Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1380167f-503d-3860-995a-dc0163bc51e1.roa
File:                     1380167f-503d-3860-995a-dc0163bc51e1.roa (raw, json)
Hash identifier:          TZPzXn1g20EzYPpoZvZpzpJK/cY7YGL6DxsX3+87jS8=
Subject key identifier:   0B:6A:CB:CA:8A:20:EF:38:1F:FE:42:B2:BA:5F:29:30:EB:DC:87:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6AFD452850A9129D7B880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1380167f-503d-3860-995a-dc0163bc51e1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        69.181.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:af:d4:52:85:0a:91:29:d7:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=35b44363-77e2-4b0c-9163-258289d77e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:6c:61:13:22:ee:19:c9:4f:c3:9f:aa:a9:
                    5f:4b:b9:d1:7a:c0:3c:1f:bd:c9:1b:ff:76:59:d0:
                    6f:9f:85:0b:1c:00:4c:d8:87:98:fd:1f:ef:49:69:
                    74:d1:8f:0a:b9:2d:df:65:ce:c0:14:6c:80:18:dc:
                    15:3e:80:e1:df:d4:85:03:71:0e:a7:42:f4:a5:fb:
                    8c:02:42:87:73:67:15:ff:4f:28:e2:15:cd:c4:09:
                    92:b1:f0:79:d2:5b:0f:84:41:b7:54:f8:10:37:ee:
                    ee:5f:d4:7f:6d:d7:7d:dd:a4:6e:56:70:dd:60:4d:
                    5a:92:98:ee:ba:7b:7b:35:56:35:b5:f0:37:8d:5c:
                    d2:67:a0:ab:5e:47:a7:95:e5:de:05:e2:5f:66:51:
                    6a:f7:83:62:b8:f1:47:a2:fc:7f:5a:e7:42:df:6f:
                    56:c7:e5:be:b2:43:1a:da:90:05:de:05:b2:fb:d8:
                    16:fa:e0:1e:e7:6b:14:f2:38:64:13:a5:4e:d2:89:
                    3d:41:c3:9e:88:7f:2a:7d:40:b6:76:a2:9e:e6:51:
                    1e:4a:f7:38:13:7c:fd:e6:3a:b9:41:11:63:6d:d3:
                    78:89:b6:07:24:a3:ba:0c:ce:5b:1a:3c:36:d6:6a:
                    1e:7c:55:2f:fa:41:95:fc:36:1a:07:f0:b9:24:96:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6A:CB:CA:8A:20:EF:38:1F:FE:42:B2:BA:5F:29:30:EB:DC:87:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1380167f-503d-3860-995a-dc0163bc51e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.181.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:cd:a0:c0:b6:1c:42:67:6b:16:ab:82:ea:6b:e1:6d:9c:
         be:39:bb:93:f5:2f:51:b3:e1:61:a3:26:9d:22:39:22:2e:a1:
         e8:ac:34:2a:8e:98:e0:b2:f5:75:94:f3:ff:6b:73:f5:8c:bc:
         8c:78:08:dd:6a:bd:47:44:eb:27:f3:5b:a6:1d:eb:54:fd:29:
         0c:56:9c:2b:89:32:61:b9:b0:3a:df:2a:2e:e6:00:ba:68:85:
         a8:23:6a:c8:c1:6a:3a:7e:29:f5:28:d0:4c:5c:9b:1b:f6:a5:
         2c:d1:0b:57:8d:a6:4c:25:27:b0:cb:7c:21:d2:5e:7a:59:03:
         1a:cd:69:39:82:b2:a2:e2:2c:8b:4a:f7:0f:7e:6e:ac:0b:79:
         40:16:39:04:bd:27:43:7e:61:bb:72:ab:c7:7a:2c:ce:63:2d:
         9e:c5:0f:35:c7:b2:c7:6e:b1:47:2b:34:50:17:c8:2b:95:6d:
         0d:cc:10:7c:d4:a9:a6:a4:99:42:0d:d9:3d:37:59:36:bd:da:
         c8:6c:c8:da:d5:f5:c6:de:c4:bb:9a:5b:18:bf:14:3f:07:b5:
         f4:00:c5:74:6b:fd:85:fb:2c:7a:38:16:28:47:14:cb:b0:a9:
         4a:0f:ba:d0:17:c7:bf:8f:ff:52:f4:55:86:ac:a8:f6:2f:6a:
         02:b8:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:49:17 2026 by rpki-client