Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/274bf9c6-6ffa-38e4-8f43-16e434211fe4.roa
File:                     274bf9c6-6ffa-38e4-8f43-16e434211fe4.roa (raw, json)
Hash identifier:          cEZOVRAuCNVTEYZJZzqnHKBF+ptA+eYpT5OMVLLJUhg=
Subject key identifier:   EB:27:C4:9D:DE:76:FB:C2:43:04:7A:C5:B0:72:60:64:AD:75:53:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF342D44DE9768E1488580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/274bf9c6-6ffa-38e4-8f43-16e434211fe4.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        71.59.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:34:2d:44:de:97:68:e1:48:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=11c1409c-0344-41c8-91a3-55b1640fae9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:38:41:6e:7a:80:0a:c2:cb:dd:04:77:dd:
                    66:8e:70:78:7c:e1:dd:a9:e3:4f:e6:e5:45:08:27:
                    8e:91:fb:8a:f5:70:13:e1:da:07:f2:f3:a3:bc:b9:
                    50:77:ea:2a:91:4f:76:95:87:73:e1:5e:3d:be:5f:
                    cf:07:e6:11:9c:0c:93:77:f8:7c:ca:57:9f:ed:aa:
                    34:5f:71:49:3d:e8:11:32:f5:82:6e:21:5c:7e:e3:
                    b8:8b:32:37:93:f0:ad:f4:f1:9c:9c:87:c6:ed:ad:
                    ed:a3:c9:f1:2c:cd:48:db:89:53:c6:93:fb:bd:b8:
                    c0:6b:a4:62:47:fd:a8:5a:7b:c5:4d:3a:71:cd:aa:
                    b8:72:95:36:63:0d:3c:42:6e:b8:09:ca:10:96:f4:
                    05:73:db:a6:85:f6:a3:7a:20:6a:a3:b2:c9:0c:ce:
                    84:67:83:e1:38:d5:67:8b:4b:2a:a2:d2:88:7b:03:
                    d1:a6:f5:3d:0d:66:1a:a7:75:05:95:a3:62:86:e1:
                    72:e0:c8:44:59:78:20:4c:22:bd:58:72:cb:0d:76:
                    e3:4b:45:20:ff:32:a9:08:14:a2:85:04:e8:7c:21:
                    35:70:e5:f9:63:0c:a7:9e:6d:4e:85:50:08:bf:3a:
                    e0:95:5a:d4:f9:ac:9c:78:f7:40:e2:b1:58:e1:b6:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:27:C4:9D:DE:76:FB:C2:43:04:7A:C5:B0:72:60:64:AD:75:53:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/274bf9c6-6ffa-38e4-8f43-16e434211fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.59.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:95:0f:84:91:f3:f5:b7:a9:61:01:90:fd:27:f5:f9:72:3e:
         31:8a:7d:d0:06:c8:cd:19:ed:57:57:32:69:f6:9d:d6:69:10:
         7e:66:76:00:2e:d3:13:6a:9f:20:71:b9:00:6c:92:81:d9:70:
         a1:a4:22:d9:e3:ef:b8:07:9d:20:07:98:35:e6:5b:f8:6a:2b:
         25:27:c1:99:3b:e8:43:91:6f:04:e0:ac:f2:19:03:ff:62:94:
         be:a5:ed:d5:82:87:48:48:03:bc:29:01:4b:d2:a5:1c:05:77:
         90:9a:7a:86:d4:fb:b8:ec:7d:dc:aa:60:3e:68:05:7c:de:4c:
         1c:29:f2:58:bc:2a:d4:da:69:1b:f3:e2:c2:72:ab:8a:f3:94:
         d4:0d:8c:0e:65:f4:e5:ff:ca:75:ad:07:a4:c9:98:3e:10:b9:
         f5:71:a1:3d:1b:2c:4a:9f:1f:8a:61:3f:38:b5:3f:e8:f5:09:
         35:2a:fe:50:f9:1d:56:2c:24:39:73:37:5e:21:bc:2d:aa:6a:
         b0:44:53:05:e9:4e:0d:c4:99:76:7e:62:ba:3e:0d:db:da:4f:
         7e:06:8b:0f:2a:57:58:5d:55:3d:6f:3b:06:da:eb:2a:cc:01:
         31:d8:bf:94:f2:db:0b:80:cc:72:59:0c:99:43:68:11:d8:73:
         b0:80:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:19:41 2026 by rpki-client