Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa
File:                     08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa (raw, json)
Hash identifier:          W6Gqq+lGivRnJbX1uaFAL0WajSHg9UML0WhU7TSdPD8=
Subject key identifier:   F2:CB:D6:88:97:13:76:44:04:10:C6:8F:18:42:38:44:D7:CC:CC:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BAC5F8158BAFE97DABD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33660
IP address blocks:        174.52.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:ac:5f:81:58:ba:fe:97:da:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=937ec7ec-4384-4b60-b79c-9884df4e6b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:8e:eb:d6:e2:70:f1:dd:e3:e7:e8:87:98:
                    33:33:36:f4:d8:10:93:db:52:5e:3b:c0:cc:69:4a:
                    a1:ac:01:ec:81:cd:3f:0f:f8:d2:1e:f8:e2:97:bc:
                    0f:7f:d6:1e:4d:83:5d:e8:75:53:b6:c0:64:e2:ba:
                    3e:24:f6:e0:fb:74:8e:db:85:59:11:0e:23:22:e8:
                    ff:0a:21:f1:87:bc:60:0c:7f:01:33:d9:f2:15:8d:
                    ba:fa:2b:1d:ff:dc:c7:da:71:52:b4:a3:17:80:25:
                    dd:e9:b0:28:f3:da:af:48:a8:14:a8:30:6a:a7:bc:
                    6e:eb:b1:7e:de:36:4c:9c:54:f6:9f:5a:8e:34:f6:
                    47:e9:f2:bd:5d:7a:99:17:1b:89:7a:47:73:3f:ba:
                    12:ad:5b:23:cb:69:bf:5a:aa:29:64:d9:8e:10:1b:
                    d7:6c:0d:2a:e1:43:d0:7e:35:58:35:94:c6:d7:12:
                    bd:e8:b0:a7:09:b4:35:20:a2:7e:ba:62:a4:18:68:
                    84:ab:04:28:3a:26:15:34:29:d1:44:5e:09:b4:b1:
                    01:a9:93:df:ed:f8:99:3b:26:ac:c1:07:10:c7:f7:
                    fa:86:f4:30:7e:59:89:e9:bd:e2:11:88:06:d1:4f:
                    a2:0f:a1:53:69:00:22:92:9f:0e:cf:42:9c:e4:b0:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:D6:88:97:13:76:44:04:10:C6:8F:18:42:38:44:D7:CC:CC:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bb3c90-8d0b-32de-8061-91c2d2d6d793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:56:65:3e:21:1f:89:85:51:a3:78:fc:60:4b:26:d3:87:44:
         43:89:10:5e:9e:be:5d:96:8a:03:8c:45:f3:07:0e:d4:34:33:
         f7:56:30:bc:30:27:78:b2:e5:2f:b7:29:7b:72:26:0a:99:37:
         a9:f3:4b:f2:77:07:70:f7:4a:9c:56:29:1e:b2:da:23:3f:1f:
         18:73:dc:ca:7d:26:2a:2a:5b:e6:ae:7b:e7:d9:2a:75:55:f8:
         b2:6c:a9:64:6a:e6:e7:a9:ec:01:99:e9:b4:50:b9:54:78:42:
         e5:c9:6e:a3:fe:bb:8b:12:f2:e5:e9:57:2f:cc:d2:2d:cf:b3:
         7e:2d:5d:70:85:d7:19:65:e2:13:ca:c2:4b:9e:c1:18:d7:56:
         a2:22:82:39:ee:ba:87:a0:63:ea:96:b3:1f:39:3b:48:01:af:
         10:83:ac:70:37:3f:80:ed:77:ed:97:30:4e:a1:af:1a:e4:42:
         4b:60:22:f6:97:50:6e:00:03:84:96:a5:d0:df:49:30:43:be:
         1a:f7:5f:92:3f:b1:1c:39:81:31:02:5a:0e:83:5a:9c:06:aa:
         72:be:9d:26:df:96:3b:4a:26:8b:40:5f:a5:10:c2:c4:a8:03:
         33:29:cc:2f:be:0d:d7:56:5c:77:06:2b:3d:42:53:74:4b:a8:
         e2:26:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:40 2026 by rpki-client