Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e6b677-c68e-3f46-839f-08c75f63f716.roa
File:                     c3e6b677-c68e-3f46-839f-08c75f63f716.roa (raw, json)
Hash identifier:          nerp4+0F2kJSnv34wxkWoD2ak6xIZupkjnXGnmzLBeA=
Subject key identifier:   FB:0D:3A:BE:50:EA:64:87:30:CE:F0:BB:64:C6:2A:6F:87:3F:A1:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86EB69B6CD31498162BEB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e6b677-c68e-3f46-839f-08c75f63f716.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        68.54.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:eb:69:b6:cd:31:49:81:62:be:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=6fa993cf-0b62-4bcc-bb46-9003f784a911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:48:55:03:a6:8e:e7:cd:2b:37:8c:f8:22:
                    f2:dc:e9:3b:25:8a:bb:89:1a:14:18:f5:4a:13:e4:
                    f4:d7:af:55:7b:15:8e:f7:ac:f1:7f:e7:2b:84:29:
                    06:26:f9:47:7a:3f:9d:33:e5:e1:1a:eb:f1:23:f1:
                    7f:60:59:10:13:46:2d:44:ea:d7:bc:f1:46:18:60:
                    a9:b5:cc:f1:cb:05:56:2e:50:db:7a:c1:fb:81:8d:
                    44:20:c4:39:dd:8d:36:c8:34:49:6f:13:1f:fd:30:
                    ec:3b:49:52:ec:5c:d7:b4:45:9d:55:cd:d8:9d:c5:
                    7c:cb:6f:40:90:f1:f5:7a:0f:cb:79:6d:bd:11:5e:
                    b2:9b:dd:a6:d7:4b:36:d3:2b:dc:a9:5b:88:cb:74:
                    f5:b6:e6:48:70:38:ae:75:81:bb:f7:a8:df:01:29:
                    f3:f2:c4:04:e2:0a:1d:07:c1:6a:27:2f:9f:f1:a6:
                    a3:e6:9d:f7:40:db:de:f5:73:7f:5f:67:fc:89:30:
                    6b:b8:c9:ce:bd:bb:7d:b7:97:f4:6f:b1:de:99:f8:
                    5d:06:1c:e7:c7:dc:7b:63:f3:1f:bc:49:ee:78:8b:
                    94:cc:0c:f4:ef:3b:2a:95:1c:35:32:32:dd:29:7d:
                    be:4c:74:49:d4:e4:62:a8:3d:58:81:6e:58:f5:d7:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0D:3A:BE:50:EA:64:87:30:CE:F0:BB:64:C6:2A:6F:87:3F:A1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e6b677-c68e-3f46-839f-08c75f63f716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:08:7b:11:c0:24:64:6e:13:6e:f9:1b:cd:bd:c9:15:1a:
         2d:57:f1:ad:27:a6:41:97:61:3e:cf:14:dd:4d:51:2b:58:c4:
         5d:90:dd:5f:02:da:e8:b0:dd:bf:c1:0b:93:c2:5b:6a:d3:e3:
         2a:6e:24:5a:78:cc:9d:a9:2d:96:a9:32:18:8a:d3:5a:f7:4b:
         a7:23:5d:15:a2:fb:18:06:a1:65:e2:e4:90:bb:b0:41:46:3e:
         8b:c8:7a:4f:db:af:99:6e:c5:92:7b:16:5c:4b:a5:9d:a1:7e:
         38:54:95:5f:e5:e2:76:f0:a4:4c:32:f0:10:8c:bf:0a:05:bd:
         59:ca:91:74:96:24:8c:31:f1:ce:6a:e8:ad:15:32:fc:80:3a:
         d0:46:ed:0f:cf:e0:9d:4b:47:5d:58:1b:d6:f4:52:a1:4f:d1:
         ee:93:5d:dc:44:1e:27:13:4e:1e:c7:fe:8f:db:8f:ba:81:cb:
         12:23:65:0c:45:ce:23:b7:92:a6:ea:da:1f:f4:04:f0:4c:bb:
         b3:d1:61:c4:4d:6a:cb:10:d5:e6:f1:11:58:d7:a5:2e:38:2d:
         f4:be:51:c9:af:4a:e9:2f:30:bb:5d:01:9c:39:f8:e3:e6:f2:
         26:4b:2d:b7:31:b8:a1:11:9c:5f:15:d9:e7:2b:ff:c2:e6:4d:
         4d:57:8c:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehutpts0xSYFivrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
NmZhOTkzY2YtMGI2Mi00YmNjLWJiNDYtOTAwM2Y3ODRhOTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtBIVQOmjufNKzeM+CLy3Ok7JYq7iRoUGPVK
E+T0169VexWO96zxf+crhCkGJvlHej+dM+XhGuvxI/F/YFkQE0YtROrXvPFGGGCp
tczxywVWLlDbesH7gY1EIMQ53Y02yDRJbxMf/TDsO0lS7FzXtEWdVc3YncV8y29A
kPH1eg/LeW29EV6ym92m10s20yvcqVuIy3T1tuZIcDiudYG796jfASnz8sQE4god
B8FqJy+f8aaj5p33QNve9XN/X2f8iTBruMnOvbt9t5f0b7HemfhdBhznx9x7Y/Mf
vEnueIuUzAz07zsqlRw1MjLdKX2+THRJ1ORiqD1YgW5Y9ddu5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPsNOr5Q6mSHMM7wu2TGKm+HP6H/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzNlNmI2NzctYzY4ZS0z
ZjQ2LTgzOWYtMDhjNzVmNjNmNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDbvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHxCHsRwCRkbhNu+RvNvckVGi1X8a0npkGXYT7PFN1NUStYxF2Q3V8C
2uiw3b/BC5PCW2rT4ypuJFp4zJ2pLZapMhiK01r3S6cjXRWi+xgGoWXi5JC7sEFG
PovIek/br5luxZJ7FlxLpZ2hfjhUlV/l4nbwpEwy8BCMvwoFvVnKkXSWJIwx8c5q
6K0VMvyAOtBG7Q/P4J1LR11YG9b0UqFP0e6TXdxEHicTTh7H/o/bj7qByxIjZQxF
ziO3kqbq2h/0BPBMu7PRYcRNassQ1ebxEVjXpS44LfS+UcmvSukvMLtdAZw5+OPm
8iZLLbcxuKERnF8V2ecr/8LmTU1XjHo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:20:59 2026 by rpki-client