Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e34d7f8-dac9-3e6f-8e49-b02c056a1895.roa
File:                     0e34d7f8-dac9-3e6f-8e49-b02c056a1895.roa (raw, json)
Hash identifier:          5VeMUdmjN46uNDj69NZBEsivgpqPbpfw75s2t2vkeg8=
Subject key identifier:   FD:1F:6D:B9:6D:39:C1:AF:3A:A8:04:28:2C:99:89:3D:8B:79:9F:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B5BC4FFEAA86A15521C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e34d7f8-dac9-3e6f-8e49-b02c056a1895.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        71.202.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:5b:c4:ff:ea:a8:6a:15:52:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8f39163c-b0e3-48ec-ac25-a1c6a0625d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:6f:c3:3d:48:5f:19:84:3c:46:2b:93:a4:
                    82:0a:67:2d:8a:6d:90:84:9f:f3:a6:3a:55:d7:d5:
                    0b:fa:f8:a2:13:cb:24:c4:5c:b7:d6:40:a2:b9:12:
                    5c:ea:f7:18:b3:dc:92:a2:10:92:b2:94:b9:2e:c4:
                    28:cd:05:13:a1:47:35:a5:2e:98:a2:14:46:98:9c:
                    81:f4:22:5e:3d:35:47:ff:01:6f:99:d4:40:e6:5c:
                    d7:86:68:82:51:e3:1e:44:f6:47:2d:2b:58:b5:c7:
                    f3:e2:e7:35:c1:0d:9f:25:0a:a4:83:3e:04:65:18:
                    32:de:dc:73:f6:c5:3e:5a:38:fc:04:cb:f4:42:37:
                    2f:b8:52:64:58:9b:d3:d1:88:62:70:e4:6e:80:75:
                    49:3b:5e:1a:31:50:80:55:aa:06:9c:37:06:53:f2:
                    f9:06:ab:c7:a7:fc:06:e3:76:64:77:bf:0f:e8:ba:
                    b7:58:cf:f6:d9:6e:08:fc:01:17:ec:cd:bd:71:88:
                    6e:c4:77:34:4b:1d:59:46:d6:48:13:7a:96:a6:8f:
                    eb:42:f6:9d:76:ca:b5:1d:f6:f1:05:26:ec:a5:c9:
                    f6:90:97:ad:c6:b3:80:08:41:95:dd:62:b2:4f:b0:
                    50:e7:2e:be:da:f8:01:cf:0f:a7:72:74:30:36:06:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1F:6D:B9:6D:39:C1:AF:3A:A8:04:28:2C:99:89:3D:8B:79:9F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e34d7f8-dac9-3e6f-8e49-b02c056a1895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.202.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:bb:f9:9f:ea:1b:cb:04:be:3a:1c:ff:67:c3:e1:79:a4:
         2b:4c:c6:96:f4:1a:43:40:d9:23:50:61:09:5d:1c:72:08:f0:
         a6:71:90:2e:9d:28:80:46:6c:af:cd:47:c9:0b:85:25:66:f3:
         3c:d4:72:41:0d:75:17:5b:ff:48:53:57:41:a1:c4:ba:ee:7a:
         ca:53:92:d9:57:e0:b8:1e:d7:0f:71:a9:36:e3:67:ae:22:00:
         07:f0:b7:5c:25:5d:f2:6c:e4:87:eb:2c:0e:07:95:5b:f5:2b:
         e0:83:bf:a2:33:75:bb:9d:00:ae:bc:4b:fa:de:c8:83:81:01:
         75:c9:61:b8:05:f0:03:33:a1:2a:4b:dd:5b:f4:e0:1d:b0:b4:
         55:a3:0b:44:3f:2c:18:6b:30:0b:ee:67:9a:bb:13:fe:04:8c:
         08:4c:e7:37:9a:41:5a:ea:16:d0:fd:1b:c9:4d:2d:4d:da:7e:
         0a:28:c4:1a:ec:11:02:06:d9:68:c1:bc:20:6d:2d:9d:89:cd:
         b4:a6:65:45:fc:7a:a0:cf:b3:4a:10:63:3e:b5:24:4c:79:9e:
         4b:87:dd:2f:37:d0:97:5d:74:76:1c:ae:14:a6:95:d4:7e:16:
         68:96:81:57:4e:f0:ad:e5:b5:fd:af:55:87:79:a7:74:38:5c:
         8b:23:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:07:27 2026 by rpki-client