Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e73f2fe-f59e-3a9b-a0b1-7afb3fabde25.roa
File:                     1e73f2fe-f59e-3a9b-a0b1-7afb3fabde25.roa (raw, json)
Hash identifier:          74+Bbyx9B3MVAqRBs/1nhhNv8KrLQ4flsAkSOxKzkKk=
Subject key identifier:   F1:DF:78:31:47:4C:FF:68:79:A1:7D:8D:D4:FC:8B:DA:2A:B2:2D:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497FA01101D704C501A71180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e73f2fe-f59e-3a9b-a0b1-7afb3fabde25.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        68.52.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:a0:11:01:d7:04:c5:01:a7:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=229d98d0-7646-4113-a9d2-ffb4703a5a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:a6:90:a0:48:00:ff:af:68:6d:63:a8:4e:
                    9e:60:b3:a3:97:61:3e:bf:d2:ff:e0:62:6a:66:cb:
                    55:68:68:32:04:ad:52:c5:23:30:bb:5a:4e:2b:a5:
                    13:86:c1:22:47:73:6a:c3:f8:7c:07:1f:48:21:6b:
                    ab:8c:54:43:48:e3:c9:bb:1c:ea:db:55:d7:34:e3:
                    32:f3:24:7c:c3:a6:78:b9:62:63:e8:4d:12:58:5f:
                    c0:d9:61:01:82:29:f2:e1:14:ed:63:22:cf:eb:01:
                    b7:21:e9:19:29:fd:e2:c6:03:b2:89:0d:f3:65:7a:
                    7f:24:f0:60:67:74:da:ec:70:77:4b:07:06:76:32:
                    f8:23:21:55:78:25:77:b4:9f:8c:ff:e1:cf:5e:41:
                    e0:fc:1f:0d:50:ef:77:cf:15:6f:ec:66:d5:47:06:
                    af:ae:82:25:8b:b2:f6:8e:65:ff:c1:c5:3b:09:0b:
                    16:ab:59:fc:45:79:78:19:c0:ae:35:bd:10:57:96:
                    ec:95:5b:50:51:5d:e0:4e:db:e9:a9:e9:23:6e:0f:
                    60:1f:ee:74:63:2b:56:71:3a:1f:02:30:13:d4:7b:
                    12:c1:dd:b4:c0:90:e2:7a:07:17:8b:a8:ed:52:15:
                    41:26:9a:8b:b0:0d:09:42:98:a8:15:9a:9f:6d:fa:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:78:31:47:4C:FF:68:79:A1:7D:8D:D4:FC:8B:DA:2A:B2:2D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e73f2fe-f59e-3a9b-a0b1-7afb3fabde25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.52.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:dc:f2:c7:1e:65:72:09:b2:2c:86:03:1b:6f:ba:f5:26:18:
         67:43:41:58:7c:f9:c5:da:b1:f3:6d:26:a4:9f:3a:e3:67:4c:
         86:dc:33:70:b4:b3:60:ff:74:24:b4:ed:79:2f:42:5e:4e:48:
         4b:de:df:a7:bd:68:a2:19:9a:32:71:e0:a8:1e:d2:c0:d4:fb:
         85:b1:7b:0e:ec:99:de:ea:a2:24:19:86:eb:d4:9f:be:f3:37:
         c9:66:24:56:6d:b9:6a:d0:27:18:2c:6a:7b:82:64:eb:e2:a2:
         3b:35:12:2a:26:81:02:e2:cf:0b:be:18:c6:c7:d3:41:8b:43:
         01:98:49:00:b9:c2:a8:84:a9:2e:3e:60:b2:d0:ad:a1:af:f5:
         00:ff:ec:62:5f:2d:fd:e7:0b:12:c4:86:f6:6e:c8:59:1e:5f:
         8e:1a:0f:1c:8a:42:da:7b:90:4f:1f:7e:e0:98:c4:fa:c7:08:
         83:a0:fe:d2:14:02:19:66:38:4c:37:c4:42:d8:51:76:cd:8e:
         ec:dc:4b:75:92:bc:30:b9:88:3b:83:8d:93:18:e1:97:21:27:
         14:23:04:21:45:c1:10:78:1c:ed:a3:1a:ef:bd:44:87:a8:4b:
         05:90:7e:d5:e5:16:54:96:14:ce:e8:af:52:d9:48:cd:f6:2a:
         50:15:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:57:50 2026 by rpki-client