Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67856aa4-395a-3e94-872b-8a60233ceb58.roa
File:                     67856aa4-395a-3e94-872b-8a60233ceb58.roa (raw, json)
Hash identifier:          TrhIsSVpTyHTDY+9xigw3c3VjYUbLs9c217d/E3z7PM=
Subject key identifier:   A6:5E:D1:88:BC:25:12:7B:4A:97:AF:E0:59:9F:E1:C2:B8:7A:7E:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981BA78E267C697796DCC48
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67856aa4-395a-3e94-872b-8a60233ceb58.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        68.46.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:ba:78:e2:67:c6:97:79:6d:cc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7924ebd8-f85d-4405-b86a-b06d91c90965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:8c:c4:f6:c4:22:61:50:26:9d:95:67:7a:
                    2a:11:94:79:28:04:45:9b:51:dc:85:b3:55:e3:11:
                    dd:ae:a8:a9:9b:51:b1:60:08:7e:05:47:66:32:a0:
                    d3:e3:93:bc:8b:96:40:57:c9:00:6c:66:29:52:93:
                    2f:38:0a:96:99:b5:20:b6:01:73:16:09:c2:32:6f:
                    6c:07:9c:66:0c:1d:bd:a9:3f:91:1d:0b:2b:5d:70:
                    85:fc:46:f6:68:db:a5:0c:ef:b4:8a:2c:53:a7:b4:
                    b4:ea:1a:7d:7e:6d:34:52:06:85:80:c2:b4:87:b0:
                    b3:d2:4c:61:24:f9:57:c0:4a:c9:55:f0:41:bd:16:
                    23:83:54:f7:48:a3:35:23:ac:36:1f:cf:26:0e:7f:
                    57:9d:6f:74:63:57:90:80:20:f4:f6:1f:c5:d1:0c:
                    23:bd:7c:48:d3:9b:69:47:d0:bc:c9:2a:d0:bf:f0:
                    ce:9d:72:4f:cc:16:ab:3f:fd:7e:2c:bc:3b:bd:a5:
                    0a:6a:c2:80:b9:dc:49:32:23:76:49:49:33:ec:3c:
                    c7:61:1b:5f:71:b7:86:f2:16:e3:31:06:ff:b9:ef:
                    70:f2:bc:1e:90:15:c7:65:fc:b0:5d:fa:0f:2b:f6:
                    90:b2:96:cc:a9:cf:09:78:90:70:ea:72:fb:30:10:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5E:D1:88:BC:25:12:7B:4A:97:AF:E0:59:9F:E1:C2:B8:7A:7E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67856aa4-395a-3e94-872b-8a60233ceb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.46.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:51:4d:51:df:d2:ec:7b:27:c2:20:02:ca:0d:de:b8:91:31:
         db:13:68:0e:df:c8:4a:55:05:21:a0:6a:bc:c3:c2:f7:16:12:
         dc:21:0c:45:1b:11:8f:cb:2c:51:c1:c2:e5:60:ae:75:c7:8a:
         5d:39:7b:1d:b5:9b:dd:d8:5f:b7:79:00:1d:3e:d8:fe:bf:ed:
         77:8a:e1:82:a6:2f:1f:ad:6c:1e:b5:5c:a7:ea:13:5d:ab:9d:
         a9:bf:c8:4b:8d:99:b6:52:42:70:8d:1a:1e:8a:10:e7:f2:2e:
         83:5f:87:69:89:92:bd:4c:fd:e4:d3:53:a3:fe:05:f4:31:ee:
         c6:7a:c6:24:92:19:9e:74:d8:11:63:bf:f3:d0:d7:6c:bb:a5:
         e8:2c:58:0c:1c:f0:cc:8e:00:da:0f:dd:9c:ae:8a:a8:69:d2:
         51:7f:ea:2f:08:27:e0:47:88:7f:bb:2c:32:ee:44:e7:77:a5:
         b2:b8:4a:fe:dd:ce:69:90:81:1b:22:ac:57:6d:29:ec:dd:4c:
         0e:20:3d:cb:f7:e1:96:b8:ac:7d:94:95:21:e3:e1:40:60:bc:
         71:71:61:e2:0e:5d:09:fb:32:1a:cb:3b:16:21:46:f3:45:03:
         62:56:a1:fc:0b:fe:b8:7a:68:e8:1c:58:2f:b3:f8:4f:93:1b:
         98:7b:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:34:52 2026 by rpki-client