Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfdd24a-ce16-3ee9-bd24-05be211d8447.roa
File:                     ebfdd24a-ce16-3ee9-bd24-05be211d8447.roa (raw, json)
Hash identifier:          UnKr2ETYVwjkdOUXDSqV9fLPep02vO5IggYQughGYA0=
Subject key identifier:   D1:62:2B:F3:69:51:B5:00:9B:C3:13:A6:1E:0A:39:AD:6C:C1:30:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA794CCE3985A5C8D7092CC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfdd24a-ce16-3ee9-bd24-05be211d8447.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33661
IP address blocks:        69.138.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:cc:e3:98:5a:5c:8d:70:92:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=47ad0067-1615-477c-b76b-1cdf92603598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:95:43:ba:3a:8b:15:bd:0a:17:c6:f9:7e:
                    07:14:e7:9e:14:88:41:08:81:1d:b8:cc:10:b4:1c:
                    62:ea:3d:40:b6:08:42:06:40:db:f2:d4:b3:59:97:
                    16:e4:d8:37:81:ae:7c:26:19:72:f7:af:f4:5d:b6:
                    d4:45:b5:f5:ed:0c:76:a1:f3:9f:17:77:ab:b4:f8:
                    cc:b9:55:cd:fd:db:1f:f6:72:a9:bd:2e:4b:4f:5d:
                    81:1f:90:0f:2d:54:da:93:1c:e4:a3:2c:f8:f6:3e:
                    30:66:a4:7c:9b:7d:e8:cd:e4:f2:df:6b:0e:81:14:
                    0b:82:50:e8:4a:fd:73:37:e7:a0:4a:36:68:ca:ef:
                    14:23:88:e8:4d:00:d8:61:f1:59:77:0d:30:74:6d:
                    92:f5:06:36:08:c9:2a:55:a2:12:9e:e3:cc:59:ae:
                    08:66:5c:6d:37:f5:dd:75:6e:c9:07:99:8d:a9:cf:
                    21:38:58:17:d6:fe:04:4d:65:b7:03:3e:08:90:a5:
                    a5:8c:36:6a:3b:0c:11:96:87:a2:70:33:b2:f1:4b:
                    f5:25:a5:f9:33:28:50:1b:2c:ef:de:ff:de:02:9a:
                    7e:15:ce:17:45:ac:e5:d0:57:48:2f:d7:53:2f:8d:
                    95:79:30:ee:bd:10:64:11:8f:41:a9:d6:fd:c2:8f:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:2B:F3:69:51:B5:00:9B:C3:13:A6:1E:0A:39:AD:6C:C1:30:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfdd24a-ce16-3ee9-bd24-05be211d8447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.138.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:b7:4e:5e:06:12:96:a4:80:84:ea:36:26:38:c1:ec:51:
         39:86:99:95:9a:14:b6:f8:7f:4b:83:09:c5:0a:16:b0:25:3a:
         43:0c:d5:e4:16:ad:3c:50:b6:95:a7:26:77:c3:88:f4:2e:68:
         a9:10:2a:7e:8f:20:2f:09:2e:89:42:97:4d:e5:fc:be:6c:ce:
         cc:c6:5e:ec:f2:7e:71:e3:57:9f:ad:66:18:8f:db:13:c7:4b:
         41:8f:ed:0c:7b:f3:04:07:58:be:36:97:73:d3:03:05:08:c8:
         9a:b2:5f:2c:83:f4:89:91:60:92:8d:76:09:e1:19:b1:11:6f:
         f6:e8:3d:7c:85:1c:7a:cb:bd:58:5b:84:28:9d:e1:af:40:a4:
         78:11:37:55:9d:24:f6:d7:ea:56:01:a0:5f:ae:2d:78:de:f9:
         5b:89:a2:1e:1c:68:3d:3b:8f:fd:62:cb:23:bd:e8:70:b7:81:
         97:3d:55:69:48:3c:24:c1:15:dc:a3:82:e7:bd:c2:33:99:e6:
         c0:9d:50:bb:04:48:a3:df:43:e5:b5:de:c3:77:48:e3:8d:ad:
         7d:49:d1:b4:a5:5c:bb:02:df:d2:72:1f:2e:97:0e:0e:de:e5:
         a7:fd:0f:b0:00:3e:47:7b:92:6b:4b:8e:09:07:9d:0b:5a:18:
         69:38:99:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:51 2026 by rpki-client