Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0864714-226b-3d03-920c-79b38414b092.roa
File:                     d0864714-226b-3d03-920c-79b38414b092.roa (raw, json)
Hash identifier:          J0maozda9oPf0x+WmqCqqhMCEi9kLGWGxpHXUcHqLZ4=
Subject key identifier:   84:71:6C:53:48:A0:E2:0D:14:FC:AC:57:5D:28:CE:EB:3F:8E:5F:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100150FB887C4D01EE24D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0864714-226b-3d03-920c-79b38414b092.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        68.62.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:15:0f:b8:87:c4:d0:1e:e2:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=dde28b47-bcbc-449c-9aca-bad16efca410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:d3:aa:ca:48:df:d8:56:bd:e2:9a:38:be:
                    3a:59:7f:48:a5:1c:f6:84:76:d2:f7:9f:78:47:ee:
                    6b:05:85:26:16:ec:80:68:b9:dd:c5:02:80:a0:51:
                    e6:2f:dc:1e:9d:18:43:9d:f3:ed:ae:70:67:4c:cf:
                    c9:16:09:58:22:51:db:40:5d:44:4e:4a:51:77:66:
                    10:0d:87:96:41:e2:ca:59:17:f2:47:a1:42:bd:f2:
                    55:0b:28:02:82:dc:05:92:58:12:38:80:46:84:fc:
                    b2:2a:6f:66:9a:31:6b:02:ee:be:c0:18:43:12:ae:
                    84:49:0c:41:21:9c:08:04:fb:5f:d8:a2:6b:aa:6f:
                    75:6d:b1:47:2e:cd:78:13:f3:8c:d7:d8:40:a8:55:
                    73:82:4d:77:93:06:d3:24:33:73:5f:64:82:d6:95:
                    3f:1f:a4:b0:9d:c0:bf:fc:41:ad:8b:eb:70:22:45:
                    44:6f:ef:7d:25:e9:21:71:6c:32:b4:a6:87:98:87:
                    fc:d7:99:26:4b:0e:c8:1f:50:8e:c8:f6:f1:37:45:
                    67:e2:50:52:58:f3:99:52:7b:c7:da:17:e9:a1:25:
                    41:2e:fa:ec:79:9c:6a:e6:0c:44:ff:3b:1e:29:09:
                    77:8a:a9:bb:10:05:9d:c4:cb:67:81:48:b3:37:bc:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:71:6C:53:48:A0:E2:0D:14:FC:AC:57:5D:28:CE:EB:3F:8E:5F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0864714-226b-3d03-920c-79b38414b092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.62.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:c5:14:68:a3:16:c5:1a:46:b1:c1:24:ee:1b:a4:b3:96:f9:
         13:77:bf:c4:67:7b:ca:ad:ed:5e:41:8a:99:11:1d:d1:04:71:
         b8:78:24:63:f1:bc:f1:21:08:19:9a:a3:5a:86:bd:1d:66:a1:
         1e:01:95:39:3b:9d:7d:6a:d0:5f:23:bd:c6:5f:d8:f9:50:0c:
         e8:ba:1c:0e:59:9d:34:08:c4:be:5d:cf:54:41:bf:d8:c5:c3:
         f7:5d:e7:4c:c0:60:41:81:dc:af:4d:48:5f:ea:87:1e:5a:7c:
         22:51:15:24:a0:03:ef:b0:13:99:6a:a6:df:c6:52:06:83:06:
         40:f3:04:a1:ac:c5:b4:4e:b0:f8:91:b5:7e:a3:c5:66:3f:d1:
         57:e5:d0:cb:5c:34:2c:6c:15:ef:6e:cf:ee:c1:c4:e4:d1:57:
         76:99:28:31:6b:7b:78:4f:33:ff:a4:69:c6:9e:a0:08:0b:31:
         3d:6e:56:b9:25:72:ba:3f:75:d7:41:4b:8f:86:9d:bb:05:68:
         95:c8:d0:08:06:d2:13:3d:52:3b:05:73:38:46:e1:65:70:39:
         8f:18:07:46:c7:d3:7a:09:5e:2c:c8:93:7d:20:5d:74:17:0b:
         1a:16:93:35:55:a6:ea:7f:fa:da:1c:f0:3e:4e:8b:d6:e2:72:
         39:e4:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:40 2026 by rpki-client