Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa
File:                     c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa (raw, json)
Hash identifier:          7+mKfupVQ1OVW7pJNJffkPpw/tXbTZssJ9XQ2PmH+Jk=
Subject key identifier:   07:A1:A6:15:90:5C:8B:CA:59:0B:96:D8:2C:46:15:42:73:C1:22:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8775355CEE2DC5FC3DB180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33668
IP address blocks:        69.137.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:75:35:5c:ee:2d:c5:fc:3d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=2806251e-d2ac-4bb3-bc33-711cc1bbfb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:aa:96:c3:ce:39:87:f2:a5:c9:33:c0:e1:
                    81:77:fb:21:8f:b1:e5:8a:7c:47:11:17:86:41:61:
                    ee:01:a3:2b:25:4c:ce:fb:18:c2:17:87:d4:c4:ba:
                    e7:18:dc:fd:c5:36:7a:c9:46:c8:39:56:61:30:94:
                    a3:bd:cd:d0:a1:b4:92:43:9f:eb:c5:25:8d:d8:41:
                    24:52:fa:36:14:e4:a4:2d:08:9d:9b:d0:eb:fc:5e:
                    28:21:ac:52:e6:27:7f:26:c1:55:e2:b4:16:76:7c:
                    f6:60:f6:6e:d8:15:c1:ca:8e:64:dd:ed:7b:0a:e4:
                    db:27:9a:3c:6c:2b:0c:7d:98:94:e3:43:38:d6:ae:
                    ca:95:03:25:53:13:a2:61:31:1e:20:67:e1:90:7a:
                    db:74:27:e2:35:1a:92:94:fb:fb:6c:0d:6a:fc:e6:
                    a2:f3:63:b4:4a:24:dd:03:fb:03:80:11:25:61:8c:
                    b0:91:5b:e7:8e:4b:06:5b:5a:4d:f6:ba:be:7e:f2:
                    58:36:5a:3c:30:00:b4:3a:18:e1:ab:90:e7:48:d5:
                    3f:2b:f2:69:86:98:9a:65:c9:39:16:af:64:41:75:
                    c2:63:8a:33:1d:08:d4:7c:ef:71:a7:e9:e2:68:b2:
                    5c:f6:ad:24:7d:0a:0d:a7:f6:09:69:e6:e7:e2:ec:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:A6:15:90:5C:8B:CA:59:0B:96:D8:2C:46:15:42:73:C1:22:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.137.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:87:24:1a:20:a6:ed:30:ae:17:e0:92:b5:a2:03:df:ac:83:
         df:a9:6a:40:00:6a:b8:44:81:d3:0b:b6:40:66:55:e5:46:43:
         26:85:22:59:c5:f7:af:14:fa:5a:2d:fd:fc:f2:43:13:d6:93:
         f5:b8:a4:d9:b1:61:e3:6f:de:12:2e:c4:7c:80:e2:93:e9:4e:
         9b:d9:db:b2:1c:7c:9f:3a:2b:6a:5f:25:39:9b:4b:86:4e:3e:
         aa:6c:de:f4:c6:de:09:38:eb:ff:ff:e9:e9:5b:f0:78:d2:ca:
         42:d3:8a:0f:06:40:7e:09:08:b2:99:c4:2b:6a:ba:53:f9:b5:
         39:e6:73:4f:19:e1:90:74:c8:1d:1f:1c:d0:fe:6d:16:3a:a9:
         20:71:0d:1b:c1:82:13:6e:56:8e:0e:0b:0b:13:75:21:89:07:
         ba:33:8e:20:43:ae:52:39:7e:73:27:c6:31:5f:19:8b:35:90:
         3a:45:1b:05:44:49:4c:8f:52:65:38:32:e8:fa:cf:c5:7f:96:
         79:d2:4b:9b:e8:b2:4f:4b:a0:74:ba:fc:89:47:f9:56:cd:d4:
         bf:ab:3c:89:b6:d6:e9:06:1a:4b:9b:be:b1:e5:5d:ca:d4:28:
         6b:42:c9:68:f6:b3:43:78:f8:37:c7:19:94:c6:1c:02:95:88:
         52:88:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:51:58 2026 by rpki-client