Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2102343-082a-3bc2-911b-1459d1c2b4e7.roa
File:                     c2102343-082a-3bc2-911b-1459d1c2b4e7.roa (raw, json)
Hash identifier:          ZZ3zyJtTQ5We2zOm+mUg503UwB/tsQ/xrIgEbEEbbQw=
Subject key identifier:   F8:5C:FB:05:BD:CC:89:41:AD:F6:B9:17:12:F0:7B:37:81:0C:88:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC54BAF98D9E1841781940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2102343-082a-3bc2-911b-1459d1c2b4e7.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        69.244.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:54:ba:f9:8d:9e:18:41:78:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=9de0091e-503d-489c-8965-c5995bbf8e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:70:be:bc:33:80:d0:81:8c:d5:b1:4a:15:
                    01:0f:1f:b7:c6:cc:eb:10:b3:4d:94:dc:c5:1d:a3:
                    99:a2:cf:21:b9:6d:b7:63:e1:b8:fd:c2:ba:23:4f:
                    3c:c6:4e:24:e5:14:8f:00:4b:ab:a7:3c:86:b4:83:
                    ef:f5:b0:fb:28:c9:59:4b:54:a5:95:76:93:fa:39:
                    57:03:d6:88:f8:4c:63:ca:d1:a1:6e:fc:d0:fe:b0:
                    92:c5:f0:16:ae:ce:82:67:59:8c:8c:82:7a:7c:3a:
                    9d:05:fa:c2:a7:c3:31:ee:83:a9:2e:7d:72:55:b8:
                    f1:f9:79:95:c3:94:4b:86:74:ac:ca:bf:23:4a:a1:
                    17:83:be:2a:23:fe:d1:6a:57:59:ec:bf:c5:46:53:
                    cc:4f:af:aa:49:3e:55:fc:70:f0:1f:6c:51:fa:1f:
                    76:ea:85:3a:b2:31:8f:a8:ff:69:20:2c:d4:ee:55:
                    77:6b:d6:b7:7c:3c:0a:e7:c2:6e:9b:0c:71:51:27:
                    be:d8:57:10:10:7e:bd:65:e8:42:93:ac:cd:82:c7:
                    f2:8e:a6:48:c6:c2:54:1b:3f:51:0b:35:40:53:dc:
                    ed:e3:a7:ca:6a:f0:56:95:8f:a6:03:f4:16:23:68:
                    c4:d2:29:25:5f:f5:eb:1d:14:80:e2:af:fa:5d:00:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:FB:05:BD:CC:89:41:AD:F6:B9:17:12:F0:7B:37:81:0C:88:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2102343-082a-3bc2-911b-1459d1c2b4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.244.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:a0:0c:3a:14:dc:6d:d3:83:09:3e:ce:ca:11:ff:c8:33:
         49:c6:c2:e4:a9:af:ea:4c:77:bf:a4:6e:96:96:8e:76:da:85:
         c5:c6:8a:32:31:3a:9b:d8:94:99:f4:8d:e8:43:8e:9f:1e:64:
         96:55:13:46:58:c4:e9:bb:be:b3:a4:f4:cf:3e:f1:e5:2c:f8:
         bd:be:cf:e7:74:c5:ca:3a:1d:7e:0a:6d:d3:7c:9f:aa:83:bb:
         00:94:43:20:34:fd:a2:f7:60:33:d3:46:11:27:3f:11:53:ce:
         6d:a9:02:fe:95:f0:4c:81:5a:e3:a9:f4:50:c5:85:2e:76:dd:
         ee:52:c1:0f:fa:e0:bd:97:5b:68:4d:de:72:d3:c0:83:2d:b4:
         35:80:4f:a6:33:5c:a6:01:76:ed:85:be:5d:80:2f:75:05:25:
         cc:63:7e:d1:f3:82:4a:3f:60:3f:87:af:a7:d1:58:4b:08:2c:
         8a:43:35:91:7c:99:9f:7c:e7:13:c4:87:b5:3c:60:76:3a:24:
         09:35:68:bc:46:36:55:02:0d:a7:76:bd:5f:52:9d:32:c8:0f:
         8d:20:3a:9d:6b:cf:d7:aa:76:d7:14:32:2f:70:8b:9a:55:f7:
         07:a6:dd:06:25:c7:65:c8:b7:bc:db:fa:05:6a:bf:d8:7f:6c:
         64:fd:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:38 2026 by rpki-client