Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec60b41-acd5-304c-b3cd-bf034691be5f.roa
File:                     dec60b41-acd5-304c-b3cd-bf034691be5f.roa (raw, json)
Hash identifier:          rZczh3xDkOp9ZmxbHb+Xn47r5CGJYUPi7jL4/vgVQh8=
Subject key identifier:   39:EF:CB:C4:2F:6D:6E:44:5D:26:7A:4E:35:12:B9:D3:C3:02:E0:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA555A76FF465665212580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec60b41-acd5-304c-b3cd-bf034691be5f.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        67.168.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:55:5a:76:ff:46:56:65:21:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=eee15221-bb41-4525-8fc2-b4e4631709bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:bf:9b:ec:43:aa:15:1a:dd:c5:d3:ed:cb:
                    8b:12:89:91:17:ab:a3:0c:77:8f:b9:25:82:b0:d3:
                    02:35:10:83:0a:21:5e:34:90:3d:20:a4:a3:c2:54:
                    14:7b:27:54:90:0b:3f:4c:3b:17:6a:65:c1:fd:df:
                    40:e1:e5:a7:05:09:da:be:74:f9:6d:46:98:75:d7:
                    65:0b:78:bd:13:81:fe:87:04:ce:4f:0a:83:02:e5:
                    e4:e4:90:e7:ce:ac:0e:87:79:49:99:da:5d:d5:a7:
                    e9:a7:80:5a:2b:b1:97:07:f8:46:d2:9b:1d:fc:bb:
                    71:c5:f4:f6:34:63:0a:37:58:78:9d:b0:21:1e:ad:
                    39:1e:86:29:24:ce:2f:5e:bc:73:99:d1:d1:a0:40:
                    44:70:5e:d1:6f:57:8f:9e:4f:1f:fc:74:70:e6:ec:
                    63:1d:e6:b6:07:d1:59:fa:08:69:92:9d:61:d0:dd:
                    00:31:7e:ca:a8:b7:90:67:1c:2e:f9:13:49:cf:59:
                    df:eb:17:13:c6:30:e8:a1:29:0d:fe:88:97:08:05:
                    86:9d:8d:b9:14:50:12:c1:87:5f:da:27:ae:0a:d9:
                    0e:24:ea:84:b8:eb:63:45:bf:3e:a1:50:39:12:95:
                    71:f0:28:f9:09:55:d8:ab:43:16:0c:e5:e5:ad:ef:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EF:CB:C4:2F:6D:6E:44:5D:26:7A:4E:35:12:B9:D3:C3:02:E0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec60b41-acd5-304c-b3cd-bf034691be5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.168.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:13:35:8e:bf:33:ed:1a:e8:27:89:c4:74:3b:f6:7e:c8:a5:
         f8:43:2b:1c:f2:bf:2f:7d:9a:56:df:3b:de:63:ea:65:fd:68:
         a5:15:d3:72:66:2a:48:a4:cd:89:6b:0c:12:94:9b:52:13:df:
         86:33:34:db:ec:b4:d1:4b:63:05:d7:db:9f:89:86:b7:ca:da:
         37:e1:08:fc:44:66:ac:c6:4d:db:5e:34:2a:6e:a9:6d:6e:3d:
         47:20:a2:6c:50:17:3f:60:7a:37:7b:9d:07:14:d4:7d:09:c6:
         ef:0f:b4:2b:5f:93:b0:af:4a:11:6f:91:d6:73:36:31:17:92:
         b1:50:57:48:5b:50:a6:cb:85:44:3c:61:39:dc:b9:fd:46:6e:
         14:0d:27:d9:be:9a:fe:94:27:fb:f2:5a:db:c1:05:3a:58:d8:
         06:d5:1e:2a:c8:28:f8:f7:24:93:f7:b3:09:ad:b6:00:34:05:
         f2:1c:90:a9:d0:da:0f:84:48:30:7d:4d:11:b7:88:61:1e:7d:
         8d:6e:f1:be:93:33:9d:a3:a7:70:c4:3f:22:f6:57:fe:8c:9d:
         a3:1c:3f:2e:a2:00:26:2c:5f:6f:d3:ea:b3:7f:5e:78:4b:ec:
         19:a6:f6:d9:d0:0b:25:a7:bb:1a:6e:ad:62:91:a9:c5:84:45:
         b7:a9:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:58 2026 by rpki-client