Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a13ccb36-cf79-3895-8802-c995f3e1f1e1.roa
File:                     a13ccb36-cf79-3895-8802-c995f3e1f1e1.roa (raw, json)
Hash identifier:          euOq+S0fE3AAQCDuY/JEYV2BwBezlUDH5JIFvJnbbUY=
Subject key identifier:   36:49:33:F0:AE:6F:47:73:9B:9A:FC:3D:7A:4A:63:87:57:20:98:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB78433F693D4718923B100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a13ccb36-cf79-3895-8802-c995f3e1f1e1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22258
IP address blocks:        68.86.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:84:33:f6:93:d4:71:89:23:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=f8683e6c-a80f-43ad-a4f0-b570469dc35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:be:20:56:7a:26:60:55:a7:1b:2f:eb:a2:
                    3b:14:65:61:f9:3b:18:3f:54:aa:e4:c0:cc:f3:be:
                    fc:e5:0b:57:03:7d:eb:54:c3:59:a1:78:e8:fd:29:
                    3f:7b:c6:1e:34:8e:c3:fd:14:1e:e7:50:b0:81:06:
                    47:44:e5:c0:47:37:cc:77:25:35:26:6c:a7:1d:e5:
                    a2:f4:9e:62:22:52:a7:17:91:86:c9:d3:df:fd:c2:
                    4a:0e:59:ab:f7:94:62:ac:e5:8d:c6:47:ac:99:5f:
                    4e:0b:57:82:3a:ed:12:cb:25:58:35:bd:a7:8d:95:
                    b7:a8:67:e2:c0:cb:fb:63:ef:08:2d:04:e7:40:8a:
                    a1:67:42:16:f1:5e:9b:97:39:4a:f3:34:07:3f:29:
                    dd:2f:0e:f5:5d:c7:1a:5d:78:ac:ec:87:44:22:97:
                    27:45:58:98:9d:82:ff:87:19:17:0d:74:98:48:47:
                    96:5a:b6:fa:44:b4:b6:1a:7c:50:96:29:42:c3:2c:
                    f9:c5:48:83:92:fd:22:c8:e0:17:40:93:23:78:24:
                    fc:2a:50:a1:16:46:0b:50:cc:a1:03:5b:37:b7:2b:
                    d0:e5:b1:eb:1b:be:4f:79:46:60:c8:ba:21:b3:a1:
                    02:32:b8:ec:e5:b0:53:75:b7:6e:8b:b1:18:78:f7:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:49:33:F0:AE:6F:47:73:9B:9A:FC:3D:7A:4A:63:87:57:20:98:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a13ccb36-cf79-3895-8802-c995f3e1f1e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:99:48:d8:33:2e:77:44:dc:e2:99:53:2f:a6:27:cd:0f:
         18:fe:91:43:08:66:fa:92:e5:e1:fc:f2:89:3a:39:91:83:ed:
         5a:65:7a:ee:bf:35:e2:e5:46:c8:0a:63:65:0e:00:e6:30:05:
         32:c1:c4:ee:49:2a:53:b0:df:db:59:24:5c:10:4a:19:30:c1:
         a1:9d:af:9f:db:c5:af:24:c5:98:24:c0:3d:34:ea:16:70:4c:
         56:b7:db:34:d4:25:cd:e7:7c:d7:98:9a:af:03:3b:01:8e:e8:
         96:71:26:71:6f:c2:34:c0:bb:40:45:61:8b:b5:90:46:25:2d:
         77:23:85:83:e2:a5:c1:6b:44:04:93:0b:06:ec:ee:1a:33:43:
         95:96:2e:84:72:c3:55:7a:56:7f:7f:c9:25:50:6c:7b:52:40:
         3d:70:4d:6d:2c:50:6f:05:5b:85:77:c2:66:b5:34:1b:e4:8c:
         c2:12:64:d8:00:3a:2e:3c:4f:be:f5:38:e5:5b:93:0b:8a:ff:
         83:69:f6:9a:76:94:15:7c:17:58:e9:fa:64:a0:b0:6e:1c:73:
         90:37:0d:6d:ab:29:e2:c9:3b:2a:53:1b:c9:3a:4d:e0:1d:fd:
         4b:f6:89:a7:f6:d4:aa:cf:ab:75:27:b7:37:33:e2:05:04:69:
         7f:43:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:36:14 2025 by rpki-client