Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97a206d-2e75-327a-a4b6-a6dc5a6bf942.roa
File:                     f97a206d-2e75-327a-a4b6-a6dc5a6bf942.roa (raw, json)
Hash identifier:          9p3D9xbMQj0HHUeTflV6obO0pY5hTa3ZnZGzEC6rzaI=
Subject key identifier:   AD:F5:10:F5:3F:88:DD:57:EE:46:E0:0F:B8:94:64:20:B9:4E:41:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78A582E1FBAC01657408800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97a206d-2e75-327a-a4b6-a6dc5a6bf942.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13367
IP address blocks:        68.46.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:58:2e:1f:ba:c0:16:57:40:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=557a5250-6a11-438f-bb4b-c9e59fa4f3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:d0:aa:4b:3b:6c:e4:a6:72:d9:f7:ea:4b:
                    15:f9:c9:43:82:91:7d:87:00:5c:03:66:93:61:fa:
                    ff:8a:d1:24:a5:61:dd:18:e6:d6:64:a9:3d:e9:97:
                    38:fb:16:69:6d:67:5f:72:91:78:57:d6:9b:48:b4:
                    48:76:b6:a7:00:8f:6f:de:38:a7:c2:d9:99:d1:7a:
                    67:e0:ac:8f:ad:5d:7b:18:8c:be:d0:21:35:9f:31:
                    fb:77:d8:34:5a:96:7b:6b:00:c1:bb:2c:81:8e:cd:
                    e6:8e:8d:15:13:c4:96:00:54:8c:22:28:6a:44:72:
                    a3:00:aa:9e:61:25:58:67:cb:22:c9:b8:47:a4:43:
                    48:79:ca:7b:59:d7:a6:53:34:d4:0a:63:d1:11:26:
                    b4:2e:ef:ba:ba:bc:52:7f:10:b1:35:c2:4f:29:5f:
                    56:18:95:3a:d1:1a:4f:1b:a0:97:99:8f:13:ec:f9:
                    b0:95:3e:51:3a:16:6a:57:14:4d:3b:1e:28:d5:55:
                    7b:99:6c:13:1e:4e:24:19:0a:44:26:cf:60:c5:2a:
                    61:7c:72:22:42:6d:0f:0a:14:56:e5:80:30:c3:cd:
                    d7:00:c8:e0:99:67:60:3d:0e:c2:56:75:79:ec:a3:
                    72:b1:51:ee:8e:0f:35:13:73:b9:78:6f:46:0b:09:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F5:10:F5:3F:88:DD:57:EE:46:E0:0F:B8:94:64:20:B9:4E:41:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97a206d-2e75-327a-a4b6-a6dc5a6bf942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d6:4f:d7:6f:38:d2:bd:9e:03:6a:01:48:66:02:58:bc:ac:
         a6:b5:4a:8c:1a:4c:ac:1a:60:2a:4f:0a:7a:c2:59:53:21:4b:
         6a:91:c4:cd:f8:10:8d:05:53:79:82:57:66:dd:5e:45:96:56:
         50:e0:6e:91:25:89:cc:2d:be:36:54:44:86:80:35:fc:ff:86:
         e9:19:8c:63:a3:ca:4c:d7:bf:19:be:3c:57:f1:c3:07:9d:7b:
         eb:ac:cb:c5:aa:dc:ca:db:5a:f2:69:88:0f:7a:4e:cb:37:1e:
         8e:47:c6:85:59:4a:d8:e6:ca:83:87:d1:4d:78:94:fc:6f:e5:
         7d:1d:72:07:d6:05:8a:90:a1:5c:96:87:54:f2:51:ed:09:e4:
         5c:3c:56:d2:9c:af:b3:eb:a2:96:1d:84:9e:b8:54:24:a8:de:
         1d:d2:7f:65:98:fd:3c:10:a7:79:2c:14:b7:07:18:33:e1:c1:
         ab:89:17:9a:fb:ae:d7:41:5c:ba:8a:f8:44:27:7c:f3:86:81:
         6e:80:a6:5a:82:5e:58:11:d2:9a:cc:fc:ca:27:a8:a6:a0:7a:
         10:7a:20:ed:ae:24:92:de:01:dc:76:7d:9f:6a:d0:55:2b:cb:
         d9:b5:b9:08:60:64:21:ad:f8:8a:13:c5:bc:81:26:78:1a:fb:
         98:b5:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:45:03 2026 by rpki-client