Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/4e43c41f-c4d0-375f-8ee5-22f1cb6f15ec.roa
File:                     4e43c41f-c4d0-375f-8ee5-22f1cb6f15ec.roa (raw, json)
Hash identifier:          FjyaunVnqNvoM8Ln2H/gh6MowsB5L3xl7tBWHJRU1c0=
Subject key identifier:   78:9C:DC:95:2F:A8:33:77:6C:F2:F5:FE:F7:B5:BB:3D:21:12:AE:20
Certificate issuer:       /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
Certificate serial:       010D0C9F4328584CFB1CEE877D2F5D2A17A2E0D0
Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/4e43c41f-c4d0-375f-8ee5-22f1cb6f15ec.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     6079
IP address blocks:        68.69.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:ee:87:7d:2f:5d:2a:17:a2:e0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=82d7a5a1-4358-4b9d-a4e2-560bbdc12f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ab:d3:c1:2d:a5:46:ae:97:30:f0:d9:09:19:
                    47:19:ff:f0:ff:6a:d5:38:b5:9f:d1:a4:f3:e6:2e:
                    2d:ce:f8:1c:e2:f0:be:16:e7:6f:70:bf:e4:03:35:
                    6b:93:df:b8:8a:ed:7b:98:af:44:1d:77:08:5c:35:
                    f2:f8:50:e7:30:89:ea:3f:6f:2f:51:c4:7f:98:dd:
                    96:fc:1a:a2:93:aa:3e:7b:d9:72:51:5d:c3:9c:9b:
                    36:46:35:78:bd:fb:c6:b6:40:73:c9:cc:fe:3d:1e:
                    40:2a:d4:f0:81:63:11:2f:61:87:a7:4a:2f:09:fd:
                    75:a8:15:9a:e3:22:8d:fc:ab:bc:93:f3:7b:6c:76:
                    51:12:f7:eb:22:cc:e4:03:8c:06:47:19:26:de:39:
                    32:c4:89:f8:4a:55:9f:91:46:81:36:08:6b:35:c4:
                    6b:45:5a:54:e4:e3:6a:35:fe:38:e7:95:9d:9b:5b:
                    19:29:fb:ea:24:79:ee:44:b6:f5:84:90:82:9a:5a:
                    9c:c4:1a:d5:02:85:f6:73:1a:96:9a:94:4c:6e:a6:
                    32:a2:eb:c5:d8:e9:ec:5c:e6:df:9a:97:a4:0d:9b:
                    f6:84:78:ed:ca:27:02:c2:b0:c6:f0:8e:7b:cd:8d:
                    8f:0a:4e:3d:09:79:f6:57:5d:2c:1a:38:5a:11:2a:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9C:DC:95:2F:A8:33:77:6C:F2:F5:FE:F7:B5:BB:3D:21:12:AE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/4e43c41f-c4d0-375f-8ee5-22f1cb6f15ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl

            X509v3 Authority Key Identifier:
                keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:6d:8f:73:ab:aa:e2:67:fb:1a:3b:09:37:0f:d6:ac:d7:
         20:e1:50:9a:ef:08:cf:36:52:6a:71:76:43:6a:01:1d:2c:93:
         ac:b9:be:df:f2:c7:f1:fd:9b:0f:f9:b5:d1:04:39:e7:6b:67:
         e9:dd:4a:17:00:4c:67:e7:04:71:97:3d:04:0a:d1:b3:e1:a2:
         9d:32:1b:80:1b:39:4e:00:75:c3:a5:83:c8:af:d9:7c:1b:74:
         9d:a6:4b:d1:ee:33:13:26:7f:4c:6b:2a:05:d4:a6:34:62:d7:
         dd:b6:36:dc:9a:ca:55:06:3e:2c:92:09:68:ee:a7:a5:e7:07:
         e5:cf:58:10:0a:05:1a:a2:47:80:83:ab:c1:95:59:23:dc:80:
         21:39:2b:2e:6b:46:72:34:3b:78:5f:7b:f5:4b:37:6b:19:6a:
         02:56:c5:1e:a7:e4:60:df:84:57:e1:0f:63:6d:5f:bd:e1:90:
         6f:eb:fe:82:e4:10:d5:dc:da:96:50:18:29:a8:af:f0:cd:a7:
         85:9e:42:aa:32:c8:16:77:d5:57:77:73:19:1d:84:2c:ae:82:
         99:56:fd:e3:7c:3c:57:0b:62:9d:4c:28:c6:e7:71:d9:7c:e5:
         91:8b:73:65:9a:b0:ff:c8:81:b3:c8:70:43:79:c7:e7:3b:6f:
         02:f4:be:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7HO6HfS9dKhei4NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk1YTZhYzItNzgxYS00NTk5LWJlNmMtMjhiNmJjMjg1
N2M3MB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk
ODJkN2E1YTEtNDM1OC00YjlkLWE0ZTItNTYwYmJkYzEyZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjavTwS2lRq6XMPDZCRlHGf/w/2rVOLWf0aTz
5i4tzvgc4vC+FudvcL/kAzVrk9+4iu17mK9EHXcIXDXy+FDnMInqP28vUcR/mN2W
/Bqik6o+e9lyUV3DnJs2RjV4vfvGtkBzycz+PR5AKtTwgWMRL2GHp0ovCf11qBWa
4yKN/Ku8k/N7bHZREvfrIszkA4wGRxkm3jkyxIn4SlWfkUaBNghrNcRrRVpU5ONq
Nf4455Wdm1sZKfvqJHnuRLb1hJCCmlqcxBrVAoX2cxqWmpRMbqYyouvF2OnsXObf
mpekDZv2hHjtyicCwrDG8I57zY2PCk49CXn2V10sGjhaESqVjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHic3JUvqDN3bPL1/ve1uz0hEq4gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wOTVh
NmFjMi03ODFhLTQ1OTktYmU2Yy0yOGI2YmMyODU3YzcvNGU0M2M0MWYtYzRkMC0z
NzVmLThlZTUtMjJmMWNiNmYxNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDk1YTZhYzItNzgxYS00NTk5LWJl
NmMtMjhiNmJjMjg1N2M3LzA5NWE2YWMyLTc4MWEtNDU5OS1iZTZjLTI4YjZiYzI4
NTdjNy5jcmwwHwYDVR0jBBgwFoAUc/bEO6SXRroAJs2YBsfQINFl8UUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wOTVhNmFjMi03ODFhLTQ1OTktYmU2Yy0yOGI2
YmMyODU3YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREV+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnGbY9zq6riZ/saOwk3D9as1yDhUJrvCM82UmpxdkNqAR0sk6y5vt/y
x/H9mw/5tdEEOedrZ+ndShcATGfnBHGXPQQK0bPhop0yG4AbOU4AdcOlg8iv2Xwb
dJ2mS9HuMxMmf0xrKgXUpjRi1922NtyaylUGPiySCWjup6XnB+XPWBAKBRqiR4CD
q8GVWSPcgCE5Ky5rRnI0O3hfe/VLN2sZagJWxR6n5GDfhFfhD2NtX73hkG/r/oLk
ENXc2pZQGCmor/DNp4WeQqoyyBZ31Vd3cxkdhCyugplW/eN8PFcLYp1MKMbncdl8
5ZGLc2WasP/IgbPIcEN5x+c7bwL0viA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:42 2026 by rpki-client