Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f16406e-fef2-3b63-a011-f0ce59c9ba1d.roa
File:                     3f16406e-fef2-3b63-a011-f0ce59c9ba1d.roa (raw, json)
Hash identifier:          QysqBSWfPQyQjYrP5XaGyQhjvke7+GKv80VILkS1W28=
Subject key identifier:   D8:E9:70:F9:14:6F:6D:27:96:D8:A3:60:4B:31:C0:1B:9D:C6:0F:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862BB3845BDB6652E5655C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f16406e-fef2-3b63-a011-f0ce59c9ba1d.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.54.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:bb:38:45:bd:b6:65:2e:56:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=f971721b-ca5e-4286-bec2-9793a24da193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:d1:a5:b0:e0:df:f3:e8:4d:c2:10:55:27:
                    44:5e:71:30:b8:c1:ef:6d:c4:dc:85:c1:a5:a9:1d:
                    83:c3:b4:ea:88:c9:9c:d8:3c:4c:5c:1a:62:c3:a2:
                    06:f7:bb:b7:8c:9e:af:86:e8:45:f4:7d:be:e2:72:
                    54:f0:2b:fd:15:8c:52:c1:a1:e6:a7:46:50:74:b6:
                    dc:a8:c5:24:f9:3f:b4:4b:57:39:92:64:e8:5c:69:
                    5b:ee:9a:76:c6:e5:cc:af:d9:25:68:11:71:1c:e7:
                    fb:c7:b0:3a:92:08:81:50:33:7a:18:67:5c:9d:a2:
                    a0:3b:6f:ce:8d:1e:46:4f:89:ec:79:94:34:40:ac:
                    8c:50:5d:e0:9d:51:b3:9e:d1:12:81:cb:c8:b1:77:
                    f7:9e:80:7b:04:2e:71:cf:93:c9:d7:66:77:72:99:
                    41:fb:8a:82:f9:d3:6d:48:38:96:ab:5c:4b:70:4d:
                    6f:49:79:ad:4d:b5:6a:15:c7:20:da:fb:8d:4f:84:
                    e2:ad:f9:9e:24:e9:57:fb:aa:03:91:66:e3:f8:3e:
                    ca:c3:1f:5d:74:ef:a2:37:66:bd:0a:4f:58:fb:87:
                    b6:b2:f0:95:55:00:12:73:8a:7b:82:f3:72:7f:3b:
                    6c:0d:d3:36:04:57:cc:c1:a0:a5:e3:35:ba:f7:a5:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E9:70:F9:14:6F:6D:27:96:D8:A3:60:4B:31:C0:1B:9D:C6:0F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f16406e-fef2-3b63-a011-f0ce59c9ba1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:12:b8:6b:38:ec:4a:1c:34:0f:43:ea:d8:5a:f0:57:1e:45:
         31:0f:21:6e:d9:25:41:d9:e5:f6:2f:b7:eb:7c:72:91:fc:83:
         1d:54:aa:d6:a9:09:6e:b6:f6:d9:b7:3f:42:d9:62:66:c2:ff:
         12:21:69:ac:38:68:67:01:b6:6b:ce:35:c7:16:68:9a:5b:84:
         b3:1e:16:88:d3:a5:ca:23:ec:c6:19:9f:f9:7c:68:fd:88:a1:
         78:de:84:1e:24:cf:7c:e1:c7:98:99:c7:be:da:4b:16:30:4e:
         0c:fe:41:82:58:01:a1:f9:71:d7:db:56:c2:62:00:72:d2:25:
         9b:c6:f9:46:de:54:3f:6f:92:86:f5:0a:2c:2b:34:f7:9e:74:
         38:aa:83:14:b4:f7:f1:10:d6:33:fb:92:87:44:dd:cd:89:90:
         62:72:86:8f:55:7b:45:8a:2f:aa:e8:22:c8:21:eb:69:41:11:
         63:75:88:c4:c0:77:f5:4b:32:a8:ec:19:42:d6:c4:2d:f6:cd:
         b1:35:a6:47:52:b1:39:f7:66:eb:46:95:f3:b7:74:96:56:6a:
         94:50:af:f1:2e:38:bb:e4:dc:17:9c:69:b8:61:4d:bb:e9:2a:
         26:ff:69:a4:1e:35:7a:97:1d:a6:a1:b1:c1:e8:dd:c5:64:b2:
         71:a9:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:23:31 2026 by rpki-client