Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa
File:                     1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa (raw, json)
Hash identifier:          KY205OEt25h/G5gL6ektIpbHvT336MqWglBjkhsNB80=
Subject key identifier:   D0:42:5A:0A:23:53:4F:AB:36:C4:8C:F0:FE:3F:97:0B:C7:13:32:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF703760E1D61C8FA56CF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        76.129.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:03:76:0e:1d:61:c8:fa:56:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ccdd9b9f-3123-4563-ad26-0f607559e6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:60:a0:41:68:ea:97:fe:59:6f:9d:6b:71:
                    d1:cb:43:2a:68:a7:29:03:04:66:1d:2f:ee:85:78:
                    2d:ea:e4:1a:f0:85:bc:74:b0:fa:bd:5a:8e:10:1a:
                    db:4d:68:3f:74:45:c3:53:c9:e0:d2:f1:54:3b:03:
                    59:d2:50:4b:3a:20:1b:c7:6a:20:23:2d:08:f0:54:
                    45:ca:db:0f:bd:f3:0e:1f:19:fd:0f:42:43:7e:32:
                    95:bc:21:d3:89:61:4d:57:42:54:d3:6b:93:63:81:
                    0e:ce:47:d8:2c:1f:41:59:7f:08:53:7a:d3:50:bb:
                    03:1a:44:f0:dc:74:8a:a9:ce:62:0a:c7:bc:4f:2e:
                    d4:05:6f:2c:3b:8f:9b:26:13:e6:44:3b:b8:18:c7:
                    c9:ab:a6:60:41:1d:6f:98:fc:8f:ae:c6:0e:dd:68:
                    13:3f:b2:6d:7f:17:09:24:2d:cb:c7:b7:be:1c:0f:
                    51:12:e8:8f:ec:e3:3a:f8:b5:bb:14:12:da:a5:02:
                    a1:a6:17:cb:99:40:e5:b2:31:97:a0:63:35:39:03:
                    92:9c:30:e7:38:c7:0a:44:92:2c:0f:5e:25:51:04:
                    ed:34:6c:b6:fc:fe:0c:f5:73:08:92:1e:df:40:f2:
                    2f:a1:e6:72:38:68:3e:23:86:55:4c:9c:8a:fa:49:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:42:5A:0A:23:53:4F:AB:36:C4:8C:F0:FE:3F:97:0B:C7:13:32:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1148ef0e-8ff4-3eab-adb3-961311f1e8a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.129.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:65:87:aa:29:79:8a:9c:e0:bd:08:f0:5e:be:55:24:40:8b:
         a9:8c:a0:aa:ec:ec:5a:00:e9:94:5d:83:e6:37:1a:5a:1a:4a:
         0f:d8:00:85:16:60:b8:e8:83:73:2e:ff:0f:e6:bf:e1:79:dc:
         a7:1f:c8:da:4d:95:43:f2:c0:f8:66:3c:cc:97:c4:ea:c9:3a:
         15:e9:3a:0d:be:9f:fb:32:55:7e:85:14:5d:04:5e:06:7e:67:
         39:4e:3c:b6:b7:14:31:8d:d0:2b:ca:98:0a:87:cf:d6:c5:47:
         ba:50:54:20:08:f0:d9:8d:4f:78:34:1c:82:00:87:d7:88:a2:
         df:97:6d:7b:04:73:46:62:87:50:62:2f:66:33:e4:b6:a9:20:
         4d:03:2a:1c:80:0d:a1:77:11:03:29:1b:ad:46:4c:fc:33:1d:
         c1:1c:dd:63:87:23:d2:bc:25:35:93:f9:a6:3e:bf:e0:ed:3b:
         fd:b0:d7:19:23:aa:ba:55:e3:c1:45:bb:ba:e0:d1:41:5a:d6:
         60:ea:14:25:f1:62:01:80:53:00:2f:12:c2:21:ef:b5:74:6a:
         f9:c8:bf:54:9c:d8:13:30:c9:1f:f8:0f:ef:31:21:b1:d6:f7:
         8d:f7:82:de:72:61:2a:7e:73:f2:fc:fa:21:b7:96:3d:44:87:
         ca:fb:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:24:31 2026 by rpki-client