Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa
File:                     0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa (raw, json)
Hash identifier:          utoOSPsRUfx1n7jr+0TnxWM+309/S6aPXe8ngxp75Ys=
Subject key identifier:   76:4B:A8:2F:FF:BF:F1:51:52:EE:3D:48:DC:32:31:62:F3:FE:C0:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584FB3A818978B596B712C6CC5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     33659
IP address blocks:        69.141.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a8:18:97:8b:59:6b:71:2c:6c:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=4b6af118-b8b9-4147-b204-debbb6c846fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:2f:c5:17:6d:81:69:c3:5d:4b:49:9d:2a:
                    84:53:c7:32:cf:7f:2e:db:90:ef:4f:66:2e:cc:a2:
                    03:9a:7b:cd:c0:f0:69:6e:d2:15:49:54:8b:9d:a7:
                    33:3c:60:69:88:e8:bc:a4:fa:f5:90:21:b7:27:81:
                    58:3b:01:d2:ca:3e:bf:c5:c7:fc:7c:ab:f1:a4:46:
                    bb:69:9b:cf:e3:6f:8b:b3:56:eb:08:3c:1c:7d:6c:
                    83:92:a7:b2:6f:b0:98:3f:9d:0d:37:1c:08:eb:12:
                    25:31:b6:4a:1a:a6:5f:f0:a9:c3:fd:5d:b6:80:cb:
                    25:c9:d0:c3:0a:39:72:22:0e:da:25:e9:a7:ea:3d:
                    21:c6:05:67:b7:31:88:c0:b7:8b:04:27:da:f4:9f:
                    60:2e:ba:d4:e0:c3:91:5e:b5:2b:87:5f:a6:1f:a3:
                    81:72:5c:75:5a:b9:0e:54:b4:59:d8:10:3e:95:86:
                    4e:b0:36:18:87:23:4c:c0:92:53:fc:aa:b4:8e:0e:
                    4f:5a:c5:3e:68:d2:38:a3:29:2b:a2:27:b2:c6:31:
                    78:b2:38:2b:51:78:2e:79:86:a4:ec:19:c3:40:98:
                    60:60:10:13:b3:a5:a2:f1:af:e9:50:85:04:78:b4:
                    27:f1:35:58:31:9c:01:b1:80:2f:33:c8:a0:76:ae:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4B:A8:2F:FF:BF:F1:51:52:EE:3D:48:DC:32:31:62:F3:FE:C0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.141.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:36:21:3e:3f:2b:4d:f3:b6:06:58:26:5b:7c:10:49:db:
         4e:cf:99:21:c7:09:58:9a:fd:7a:a2:6f:07:fe:c9:d5:4a:3a:
         9d:3d:4b:e8:87:ac:e2:bc:09:ef:9b:c7:0b:34:fa:16:32:78:
         ac:d5:e4:d3:c1:a9:8a:c1:1d:62:eb:81:98:de:bd:29:f8:48:
         8f:39:9c:6c:4a:a5:7e:67:22:2b:e5:5b:37:8f:05:aa:99:ee:
         43:21:71:ab:cc:6a:fd:f2:ee:15:2a:eb:56:d9:44:b3:8e:2d:
         89:11:d0:94:35:05:c2:19:fd:5f:33:51:2a:46:97:ed:cf:0d:
         f9:66:f1:7d:c6:b6:fd:1d:13:86:90:b3:b6:98:bd:f8:a1:d8:
         2e:57:f1:7b:8f:8a:68:bd:24:fa:5f:c9:ee:3a:49:f3:c3:a9:
         c5:22:f3:48:1b:37:8c:de:9d:69:5e:c3:a7:6f:5f:7c:f4:e3:
         2f:07:03:ac:76:e2:18:f2:63:51:bd:4c:f9:c8:e0:2e:18:c6:
         e1:fd:5d:7e:3b:06:64:45:63:c5:1a:ec:5b:46:4a:f4:cf:e1:
         46:8c:e8:b8:5c:a6:49:e4:2b:ab:80:3c:b9:6f:3a:c9:ec:fd:
         29:82:62:89:88:e7:93:89:db:a5:78:1c:f3:5d:e0:e0:93:e5:
         91:05:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:30 2026 by rpki-client