Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05e50ede-7276-3e6f-be12-39a905e5b377.roa
File:                     05e50ede-7276-3e6f-be12-39a905e5b377.roa (raw, json)
Hash identifier:          j0AOU7l+RPEeJ8qu4kX4D+O+WuCPTeVMflreMz2otXw=
Subject key identifier:   FD:35:DC:74:47:2D:1F:70:84:1B:80:4F:EE:66:8C:ED:A1:C4:12:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6F6D3E50D720D5E963B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05e50ede-7276-3e6f-be12-39a905e5b377.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        67.171.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:f6:d3:e5:0d:72:0d:5e:96:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=62d5db23-c079-4698-850c-4bd2bd257294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:ab:b5:57:73:ae:b7:bc:12:40:cc:1a:98:
                    ad:62:a4:91:76:13:0a:57:30:97:21:98:92:7d:16:
                    3b:23:fe:94:d8:03:94:e9:92:54:c9:f9:39:23:fc:
                    27:00:4e:ea:0a:72:81:e7:21:56:6f:51:13:70:87:
                    fd:49:f6:36:1d:fc:9e:87:42:63:c0:c9:c6:93:02:
                    31:f6:aa:b9:bd:85:13:27:ab:7d:1b:18:ee:4a:e0:
                    b6:8e:91:35:1a:b6:2d:8c:45:02:6b:d3:25:26:c7:
                    73:a4:ab:1f:e8:54:c6:20:ea:38:77:59:8a:92:ea:
                    7f:c7:e8:8c:7a:ed:ea:08:fa:2c:c8:3d:a7:f2:1b:
                    e4:1b:e3:aa:0a:6f:16:da:1f:cf:2f:a6:b8:5e:a4:
                    e3:23:61:af:84:17:da:50:49:28:ca:33:96:a1:67:
                    67:1f:40:04:7f:6f:ba:4c:82:00:14:dd:76:ad:db:
                    ae:91:5b:3c:c9:21:5a:33:8e:75:5a:60:aa:23:d1:
                    8d:b4:9e:24:e9:93:ef:b6:35:e8:8a:4f:16:68:e5:
                    2d:58:84:c3:e9:40:66:ad:a6:e1:ec:22:26:44:96:
                    8f:49:98:e8:cb:4e:fe:7e:3d:ca:dd:4a:17:8e:49:
                    9e:65:ac:11:5e:52:ae:43:9d:5c:d9:40:4a:81:3a:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:35:DC:74:47:2D:1F:70:84:1B:80:4F:EE:66:8C:ED:A1:C4:12:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05e50ede-7276-3e6f-be12-39a905e5b377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.171.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ec:61:95:d0:a9:7e:1f:9a:85:d3:49:22:8b:e9:39:e2:ef:
         71:8d:5e:9a:58:e2:cc:e9:55:82:8d:13:9f:e5:09:c8:49:51:
         b0:b3:fe:79:37:2b:7d:99:7b:66:bb:7b:09:3c:a9:cc:54:9d:
         a8:0f:18:05:1a:5f:b1:19:ac:f0:7b:8e:a1:7d:70:86:89:d5:
         09:1f:1f:0d:08:10:03:b9:1b:f3:3b:c5:db:f9:0f:6c:60:13:
         ce:e5:37:9f:f5:36:73:c3:a8:97:fe:5d:d8:33:ef:98:5b:e3:
         00:f1:10:1b:d6:0a:b1:18:e2:8c:4b:e5:d0:22:34:9c:7e:10:
         24:5f:07:fc:a5:f4:e5:16:be:79:6c:31:ec:04:94:0a:80:81:
         2c:08:00:2f:6f:23:03:85:43:95:46:b3:11:79:ed:37:82:81:
         e5:12:42:9d:08:a7:90:e4:6e:7a:db:c0:9a:f9:88:21:2a:a3:
         f9:7a:6c:c8:9d:b4:d3:60:d3:a2:ae:98:59:f0:2e:18:14:e8:
         74:40:fc:14:a4:65:57:1d:1b:93:f4:b4:8c:e5:f4:48:b8:31:
         86:d1:32:8b:02:05:01:ec:a4:fb:73:b9:e3:47:85:1a:3a:1e:
         9f:5b:bf:69:40:ba:5c:fe:95:72:ee:b7:6c:99:29:98:67:9e:
         d9:2d:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:54:30 2026 by rpki-client