Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f131ffac-4eb1-348d-a2ca-330770e9f0bf.roa
File:                     f131ffac-4eb1-348d-a2ca-330770e9f0bf.roa (raw, json)
Hash identifier:          L+SZAcM3zgDDF+5YY1vcot99Ftgn2ubMD7BU3sEZTxg=
Subject key identifier:   75:96:FB:DD:DF:1A:C1:C4:F1:97:32:65:22:C9:B7:21:1D:3D:15:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8629A8754A9B99BBA608180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f131ffac-4eb1-348d-a2ca-330770e9f0bf.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        107.5.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:9a:87:54:a9:b9:9b:ba:60:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=09c62b00-e2db-4026-b25f-35fbe2c97cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:21:13:c5:5d:e6:23:e1:39:ff:b6:dd:36:
                    50:33:db:c9:f5:4b:9a:b5:c7:12:f9:6c:22:2a:dd:
                    b7:72:a7:4d:46:f0:a4:dd:3f:65:e3:f3:3f:96:f0:
                    0d:bd:3a:ca:6b:e4:1b:a9:94:d3:b6:89:50:ca:3f:
                    4a:1d:0f:48:96:79:9a:f0:88:e9:1d:e3:72:aa:e3:
                    43:b1:cc:92:0f:ce:a3:73:b8:e7:fc:ea:c6:99:50:
                    dc:77:70:ec:ea:5b:f8:75:de:50:15:35:51:20:fc:
                    bd:b3:cb:79:bd:82:10:87:27:84:20:2a:1e:87:17:
                    52:7f:8e:52:8c:d6:44:47:15:15:6a:fe:5b:8b:e3:
                    4c:8d:38:9b:bf:fe:e1:27:93:eb:01:8e:06:cb:3d:
                    46:e2:9f:d4:f7:f5:d8:b4:08:2b:f9:5c:ba:e9:59:
                    72:71:5e:67:4c:2e:56:c2:91:b8:9c:c3:c6:42:60:
                    c3:8b:97:ba:5b:c0:7e:c0:c8:11:49:82:94:a9:51:
                    31:6f:1f:e4:0d:bb:e6:0a:f5:e8:8c:3b:12:8d:1b:
                    49:e3:0d:51:c2:65:7a:6b:ac:ee:07:02:25:99:ba:
                    0b:1c:63:9f:91:f3:d4:c6:d6:73:42:25:5b:77:3a:
                    4a:44:84:f0:f5:39:4e:e8:3e:0c:5a:35:ff:c4:4d:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:FB:DD:DF:1A:C1:C4:F1:97:32:65:22:C9:B7:21:1D:3D:15:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f131ffac-4eb1-348d-a2ca-330770e9f0bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.5.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c0:75:27:e0:98:f1:44:58:c1:be:e9:01:39:35:85:49:5b:
         36:8f:32:42:cb:b2:00:b0:0c:b0:08:8c:cd:35:41:f2:4f:36:
         c4:f9:32:8e:48:20:a1:77:7c:b4:f7:99:5a:72:b6:c2:91:f2:
         78:08:29:d9:ad:33:9d:c7:aa:7f:ca:68:64:26:47:22:ce:ce:
         bc:a3:e2:ba:75:60:50:77:d5:98:6f:bb:62:df:47:a3:e7:b6:
         32:b6:58:49:15:20:b0:e8:7a:12:90:d0:92:1e:06:20:44:b5:
         ed:2d:7c:98:0f:b8:ad:c1:a2:3d:1d:2b:9e:86:43:c1:a5:85:
         e0:f6:c7:6a:f4:81:37:dd:18:aa:c7:8b:b9:84:96:a4:43:00:
         7a:d4:de:41:dc:0e:5d:88:9b:9d:53:26:48:18:de:36:2e:e6:
         24:7f:1f:f9:7a:9c:1b:c6:c4:99:37:d2:68:a5:37:5f:b5:34:
         ec:41:b1:ac:a8:03:9c:7a:a1:d5:6b:d4:3b:c1:dd:ab:ab:cc:
         25:46:be:1f:87:63:f0:87:69:16:e2:26:17:69:85:3d:76:e4:
         a1:e0:4e:34:71:43:3b:19:28:d6:76:2a:12:d0:ae:b3:ce:29:
         68:16:46:9c:e4:3d:d1:0f:58:97:64:e8:b1:07:4d:19:33:5f:
         95:bb:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:07:03 2026 by rpki-client