Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e1302f-6880-3eed-b0e8-f768b21c59ce.roa
File:                     11e1302f-6880-3eed-b0e8-f768b21c59ce.roa (raw, json)
Hash identifier:          fOOHS9tQpgRdW+rPZpOV/MHrayEN9ugD8XgwUDXUojI=
Subject key identifier:   E8:65:08:64:8A:21:EB:7C:77:16:96:FC:FC:4B:37:FA:A7:42:DC:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87EDCF1450A72C8220C640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e1302f-6880-3eed-b0e8-f768b21c59ce.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     19855
IP address blocks:        65.96.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:ed:cf:14:50:a7:2c:82:20:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=1fdee474-82d0-433c-9875-7ecc18b87a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:d9:b9:50:a6:ad:fb:52:88:19:dd:62:86:
                    88:1f:e1:de:ef:7b:c4:7d:7b:09:ab:d7:f1:c5:8f:
                    91:b7:61:fc:50:c0:89:fe:91:be:9b:16:e8:9e:00:
                    8e:33:a4:74:01:67:05:01:57:9e:a1:73:d3:c9:c7:
                    af:16:a3:f1:5f:4d:78:c5:2f:d2:c4:cf:f4:a7:15:
                    25:3a:97:00:88:08:1d:cb:f5:16:7a:46:f8:2c:ba:
                    41:a3:9e:73:98:65:5c:8a:ba:ff:19:58:b0:54:8e:
                    d9:35:a2:32:9a:40:f3:66:e5:9a:ee:bf:bc:8e:99:
                    69:a1:29:97:42:25:1f:6b:82:3b:87:a5:11:b2:59:
                    67:5e:19:34:1c:c5:b5:6e:36:fb:f5:49:41:c1:b8:
                    4a:fa:df:6f:5a:24:c4:89:ed:10:ec:5b:d1:0b:79:
                    09:8b:64:a1:a1:4a:37:18:eb:b0:96:2d:35:04:ec:
                    4d:b5:19:47:cf:e6:24:2f:e7:5e:96:4f:e0:57:64:
                    1e:99:26:21:8d:e9:46:e1:3d:8f:c4:df:d3:86:1c:
                    99:96:58:15:0b:12:5e:a7:45:8a:cd:f0:84:a0:c0:
                    55:a2:20:44:f8:e3:c3:8f:73:38:a9:3c:b3:f0:b5:
                    eb:c4:8b:19:fa:f6:21:b3:e7:37:38:d2:cd:ca:4b:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:08:64:8A:21:EB:7C:77:16:96:FC:FC:4B:37:FA:A7:42:DC:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e1302f-6880-3eed-b0e8-f768b21c59ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.96.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a1:fc:9a:f1:a3:65:89:95:e6:6b:ab:57:44:3e:68:17:b0:
         36:ab:b1:80:ac:aa:c6:b2:c6:86:fb:62:1e:b6:a4:d9:76:ae:
         5e:13:ee:0a:7f:9e:c1:c8:ef:01:04:de:36:1d:0d:1c:3e:e0:
         6a:7c:eb:f8:a5:87:b7:6c:99:3f:9f:37:b6:eb:29:b8:0c:f5:
         a5:43:2d:d9:22:32:0d:85:46:1f:4a:7b:30:a9:ee:f2:85:4c:
         31:53:21:c8:cc:cf:c2:02:7f:c2:2c:c2:a9:d2:a8:f5:1e:d8:
         a5:12:2a:0a:c2:0e:50:75:ca:53:bb:0a:3e:99:fb:ae:f2:c3:
         c3:e0:62:ea:63:bd:68:45:e8:55:12:1d:98:68:30:8b:7e:51:
         2c:ae:dd:11:9a:3a:53:2d:68:12:d7:bd:64:4a:ad:77:dd:18:
         df:c7:0f:2c:d2:dd:82:e3:dd:27:ab:21:81:7f:15:10:02:bc:
         6f:09:d2:a2:84:36:f0:96:7e:e7:29:83:b4:ea:db:b7:a5:a5:
         4e:a5:f7:fe:66:59:6d:69:46:09:0b:4b:d1:5f:22:97:99:9b:
         08:b8:2b:23:8b:35:28:aa:b1:e9:19:e5:7c:00:a4:aa:c4:c5:
         d7:67:0e:60:2c:ec:60:f6:6f:da:9f:85:76:f2:43:cc:91:79:
         c9:ae:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:25:01 2026 by rpki-client