Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9537723-46c4-344d-812b-c4a0a74d438c.roa
File:                     c9537723-46c4-344d-812b-c4a0a74d438c.roa (raw, json)
Hash identifier:          aC/jA/lUmV336wUIJJ1H7VH2AK+zs9g/b3wr6t43kEY=
Subject key identifier:   2F:AF:D0:BB:F7:52:39:AF:58:92:6E:14:05:52:B6:98:65:FB:EE:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87B9C8309BE9E31E947640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9537723-46c4-344d-812b-c4a0a74d438c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33287
IP address blocks:        68.86.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:b9:c8:30:9b:e9:e3:1e:94:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=6080edf7-569f-4d5a-9119-4433de0fe85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:ec:65:58:56:c3:e0:1d:36:09:1f:3f:1d:
                    fb:4e:96:d5:5f:52:b4:c4:e7:64:d4:21:6e:15:53:
                    ee:cd:a4:69:53:08:70:cb:2a:1b:b5:dc:51:a4:9e:
                    22:59:5d:2d:2d:45:fd:2d:82:3c:e9:5b:26:ab:25:
                    48:b2:d4:c7:6b:20:fc:65:e2:f3:ab:82:7b:98:99:
                    3e:df:12:fb:02:df:20:06:26:fa:fa:32:91:b4:f7:
                    68:fe:1a:10:6e:04:32:59:30:ae:86:8f:6c:e2:a7:
                    21:10:14:ab:99:b8:42:4e:15:6f:04:c7:41:66:ae:
                    98:0d:75:c8:e1:ea:d6:28:2e:85:45:da:33:e4:88:
                    a9:1b:c2:57:d9:13:24:93:b8:d8:de:d7:61:9f:de:
                    86:8f:cc:4d:40:7a:3f:e1:b2:09:08:62:78:75:0f:
                    a8:71:78:b0:b0:df:e2:2a:78:8b:74:47:33:42:dd:
                    e2:c1:35:19:71:c1:20:0f:38:09:9a:a8:fc:cd:28:
                    41:43:c1:d9:af:85:c4:e6:e3:d1:54:19:0d:e0:f2:
                    a3:02:4e:5a:14:72:cc:4b:84:e5:a0:15:90:5c:6d:
                    14:b7:76:88:b0:67:0c:d5:88:59:45:20:c0:08:dc:
                    1d:02:86:27:5a:b2:da:6e:19:64:33:bf:77:6f:eb:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AF:D0:BB:F7:52:39:AF:58:92:6E:14:05:52:B6:98:65:FB:EE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9537723-46c4-344d-812b-c4a0a74d438c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b8:ba:d0:37:01:28:32:fc:c2:48:6c:23:1f:65:d7:ad:cb:
         e0:55:7b:4d:9a:ee:45:18:79:ca:fb:c7:ee:e2:77:fb:67:2b:
         f2:96:21:a4:c8:31:44:b0:ee:d4:f9:0b:52:48:54:44:ba:2e:
         6a:30:fc:c2:db:2c:27:26:ab:a8:35:34:8a:bc:e1:c6:b1:cd:
         4d:bc:dc:15:04:09:62:b0:48:97:39:28:75:f9:99:22:e6:58:
         3e:27:cd:fb:0d:01:e5:1b:25:64:e2:79:ab:b4:7d:17:ce:9d:
         e6:92:a6:fc:7f:9b:5e:e3:74:00:28:e8:04:c2:fa:eb:84:37:
         d0:a4:e9:28:28:00:fd:a3:b1:0f:60:3f:29:d2:a1:ed:03:a4:
         62:02:a0:71:bb:ef:df:04:95:13:fb:6c:f0:2f:04:48:39:2a:
         18:cf:98:56:3f:c8:d5:8b:cd:77:08:a4:60:8d:1e:a3:73:89:
         34:72:94:15:d3:69:2b:82:11:b0:bc:60:a9:ab:d3:20:6f:77:
         d7:25:45:af:57:bd:71:ce:b8:38:91:20:be:26:1d:1c:b0:80:
         4c:cf:25:09:aa:ad:1b:80:5a:4c:7c:5f:23:89:1d:d5:dd:41:
         50:e2:07:e8:a4:5c:02:3d:51:4d:c2:d2:f3:20:8d:fa:14:21:
         3f:15:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:38:18 2026 by rpki-client