Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1430be88-295e-3e6d-9ab5-ac6496060876.roa
File:                     1430be88-295e-3e6d-9ab5-ac6496060876.roa (raw, json)
Hash identifier:          nMC53I1Ns7q9qrniMqkM8xQEz6IrV+3tAEevqWER7rA=
Subject key identifier:   50:74:E6:C5:9F:C1:6D:78:72:1F:47:91:2E:54:25:BA:4D:DB:40:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497F96C3867CD342247DE5B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1430be88-295e-3e6d-9ab5-ac6496060876.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        68.34.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:96:c3:86:7c:d3:42:24:7d:e5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d5dc523f-0413-4974-8a6f-cfeb473958b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:62:c8:08:b2:87:87:d7:68:32:1b:56:e7:
                    02:9a:68:9e:1b:0e:38:5f:c0:06:b3:91:2b:48:6d:
                    72:1b:cb:d9:f9:aa:06:a6:eb:2e:53:4a:ce:44:84:
                    f0:eb:10:11:75:55:cf:88:8e:8f:94:ac:30:a5:63:
                    9d:73:de:a0:14:47:3b:76:b5:7c:03:80:82:83:a6:
                    bc:5f:cf:a0:cd:d1:90:66:04:30:a3:5c:87:d8:1d:
                    6a:a2:2d:cc:4e:f5:e9:ad:76:09:d0:4f:24:7b:a6:
                    bb:43:d7:70:04:67:30:eb:5c:6f:2b:98:ff:d9:a9:
                    9e:65:9b:38:a4:1a:b3:04:e7:af:9d:74:1a:92:fa:
                    6f:c1:19:05:48:09:2f:1b:17:ea:04:9d:c5:f1:ce:
                    c2:15:ec:ee:ac:e5:1d:ef:91:9b:bc:ba:15:d1:b6:
                    c8:41:9e:78:31:8a:ad:6c:17:e4:cc:f9:11:23:18:
                    66:8c:e0:93:1d:c7:b2:35:1b:21:fd:02:95:5a:a5:
                    4b:fc:1f:97:c0:69:c6:06:8f:20:52:bf:f7:80:60:
                    6c:a9:f6:9a:96:a3:3e:9e:ce:b4:02:31:a5:d4:9d:
                    90:cb:16:17:ed:93:b9:7f:dd:1a:7b:5e:b8:70:c0:
                    55:f7:8f:0c:24:ca:73:be:b4:23:c8:85:41:c0:66:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:74:E6:C5:9F:C1:6D:78:72:1F:47:91:2E:54:25:BA:4D:DB:40:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1430be88-295e-3e6d-9ab5-ac6496060876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:49:c9:8f:9d:03:d0:e6:4e:93:14:d3:58:64:13:e8:50:
         33:99:75:ef:bc:fb:21:d3:9b:86:e8:3c:94:d1:d1:6f:a5:c8:
         60:b1:cb:42:9e:4c:a0:fe:a5:a0:c2:9b:9f:6d:65:db:f4:ef:
         fb:57:5d:e8:ec:76:9d:c6:be:89:39:56:77:bd:67:e8:a8:57:
         a0:8f:c3:de:5f:98:c2:f4:b5:23:c4:f2:83:f2:09:de:25:61:
         45:1f:1b:3b:d6:a9:a9:4b:8e:da:53:66:ee:ca:5d:2c:2b:37:
         da:8d:56:6a:60:9b:71:80:a2:e3:02:94:75:63:3f:0c:ba:90:
         d1:58:ab:23:c6:00:61:57:c9:6a:60:68:f8:ad:32:32:ad:75:
         75:2d:0d:e0:11:95:ff:d1:b2:41:08:15:f2:8f:f0:98:21:19:
         58:bf:56:d1:8b:73:70:ca:90:d2:4d:56:1e:58:5b:f4:f7:82:
         39:77:81:e4:4a:9e:5e:96:2a:49:e9:61:3e:74:5f:da:a6:83:
         e5:78:96:bd:f5:54:30:bb:28:82:3f:7b:1f:45:9f:52:09:2b:
         bf:ff:31:d4:20:46:5a:0b:7f:18:0d:6b:13:cd:f4:81:e9:40:
         45:e3:e6:93:78:ed:13:2b:7d:67:7d:bd:43:ad:4b:82:69:0a:
         16:85:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:46:29 2026 by rpki-client