Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0752023-de79-3994-a9ce-e4641e5b44ae.roa
File:                     d0752023-de79-3994-a9ce-e4641e5b44ae.roa (raw, json)
Hash identifier:          WVjJdM9GO4gTWAPXrOss5Y2FJbMBCHpyH95cRP4soRk=
Subject key identifier:   B3:B0:57:9C:BD:89:AF:59:65:AF:22:A7:9C:16:8A:5C:3D:CA:01:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB07AA16B5DC006FA4D000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0752023-de79-3994-a9ce-e4641e5b44ae.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        68.34.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:07:aa:16:b5:dc:00:6f:a4:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=978cf8b6-8633-4248-84c6-858f39bd862f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:b8:f8:41:0a:74:c6:bd:34:23:02:4d:2b:
                    0c:ab:84:49:86:21:c5:7a:fb:48:70:85:1a:78:1f:
                    06:33:6f:da:7a:fc:fc:94:ee:a8:e5:f6:de:48:10:
                    81:b0:50:45:d4:61:f9:d6:07:b6:26:65:34:c4:43:
                    47:49:1c:97:8c:49:55:9b:e9:c6:e6:47:c1:b1:e9:
                    b2:e7:f9:78:0f:2d:b7:73:76:e9:59:4b:77:27:95:
                    5c:b1:26:11:12:e1:ed:ee:1f:08:90:20:60:03:da:
                    05:ee:94:b5:ca:0f:c3:28:bf:4c:6c:7d:60:b6:a3:
                    53:75:7e:a7:87:70:03:8e:7b:c1:73:8c:7d:ee:cc:
                    e4:b5:6f:5f:a5:a8:4f:50:ea:e6:d7:5d:6f:7c:10:
                    40:ad:08:25:96:d7:7a:4f:8a:89:f7:74:6c:36:50:
                    a2:8c:91:7a:a4:d2:c1:f2:2a:e5:33:7b:c3:04:2d:
                    c6:bb:ec:a3:c1:57:7c:62:3f:77:76:48:ef:a4:47:
                    97:52:67:94:c7:31:0c:94:8c:03:7a:a0:36:04:bf:
                    51:9d:e2:65:3a:a8:e8:9b:b6:06:d6:3e:34:70:a7:
                    bb:66:cf:ae:e9:7e:f9:c7:29:bb:6d:7a:74:a4:4c:
                    87:4c:7c:e4:7e:fb:c3:4b:8e:c6:04:09:68:2f:9f:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:57:9C:BD:89:AF:59:65:AF:22:A7:9C:16:8A:5C:3D:CA:01:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0752023-de79-3994-a9ce-e4641e5b44ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:47:42:e1:7e:9b:cc:9f:d7:51:8c:c4:21:c3:b6:7e:a1:
         8f:27:5a:00:05:dc:de:67:85:a7:16:6c:64:d0:ff:56:06:ce:
         97:91:4d:5a:f1:82:f7:dc:9c:3c:23:e9:a3:38:af:36:e2:38:
         de:a6:1f:c6:44:fe:5b:f7:ec:3d:fd:6a:c8:fb:a5:83:27:e4:
         8f:7d:f3:b6:82:8e:0a:64:aa:31:95:ff:14:5f:aa:f1:a1:00:
         af:85:20:90:59:9c:80:ca:99:f1:64:f5:ef:42:19:f4:3e:ce:
         2d:d1:c6:24:93:da:34:0e:b8:1f:8f:76:a4:38:64:71:50:91:
         c7:3c:5e:7a:47:5d:c6:c4:82:a6:9b:9c:a2:49:a1:ef:21:37:
         e4:84:90:75:62:66:36:81:cc:0e:c9:ef:92:89:fa:3d:17:20:
         2c:93:a2:da:9c:e7:3d:90:6e:6a:ba:78:48:47:a4:c8:cd:0b:
         d0:ce:0a:8b:87:10:62:24:33:46:03:35:bb:73:44:4f:4b:4e:
         2c:55:23:06:51:30:d9:b5:cc:65:6f:0b:7c:2f:c6:9d:af:19:
         9e:b6:13:95:a9:f7:3a:03:71:85:2a:f3:fd:7e:df:a4:9c:ab:
         86:a2:6d:cd:9b:c7:f0:f7:c7:e5:dc:85:b0:15:a7:8d:ec:8c:
         22:2a:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:02 2026 by rpki-client