Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa
File:                     047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa (raw, json)
Hash identifier:          c1Y860FARrOlc71EZry08wD1gVGd8XcYAzqZC97Azgc=
Subject key identifier:   7B:0A:01:44:24:66:4D:E2:67:54:DB:88:D3:85:40:AC:31:69:F0:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3E48DFF1FE47DB7BC97380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        76.132.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:48:df:f1:fe:47:db:7b:c9:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=64386b04-faad-4fb4-966d-23b282a08168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:ea:02:5b:4b:8a:20:26:04:e6:b3:2e:22:
                    0b:9b:ff:27:a2:4f:c7:05:42:4f:1e:86:68:d0:23:
                    dd:17:37:f0:f0:95:17:87:7f:f6:d9:f8:66:6f:72:
                    73:20:90:6b:54:82:88:ed:9a:a9:ed:2d:37:1d:ce:
                    8e:70:6d:ee:8b:7f:57:0c:4f:12:32:b2:fd:fe:c1:
                    59:d8:9e:bb:a9:9f:68:eb:3c:5c:34:13:2f:f5:f2:
                    94:51:b6:68:09:5f:70:b7:c0:91:01:05:7b:d0:b4:
                    2e:34:d5:8d:78:51:2b:5a:7e:b1:48:ca:98:f2:53:
                    a8:fd:b1:31:aa:51:2b:0a:f1:94:d6:08:40:17:d8:
                    da:7e:a2:59:66:9d:a5:3e:d5:74:ea:11:2a:61:b2:
                    dd:2d:1a:81:bf:48:3f:13:4d:c3:66:3a:2b:d7:84:
                    cd:a2:d3:fd:c9:ce:a8:04:44:00:8c:fe:3f:b3:03:
                    bf:4a:9c:9a:38:62:4d:c2:8a:de:f5:7b:b2:1f:4b:
                    c6:b2:5f:97:d9:e5:27:16:34:49:14:e7:66:ca:79:
                    70:d0:1a:3f:ca:5b:c9:84:db:03:25:74:5f:7d:99:
                    d5:94:d1:1d:3a:10:a3:2b:76:b0:6e:7e:e9:b1:1d:
                    6b:f8:08:a9:7a:c0:4c:ae:23:31:7a:04:3b:f1:2c:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:01:44:24:66:4D:E2:67:54:DB:88:D3:85:40:AC:31:69:F0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.132.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:2d:43:a8:11:d4:00:7e:98:53:ca:d1:28:24:52:6e:a7:
         33:69:45:ca:4c:0b:65:f2:ba:65:a7:01:1f:25:ce:d2:0d:cf:
         fb:01:db:a4:05:db:b5:97:e0:e0:69:09:77:be:11:9c:5b:74:
         db:4f:89:00:b8:e8:3a:95:43:8b:04:f7:50:3c:26:61:db:ad:
         a8:7d:94:ae:43:03:80:64:ef:69:13:93:1d:04:91:72:f5:04:
         22:e1:e0:9d:3c:90:f1:1a:57:b9:3d:2a:c3:9f:82:57:36:67:
         dd:0a:42:de:f5:e2:8a:31:0e:10:6b:7f:60:a5:db:05:ce:89:
         f2:9a:9f:82:0f:e6:7a:9f:f0:bb:41:7d:6b:1c:0f:d6:25:ea:
         f2:4c:ec:1e:42:04:30:03:2c:b8:04:b0:b3:45:ae:5e:f4:ef:
         30:34:70:b5:1b:a7:20:df:52:1a:99:e8:48:f9:42:e2:d7:25:
         63:b4:de:20:05:ab:47:d5:1f:de:d5:6a:ee:03:ef:93:7e:2d:
         3b:33:e6:98:8d:63:43:d1:fc:ae:1c:6d:c7:33:14:7f:58:e3:
         aa:57:7a:8e:56:82:01:40:9e:10:f7:14:9f:1a:85:cc:9b:10:
         68:85:fb:de:0b:2b:9d:f6:cf:8c:50:00:29:3d:b9:6c:a9:5a:
         15:ec:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:04:07 2026 by rpki-client