Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f6cf8f-cf92-3e3a-9597-011b59d60be8.roa
File:                     f8f6cf8f-cf92-3e3a-9597-011b59d60be8.roa (raw, json)
Hash identifier:          Y+BvjN1s1QJfWG9GPSs2xs52DWoxTMSkoLKTJgjzr80=
Subject key identifier:   69:22:F8:2D:19:2F:BC:35:F2:EB:2B:6A:FE:5E:7A:7F:D7:B0:CE:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5820FAB17C59F71D176280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f6cf8f-cf92-3e3a-9597-011b59d60be8.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        68.54.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:20:fa:b1:7c:59:f7:1d:17:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=6fdc16f9-22cd-4cb4-9aee-dd24957b9fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b3:2d:fa:23:45:73:36:9c:d7:52:68:50:48:
                    4a:b8:ff:21:8c:a0:e0:fd:33:4b:77:a4:47:9b:46:
                    7c:4d:4a:15:8e:0d:90:9f:6a:97:7d:b1:bb:f3:fb:
                    0b:53:c8:6c:22:86:79:d6:55:c4:eb:d5:4e:03:11:
                    83:3c:a8:67:c7:55:88:41:41:48:ee:d8:4d:dd:03:
                    63:1d:f6:e3:a0:98:fb:87:09:3a:2c:73:77:3b:a2:
                    cb:c0:f8:0f:78:a8:65:e9:7d:40:3c:45:fa:c1:7a:
                    7a:a9:42:34:49:50:25:cd:79:46:a6:61:38:51:b3:
                    83:a0:1e:b5:73:79:3a:76:57:db:1e:b8:55:24:17:
                    d3:cb:08:a7:f1:d6:34:a6:7c:1b:e4:b4:6c:1e:47:
                    83:60:7a:3d:67:20:6f:a7:1b:f6:fd:5a:c9:b2:53:
                    88:a3:9c:ac:bb:8e:51:4f:2c:9e:99:3d:d7:aa:8d:
                    33:b8:61:e9:76:13:e0:20:66:55:2a:4f:b1:f9:1a:
                    a9:ea:a5:b4:8c:e8:98:34:9d:aa:8b:14:5c:73:04:
                    0c:74:23:f0:c0:ee:56:ee:20:9d:5f:94:8c:af:b5:
                    bd:46:11:0c:f3:c5:90:f4:da:49:d9:63:9b:db:64:
                    5e:4e:f1:65:b7:72:8e:9c:c8:e1:25:d8:27:1f:00:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:22:F8:2D:19:2F:BC:35:F2:EB:2B:6A:FE:5E:7A:7F:D7:B0:CE:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f6cf8f-cf92-3e3a-9597-011b59d60be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:5d:de:e8:ed:e3:86:a6:30:ab:99:0b:87:b7:a6:cc:ed:f9:
         c0:4a:31:e8:8f:dc:ee:9b:97:7a:e4:2b:d3:a4:b5:dc:fb:0e:
         40:79:2b:60:60:95:bb:44:c3:5d:c8:e1:46:a3:e9:e3:61:1a:
         e2:f7:29:c4:dd:ff:0d:78:f7:b9:8a:29:77:84:55:b5:91:62:
         d0:92:25:af:c0:80:d7:16:63:54:de:95:17:da:07:de:1b:07:
         64:a5:ce:00:d6:df:46:2e:8b:ae:3b:35:f6:4e:b3:69:c3:40:
         2b:e6:a2:01:c4:c6:05:30:4e:ff:ac:e2:f6:a8:02:b5:a5:9b:
         5a:a2:ea:25:e0:b8:7b:85:b3:20:43:eb:8d:dd:3d:87:e6:f1:
         c6:4a:88:0a:50:b5:41:a4:42:b4:8d:f2:f2:39:a3:5b:c3:a6:
         7c:22:c2:ab:b1:6d:e9:6c:f5:9f:17:7e:0f:81:c9:bc:aa:fe:
         de:08:84:61:ff:32:81:62:b8:94:6f:8f:15:a0:35:6f:45:b4:
         d9:4c:d1:ee:5d:ab:6d:56:45:28:86:0c:cf:e8:8c:5d:75:fb:
         91:c5:c1:17:a9:c3:23:75:77:50:4d:b6:d5:4b:e1:14:0d:94:
         ce:fa:fa:3e:26:dc:5a:bd:a8:64:92:ec:e1:f8:d1:bc:67:50:
         9f:95:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:15 2026 by rpki-client