Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c169d07c-a7ae-3435-af07-eb8199e8c42a.roa
File:                     c169d07c-a7ae-3435-af07-eb8199e8c42a.roa (raw, json)
Hash identifier:          nI/iwGEWalBFA4G/eJQG8sH/8JyWVZeWT5jZeb4O5lM=
Subject key identifier:   F0:EA:C3:B9:1D:79:0F:74:30:95:0A:3A:43:22:90:22:7F:4E:99:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE7BAFD45082E5418391600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c169d07c-a7ae-3435-af07-eb8199e8c42a.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        68.47.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:ba:fd:45:08:2e:54:18:39:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=811d347a-fbc5-41e4-8146-4df305dbe112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:af:a6:f4:4f:97:6a:88:bb:9e:30:98:0b:
                    af:15:cb:b1:d9:1f:8a:48:7e:e2:8d:91:b0:af:0d:
                    7c:de:79:57:15:fd:9f:c7:f3:6f:b6:aa:a0:48:fa:
                    26:e2:c2:e4:f6:9d:da:ca:92:36:5a:0f:21:11:f5:
                    01:0b:e1:d6:5c:70:7f:08:6c:11:69:91:e3:0b:69:
                    91:97:ef:92:59:3d:3f:40:db:b0:18:d8:dc:86:1e:
                    1e:76:97:3a:c0:41:4f:b0:f9:af:d6:02:9a:c4:bc:
                    95:b6:b5:59:72:fa:59:a6:ff:17:fc:6a:04:e9:27:
                    6f:73:1e:63:87:e5:ab:c6:82:5c:7c:b1:56:56:97:
                    33:ac:b0:a5:8e:f4:0b:4e:bc:65:9b:d6:e6:6c:c8:
                    e0:8c:7e:06:d6:c7:ce:88:42:33:21:9e:c6:0f:e3:
                    32:3c:b7:ba:62:3d:d5:d5:89:bc:bc:e2:96:23:37:
                    fd:94:e7:33:32:23:c2:b0:33:54:df:03:2f:76:18:
                    89:e0:42:93:0d:ad:5b:93:41:c1:70:5f:2a:5d:be:
                    41:45:cb:de:a9:5e:1d:e7:43:e7:cc:3d:aa:f3:1f:
                    6e:ed:83:74:29:c3:b3:d2:eb:b1:3d:03:a4:d1:a4:
                    28:7f:d2:38:cb:b4:80:4d:cc:2d:b5:8e:0b:ef:49:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EA:C3:B9:1D:79:0F:74:30:95:0A:3A:43:22:90:22:7F:4E:99:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c169d07c-a7ae-3435-af07-eb8199e8c42a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:af:99:b9:78:05:ac:34:dc:f7:fc:42:cd:82:c7:30:5a:
         9b:df:6c:87:b2:2e:14:64:dd:6d:05:79:49:2e:fb:f7:34:79:
         ea:c7:46:c5:af:f1:ce:fb:2f:63:ca:7c:46:0f:bd:be:45:1c:
         eb:80:59:f9:d5:87:47:3e:2f:68:ba:a6:fd:bf:72:0c:69:98:
         9f:bb:15:d3:b1:74:db:b8:1a:1b:60:3b:ba:53:6f:27:a0:b5:
         49:f2:92:b7:3b:af:d8:84:39:4d:cf:34:98:07:d8:84:4d:3d:
         cb:57:c4:c7:51:ea:79:e4:86:fa:73:12:ed:2f:0d:37:95:90:
         91:24:91:d9:ae:eb:d6:9e:1f:88:7d:4d:eb:fe:b4:c4:cb:15:
         3f:99:e9:b2:78:b8:43:73:f1:63:40:57:c4:92:c2:0b:04:5d:
         0a:94:1a:39:f4:6f:29:3d:d8:ef:dc:cd:a6:c7:cc:14:58:0c:
         4c:81:93:96:bb:3a:a7:a6:4e:3e:09:b7:19:7d:7f:59:c1:d4:
         e0:02:76:ff:87:b9:fc:99:cb:a7:9b:33:c8:d3:22:b5:fb:23:
         9b:e1:85:2b:c2:ba:92:8d:c3:f3:3f:ea:98:47:86:92:d1:92:
         fc:78:9d:de:94:77:d7:67:02:a0:c9:e9:18:df:92:ec:c2:65:
         26:9b:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:57 2026 by rpki-client