:2d:25:03:84:68:54:10:91:a2:0c:
                    fe:de:59:3d:d5:76:bd:3b:3c:d7:a5:8f:47:5a:d0:
                    7a:3e:c4:8d:ba:b4:31:b2:4f:49:24:f6:e0:a3:9a:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:70:5A:2E:B7:EE:FA:BA:07:78:E8:38:A5:C2:29:09:EC:80:37:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb5dc9a7-1b7b-37cd-a408-38e1d5fda9e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.247.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:97:51:15:f6:cd:93:31:9c:5e:be:28:b3:a0:54:51:07:63:
         a5:2f:f5:e3:40:10:5e:5a:fa:67:e5:3d:36:57:2c:80:cb:77:
         45:bd:61:74:0b:4a:93:89:e8:20:ea:33:83:54:31:8b:04:a4:
         9d:64:41:50:24:50:8a:ed:be:f4:12:9d:f9:65:82:e9:b4:44:
         06:27:11:b9:73:7c:db:6a:1d:7b:05:3f:21:e9:aa:e9:9a:70:
         7f:f7:a7:17:5e:a0:5c:6e:a0:fd:c1:3f:44:e4:13:01:04:3c:
         23:f0:ec:19:56:a5:81:df:c5:de:fa:8f:fb:1d:59:71:ee:da:
         3a:8a:b5:4a:a1:89:dd:42:79:db:ee:0a:a4:b7:80:ef:52:f4:
         fc:79:af:c8:78:aa:a1:41:98:19:37:89:ae:8e:97:c7:e5:57:
         25:12:64:cd:d8:8a:e5:6f:75:44:2d:1d:49:92:12:60:ab:23:
         cf:eb:ca:b2:08:99:83:c2:b1:a0:f1:39:a2:9d:e4:63:e1:3b:
         1b:91:18:68:36:92:22:1d:dd:f4:1e:ae:55:85:9d:62:b7:90:
         f4:60:29:04:ea:1d:f5:01:d9:15:5e:a9:74:4c:59:6b:0f:62:
         9c:3f:56:ef:24:94:b0:8d:3a:d5:7b:eb:ee:a5:28:15:98:2e:
         94:03:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:43:11 2026 by rpki-client