Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0f9e443-86b9-37a3-b4c8-6ff2bdfa1819.roa
File:                     e0f9e443-86b9-37a3-b4c8-6ff2bdfa1819.roa (raw, json)
Hash identifier:          SYZgW4L+cZgyTjgiman0K/oulRT34Dj2Jt4UmScAx3U=
Subject key identifier:   31:63:D8:55:39:38:04:35:B8:AB:BA:E7:1D:E6:6A:52:51:BB:16:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863DB8FFF35A65F436107B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0f9e443-86b9-37a3-b4c8-6ff2bdfa1819.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.40.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:db:8f:ff:35:a6:5f:43:61:07:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=f73b10fd-85aa-40ed-b669-a044e15fd443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:90:5a:99:b2:b6:79:da:6a:a7:1c:d5:60:
                    02:2a:d2:a6:96:02:04:5a:6e:35:a1:3a:24:41:37:
                    ba:ac:89:ba:e7:c2:a6:df:98:1f:7d:c9:f9:4e:47:
                    92:70:5a:68:13:89:95:e6:a8:3a:a1:5a:c0:74:a4:
                    17:ac:bb:76:7b:1f:e3:0b:4b:4b:80:88:8f:2a:a7:
                    b6:7e:87:b9:d8:80:cb:8a:86:1b:43:be:a7:f9:d7:
                    94:29:c2:e2:f8:bd:a9:41:7c:08:66:23:a5:eb:46:
                    99:fd:0e:fd:96:93:f2:ee:ca:af:27:b3:6f:61:d3:
                    70:f3:77:11:07:43:3b:d3:c9:bb:c8:2a:70:f9:67:
                    83:ba:a4:16:e7:66:8b:2b:4a:d9:9d:c4:33:0f:2a:
                    6b:37:b0:48:4e:07:e1:8c:20:2c:7d:55:36:db:5c:
                    76:c6:3e:d6:f1:00:21:de:20:6d:30:96:9a:3e:9a:
                    62:17:95:99:f5:85:a8:84:ab:c6:fd:54:2f:f2:37:
                    ce:6b:de:34:58:5b:15:1d:0f:51:c4:da:c5:20:96:
                    4a:e3:db:de:a6:78:b8:2f:5c:5a:af:8d:65:d0:e3:
                    d7:83:dc:3b:fe:40:dd:b9:43:37:11:35:13:1c:4a:
                    d7:8b:5a:74:1e:05:fc:c1:c4:c0:78:cd:6b:06:80:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:63:D8:55:39:38:04:35:B8:AB:BA:E7:1D:E6:6A:52:51:BB:16:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0f9e443-86b9-37a3-b4c8-6ff2bdfa1819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:44:32:37:64:d0:53:20:a7:51:14:95:dd:a3:c4:2a:07:5c:
         c6:4c:87:f2:17:cd:1d:db:1d:b6:21:2e:27:d2:cf:a9:1b:d6:
         9e:9e:ac:2e:34:85:71:79:04:63:23:39:af:14:87:13:72:bd:
         2f:6f:ae:a9:50:58:3d:12:1d:95:a3:fa:79:6a:9c:3a:77:06:
         84:61:da:2c:4d:2e:9c:6d:fe:93:70:c6:a5:dd:ff:b9:2a:04:
         45:f4:77:47:2c:bb:a7:c2:67:e8:e1:1f:90:71:74:27:8f:88:
         55:b1:65:d2:d2:6a:35:7d:e6:c9:48:71:69:7e:4a:6d:71:54:
         c2:a8:8d:42:4a:6b:80:59:b2:80:88:41:b4:af:25:7f:c2:28:
         03:ae:bd:5c:52:86:73:e6:63:60:46:47:67:fa:55:7a:94:bf:
         7a:b3:be:67:95:1d:31:f2:c2:75:dd:e3:cf:17:4a:70:80:c2:
         6a:62:8a:45:63:37:34:9c:62:2a:93:62:bf:44:c4:4e:a1:a0:
         03:40:f1:c4:a2:e7:85:39:b7:95:ba:d0:e2:9d:be:97:96:3f:
         8f:96:4e:75:74:1c:11:ce:c1:d7:69:7f:0c:43:ee:49:4a:fb:
         da:95:99:36:c2:d3:14:30:06:ad:6a:90:b4:4a:28:ce:f6:9a:
         ae:c1:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:04:22 2026 by rpki-client