Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1154342d-7e7d-379d-a103-6be4fd5a85ba.roa
File:                     1154342d-7e7d-379d-a103-6be4fd5a85ba.roa (raw, json)
Hash identifier:          FJbQVG6JBcS5rxhAEbvo2hEJxzOsdFpDIpxEA1HbeA8=
Subject key identifier:   09:E9:08:CE:EA:22:03:47:00:24:AE:E4:6A:07:73:B0:47:A2:C5:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B821C3C62EF74508A0D90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1154342d-7e7d-379d-a103-6be4fd5a85ba.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        76.126.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:82:1c:3c:62:ef:74:50:8a:0d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=89018d8b-5452-4433-a41e-70c7e5066b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3b:30:04:ff:2f:d4:95:35:98:cd:8d:78:fd:
                    c5:e3:33:c6:13:27:c6:22:db:df:fd:66:41:0d:20:
                    b2:f2:c9:1d:97:88:f6:1a:03:fb:c0:b0:cf:3e:28:
                    8e:3b:44:2e:71:81:7f:e8:07:0f:f1:8b:3a:13:cc:
                    d3:7f:af:7d:2e:2f:1f:49:7f:a2:66:05:89:4a:d7:
                    6a:81:1f:8e:8f:be:14:ee:9f:fa:cc:bf:d5:00:c9:
                    2b:f0:cd:be:6c:74:2b:11:8b:ea:56:68:ae:5e:0c:
                    c0:24:2e:a5:44:3a:99:fa:8b:da:9f:9c:29:ff:8b:
                    c0:6d:ae:b8:4c:30:ae:b2:25:95:8c:6c:36:4d:f8:
                    b7:e5:01:b9:fa:f0:e6:08:b5:f4:10:23:30:4a:c8:
                    a3:14:1b:92:89:87:8a:9e:98:9d:2f:cd:5b:83:65:
                    12:2d:f5:5a:5f:7d:12:f0:d0:9f:49:2e:68:2a:bc:
                    34:9f:5c:98:bc:07:21:dd:8d:5e:5d:9d:c1:7c:ac:
                    e8:3a:b7:85:9b:bd:92:37:b6:fe:bd:2d:06:ee:c0:
                    a8:92:e6:d7:e8:49:79:ef:60:d7:53:b6:0f:e6:58:
                    18:5d:67:9e:7c:ea:a4:5e:ea:c8:16:28:45:92:b2:
                    50:ef:cb:a9:d4:72:73:79:d0:98:06:da:f4:be:30:
                    5c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:08:CE:EA:22:03:47:00:24:AE:E4:6A:07:73:B0:47:A2:C5:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1154342d-7e7d-379d-a103-6be4fd5a85ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.126.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:02:75:09:17:3d:39:bb:bf:60:e1:9a:37:21:91:02:c1:11:
         9d:30:2f:37:a4:96:48:1e:2c:8f:52:85:64:9c:85:2b:96:0f:
         87:4d:d8:f3:bf:f1:c6:dd:98:8e:71:49:e2:63:bc:c6:d3:a0:
         04:87:7f:bb:fe:97:cc:0a:ba:20:aa:b7:17:f1:d6:59:b6:85:
         30:f7:f8:ad:14:f6:5f:48:b3:23:9a:ca:be:5d:54:3a:62:e3:
         c5:90:28:64:25:af:c7:16:53:fc:1f:c4:74:29:53:76:3d:f6:
         4b:9a:d2:01:07:61:22:70:ef:08:dd:97:b8:bd:6e:5e:b9:d9:
         a3:7e:3f:89:4b:79:02:b3:85:27:b2:dc:1c:bc:0e:d4:12:bc:
         a6:39:88:07:28:08:0f:22:29:10:83:b5:6f:e1:a1:94:57:21:
         dc:2c:7e:9f:00:d3:5c:e6:52:e9:c0:e1:72:00:62:43:98:b4:
         20:98:01:78:67:d0:e6:21:3d:b0:7c:57:eb:62:79:1e:4b:9e:
         a8:df:4d:a1:f1:be:c5:0c:f4:ce:d4:50:2e:e3:93:ce:92:9f:
         57:32:bd:eb:0c:2b:d2:fd:68:a2:4b:df:08:f7:a7:10:c3:44:
         0c:56:a0:e0:40:3f:92:95:b2:f5:b9:d8:8b:10:5d:22:cd:b3:
         c5:d9:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:01 2026 by rpki-client