Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbd401cf-7f15-3d16-ba53-35610af0887b.roa
File:                     cbd401cf-7f15-3d16-ba53-35610af0887b.roa (raw, json)
Hash identifier:          VwI+NmZbvKbC81k0Vb/cYmZK2Ihx4yOxseGiJYIyh+A=
Subject key identifier:   0C:83:E2:82:57:BE:AB:72:A2:52:E3:CA:18:92:8B:F1:33:5B:F8:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981BEDCB3ABA718B8F31E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbd401cf-7f15-3d16-ba53-35610af0887b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        68.47.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:be:dc:b3:ab:a7:18:b8:f3:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1404e2d9-91c6-4d13-bfb1-b67395e0d9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ab:f3:ff:66:90:e6:8a:72:2f:7d:d2:27:db:
                    4e:27:a4:11:18:0e:7c:b9:89:5a:6b:39:f6:41:9f:
                    bd:46:6b:54:ad:85:3b:ea:d5:2e:63:11:70:3a:a5:
                    f3:a8:fc:91:c3:ce:38:ed:83:17:28:17:0a:8f:d7:
                    0b:5d:c6:19:c2:5d:88:cf:af:7d:13:b0:da:5d:bd:
                    b2:ad:9e:c1:78:93:e0:41:e3:73:ed:bc:b6:6e:75:
                    25:f1:dc:d5:df:47:59:1a:6c:24:ec:9d:3d:f1:20:
                    79:fa:19:27:60:65:52:f9:bc:e7:d5:9e:6f:cd:38:
                    1e:ae:89:d1:47:14:70:a4:b0:11:ea:a4:cb:59:9a:
                    17:de:8a:ab:5e:dd:b5:59:f7:1e:e1:6c:0f:03:ec:
                    3a:31:f0:25:e9:75:56:34:fb:9a:75:23:7e:42:c9:
                    99:a2:22:f1:9e:76:e5:39:cc:b5:dd:ad:f0:06:96:
                    5c:21:b1:29:b8:ec:4b:22:b3:89:c7:ae:4b:f1:3b:
                    bd:00:f9:a3:d4:54:43:60:de:4c:c4:e4:2a:e8:2d:
                    ec:eb:dc:02:6b:32:a5:98:63:ac:e4:88:88:b2:8a:
                    a3:15:f6:55:c5:88:35:91:17:06:76:60:98:96:93:
                    4d:f0:e6:a8:5d:88:2c:47:16:29:7f:aa:fa:e2:cf:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:E2:82:57:BE:AB:72:A2:52:E3:CA:18:92:8B:F1:33:5B:F8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbd401cf-7f15-3d16-ba53-35610af0887b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:82:10:b6:4e:df:e1:15:f6:aa:c3:a6:84:de:95:17:20:14:
         86:97:a0:d7:19:57:5a:df:f1:1e:cc:6e:b9:b6:23:bf:ca:2e:
         67:2a:e7:42:d6:99:93:b2:cd:57:0a:fe:b7:40:fe:43:03:0b:
         6f:f3:64:e7:25:6c:41:b8:6a:21:b6:d9:37:ef:07:df:c9:77:
         44:a0:8a:ed:48:1c:77:b7:88:05:ce:c3:8e:9e:49:c7:f6:73:
         ef:e7:17:8c:8f:3b:be:f5:b5:76:f7:f4:ae:af:19:80:f9:04:
         03:19:2d:1d:57:ff:a2:52:27:97:e1:7d:bf:f0:e6:60:53:ed:
         35:9a:85:ea:95:91:31:cd:e7:7b:03:b1:54:fb:c2:e4:fd:81:
         3f:16:13:4c:13:60:59:3f:02:68:38:24:57:41:c6:94:a2:90:
         92:43:44:8b:36:1b:28:5c:bc:e4:e6:19:e2:b3:09:f6:40:06:
         4b:11:3c:38:bf:45:49:50:e0:d7:58:75:01:63:90:5a:6d:24:
         28:1b:65:09:df:0c:3c:3f:61:f7:44:24:55:f0:86:87:76:89:
         b8:6b:e9:40:21:eb:a8:86:55:bf:00:4f:ed:39:55:7a:86:25:
         4a:d4:e3:cb:45:66:94:8a:ae:38:10:c6:02:ec:8c:30:a4:22:
         7d:96:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:55:06 2026 by rpki-client