Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa
File:                     cf6479c8-89c9-3878-b98f-958d98676384.roa (raw, json)
Hash identifier:          NNL5BvB13dDTNZcPytYhKHwZ6zNo1meygIJJVclU7sA=
Subject key identifier:   DE:54:99:DC:7F:33:45:92:28:D7:09:46:E0:5D:4B:38:19:EC:28:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA7895F70C8D77FBD8CA3FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33489
IP address blocks:        68.86.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:5f:70:c8:d7:7f:bd:8c:a3:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3b29cc39-12c0-4d40-b1e1-271d4a8b88ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:ef:b2:36:35:36:c2:5f:1c:e3:a7:3c:c2:
                    3a:93:4b:9e:34:22:bb:0d:54:54:6c:16:e2:3c:c6:
                    10:78:b5:e8:0f:86:3f:ba:c8:36:96:53:29:29:ca:
                    6b:42:ef:f1:0e:64:46:0d:c0:89:18:05:33:31:6c:
                    26:3b:5c:02:e9:44:df:0f:96:e4:78:f4:28:69:95:
                    ed:3d:69:da:66:94:b7:81:86:74:84:2a:48:f0:76:
                    c9:43:f0:bb:d5:17:f6:fd:cd:5f:6a:be:aa:a4:a0:
                    e7:92:7d:7b:75:19:52:de:06:6b:0a:55:2a:45:ab:
                    9a:08:b8:de:47:8a:a1:95:0e:a8:d0:a1:48:64:b1:
                    46:fd:3f:d7:9c:b9:ca:21:d9:15:42:61:5f:2e:51:
                    51:ea:cb:e7:bb:8b:de:db:52:72:7e:b1:a9:34:a4:
                    b9:6e:94:1e:29:e7:df:29:77:77:f8:2d:a1:ae:a0:
                    ba:4c:bc:46:19:ef:90:54:ee:07:8c:70:2a:f1:d7:
                    0d:90:46:41:b2:be:ea:d1:d7:ed:45:46:55:5a:2f:
                    4b:a2:af:e9:64:ad:da:c1:e9:25:f3:56:80:97:cc:
                    d6:be:da:94:7e:0f:fe:37:84:9a:fa:95:96:57:88:
                    e0:ea:5d:13:fa:12:e7:d3:8b:70:80:60:e9:33:b4:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:99:DC:7F:33:45:92:28:D7:09:46:E0:5D:4B:38:19:EC:28:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:49:fc:0e:5c:98:cc:a7:6f:36:a8:b9:7f:7a:c6:18:03:ee:
         c1:37:48:f5:24:37:93:0e:28:a3:d2:ad:13:b9:3a:5e:ed:5c:
         d5:25:e6:f7:04:eb:4e:66:83:1c:5c:5b:b7:1f:24:67:25:30:
         a2:3b:3a:06:63:36:38:9a:15:86:55:35:f5:89:f4:60:4a:31:
         bc:c0:6a:d2:4e:dc:20:38:6d:e8:d6:c9:7d:84:24:5d:54:1f:
         12:ea:a2:d7:0b:2f:df:04:68:68:93:27:6b:ec:44:10:e6:c4:
         49:3c:e8:38:80:b7:e0:21:f3:5e:2b:5e:69:83:6f:e5:f5:87:
         2a:0e:33:c0:24:ee:4e:78:8f:1f:9a:e3:80:37:e3:a2:0c:c6:
         51:7f:59:36:b2:7d:71:90:0f:46:fc:22:0a:44:70:b2:3e:b1:
         21:6a:b0:39:32:2d:52:d4:9d:5e:a1:0c:a5:f7:e6:d5:e7:b7:
         31:85:4c:04:ff:c0:41:cb:36:5b:f0:32:b3:a4:91:67:4b:ae:
         96:c1:26:e9:6d:69:e8:13:66:11:9c:c5:10:4b:71:24:59:4c:
         7f:25:87:c6:e5:98:19:08:6d:7f:fb:46:9c:e4:68:bf:f9:4c:
         8e:ab:49:28:1c:56:1c:29:1f:0d:f7:91:ed:74:b7:5f:3c:86:
         50:1c:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:20 2026 by rpki-client