Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ee75307-6e25-35f0-9dd1-a64b7cfbef03.roa
File:                     1ee75307-6e25-35f0-9dd1-a64b7cfbef03.roa (raw, json)
Hash identifier:          BGZ1OOz2z42ZQWvg6GKjD51BIjLzKgJ9RkCoMz9iMcQ=
Subject key identifier:   3C:1E:76:2A:AE:89:B9:AE:45:D4:7F:5E:6B:2F:DD:FE:18:31:C9:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862BD8E32FBD6667C989FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ee75307-6e25-35f0-9dd1-a64b7cfbef03.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.56.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:bd:8e:32:fb:d6:66:7c:98:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=b2fafa2b-c72e-425f-9598-ee0f410fd3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:39:2a:aa:28:18:01:0b:1b:45:19:26:cc:
                    d9:09:50:69:32:44:1a:3f:4c:c9:18:a8:20:95:93:
                    80:ed:7f:bb:72:e5:1d:77:08:11:4d:3c:85:ca:73:
                    b8:dc:df:fa:0c:0a:45:a4:f3:23:81:4b:99:9a:38:
                    cb:7c:11:6f:bf:fa:7e:32:31:37:da:6d:94:86:f2:
                    a6:ba:87:f1:5e:78:2b:dd:1e:6d:f1:01:8b:18:87:
                    8b:cd:24:16:b8:fc:03:74:f5:13:c1:c4:b7:f6:0b:
                    8d:0c:bf:63:d5:79:94:b7:ce:0b:66:54:7e:a9:3d:
                    e1:b6:f8:cf:ca:3b:27:69:ff:ee:7d:03:f1:dc:bd:
                    60:a7:a7:76:86:15:68:30:e0:14:a5:84:3d:a0:21:
                    dc:0c:b9:fe:a8:37:3c:4c:bb:ed:de:42:e2:64:80:
                    e9:d4:cf:17:c9:f3:38:d8:8e:a8:66:c7:aa:49:d3:
                    89:e5:fd:35:91:4b:84:f2:9c:0b:17:ef:8b:43:37:
                    99:43:f2:9c:46:14:29:91:36:86:fa:21:dc:ab:d4:
                    d4:97:70:e3:be:b0:b7:28:bf:2a:13:b0:89:4f:f0:
                    22:8a:32:d1:a7:a1:22:b0:71:8f:c0:59:ab:3d:6d:
                    61:5a:29:a8:5f:57:04:50:88:5a:16:dd:a0:1e:fe:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:76:2A:AE:89:B9:AE:45:D4:7F:5E:6B:2F:DD:FE:18:31:C9:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ee75307-6e25-35f0-9dd1-a64b7cfbef03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.56.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:78:43:ae:54:60:c7:7f:11:8a:8e:2b:53:51:ee:a2:b7:be:
         a2:5d:0b:44:9b:22:fa:05:c9:fb:c4:a7:0b:f0:8d:fe:20:44:
         16:c0:3e:f1:c4:e6:16:3a:5e:ee:c3:d5:5c:9d:a9:d0:f6:0f:
         6d:a9:68:b1:b0:b5:df:01:d6:b3:ca:21:ec:e8:b6:77:68:cc:
         ee:cd:70:fa:f9:fa:ae:3a:88:40:e9:48:61:0e:d2:51:c2:69:
         55:c0:40:ac:df:44:88:9b:a2:31:bd:07:98:5f:5d:43:12:e5:
         c5:be:23:d7:c7:15:db:75:8d:5d:f2:09:61:c2:7e:00:eb:27:
         aa:d5:f1:70:6d:a5:77:b3:b1:ef:e5:42:84:e4:61:24:09:06:
         94:42:81:f2:51:b9:73:8f:d3:72:39:39:97:a5:88:03:d1:8a:
         be:a8:8f:95:ea:7f:b4:fb:71:1d:fd:b4:99:1d:8a:d6:5a:86:
         0c:0c:97:eb:af:40:5f:1a:c7:f8:0a:63:be:f5:e2:51:e2:ca:
         09:7f:a9:94:e0:12:45:ee:cc:7a:bd:31:6c:15:e2:95:b4:2e:
         ff:8d:72:86:fb:23:06:44:af:71:cf:a5:d4:e9:02:ce:1b:f8:
         7e:3c:17:4f:a0:46:93:45:03:e4:2d:06:a7:70:73:4f:6b:65:
         37:ed:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:18:33 2026 by rpki-client