Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238d4ec4-a412-3216-abe1-add8fa6399f8.roa
File:                     238d4ec4-a412-3216-abe1-add8fa6399f8.roa (raw, json)
Hash identifier:          48grOOChaumZyBNRYxIPmL0r1cn1+HGwv6s0opuB8Q8=
Subject key identifier:   93:17:DB:29:96:BB:DE:80:0E:16:83:20:31:32:B3:16:D0:BD:DE:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F9D71045AB9FC90A64400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238d4ec4-a412-3216-abe1-add8fa6399f8.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        76.139.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:9d:71:04:5a:b9:fc:90:a6:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=e6f7e878-029f-4d53-b666-98e8bae5ab33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:f2:b7:cc:43:30:51:ea:5d:a4:43:36:11:
                    4d:59:6f:12:22:78:5a:92:83:58:83:4e:34:87:40:
                    be:b2:a6:b9:46:90:0c:21:da:20:44:cd:af:ae:24:
                    ae:9f:76:79:87:0a:e0:fb:3d:07:bd:56:1a:ad:f9:
                    40:4c:b1:c0:d3:14:61:9c:0c:31:e2:26:e8:1e:0a:
                    98:28:d6:65:df:b6:d9:5d:a1:fa:ce:58:4d:7a:67:
                    d1:98:db:7e:9e:04:ae:6f:1b:67:6d:17:bf:ef:e9:
                    4c:f4:26:74:6f:11:8b:7a:df:31:da:86:a8:16:a1:
                    1e:bb:db:7a:b9:df:1c:73:e7:95:00:fb:2a:a9:cb:
                    da:07:c8:34:a8:8c:ef:9e:f1:26:a8:5d:bc:a8:79:
                    b4:66:f7:2c:61:a7:69:e0:cd:a4:84:69:ed:ea:7f:
                    f6:fc:e0:51:31:0a:04:61:00:fa:b6:02:9a:05:86:
                    4d:01:5f:d2:85:21:82:4a:00:5a:94:98:eb:db:19:
                    b7:da:ef:b5:fb:10:96:23:fd:4f:d7:f1:70:31:f1:
                    31:18:8f:e1:bc:f6:7b:7f:25:6c:ee:44:6d:0a:b0:
                    f2:6f:50:b7:46:4e:71:4e:73:f8:22:d5:83:06:ac:
                    d6:1d:d0:1a:07:50:0b:80:48:26:56:33:7a:11:bd:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:17:DB:29:96:BB:DE:80:0E:16:83:20:31:32:B3:16:D0:BD:DE:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238d4ec4-a412-3216-abe1-add8fa6399f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:f8:cc:be:5b:a4:17:6a:e9:30:6a:77:89:14:7f:46:02:
         36:4d:ef:45:92:4b:f5:84:26:f5:2d:ef:28:97:49:73:ea:29:
         bf:ab:ad:21:dd:f0:64:7d:34:45:b1:fa:c2:cc:5b:22:0e:90:
         56:5c:1e:3e:bd:95:0f:ee:6e:d5:f7:47:86:21:79:27:9f:a7:
         77:e2:28:a8:d5:03:7b:e9:a7:ea:03:9f:5e:ce:b8:73:71:d6:
         1a:c5:d4:8e:c1:6a:25:46:42:45:b9:ba:f7:b5:ff:93:48:4b:
         ba:94:a8:8f:46:6a:4b:59:4a:64:54:01:be:08:61:d8:db:64:
         34:9b:72:e5:9b:fe:f5:1d:6c:10:76:d6:0f:65:3b:26:8c:6e:
         e2:43:0e:bb:84:2b:de:e1:f8:91:8c:fe:10:e3:9f:05:27:c4:
         15:ec:e2:2a:c5:4b:92:3f:6a:0e:24:80:c1:1c:c9:0b:8a:b8:
         ba:9b:69:e9:ca:f1:df:c1:be:8e:02:b2:38:7e:66:86:42:75:
         de:bf:b2:c4:27:24:3a:35:f1:3a:6f:73:6d:dc:70:fd:71:f4:
         09:95:7d:ed:ec:a9:ee:04:57:d2:f6:d3:50:ae:1a:65:dd:d6:
         24:95:95:cb:15:5f:b5:7c:68:cf:2e:38:ee:7f:53:65:f0:a6:
         4f:4b:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:22:15 2026 by rpki-client