Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29aa7d5b-33d2-3dc1-b291-8edac874f894.roa
File:                     29aa7d5b-33d2-3dc1-b291-8edac874f894.roa (raw, json)
Hash identifier:          pwEZWkQGs79Jx4egZYoGHGoYSDieIgbePJKAlpjHTh8=
Subject key identifier:   C0:9A:FB:75:8B:21:8E:66:24:A3:1E:FD:D9:68:18:57:A5:06:00:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B2AEF906757D36DD7EC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29aa7d5b-33d2-3dc1-b291-8edac874f894.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        76.150.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:2a:ef:90:67:57:d3:6d:d7:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=54342f88-0fe6-46c4-b250-64a9f8789310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:a3:22:3c:25:04:5d:93:e0:2d:a4:45:3c:
                    b3:ef:78:b4:62:b8:d9:03:05:81:29:9b:82:9c:01:
                    bf:4c:f8:96:85:e7:57:41:47:9a:2b:a4:dc:f6:04:
                    13:17:d0:38:af:a9:92:53:3c:ad:3a:be:af:37:a4:
                    56:c0:b6:20:c9:05:ef:33:a6:a7:f6:c7:bf:45:d4:
                    37:11:88:82:16:40:28:7f:c4:a9:91:0f:7d:e7:d7:
                    95:95:43:b9:76:f2:02:30:ec:03:be:b5:b5:25:20:
                    ce:f6:b3:ce:83:fa:c6:33:af:74:29:59:89:f9:8c:
                    c4:40:ba:94:c8:5c:e2:9d:9d:82:78:48:db:19:18:
                    34:1a:e3:18:38:e7:ce:d2:af:01:84:11:c4:a5:3f:
                    f0:7d:ea:8c:6a:fd:12:42:76:be:00:cf:a8:3e:3e:
                    35:eb:1d:0d:58:d1:1c:96:6c:1b:07:0b:02:c4:d3:
                    3d:1b:9e:d6:49:5e:30:c1:2b:6a:26:8e:da:43:3a:
                    7d:18:dc:d0:83:14:24:f4:56:f7:a8:9d:05:81:6c:
                    dd:e5:68:3a:db:65:4b:55:03:68:2f:04:a4:e1:47:
                    48:1d:eb:72:04:fb:62:31:0b:de:46:79:14:fd:15:
                    d6:93:49:b5:24:17:2a:f0:32:7a:50:5f:c3:9c:1f:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9A:FB:75:8B:21:8E:66:24:A3:1E:FD:D9:68:18:57:A5:06:00:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29aa7d5b-33d2-3dc1-b291-8edac874f894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.150.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:51:4f:86:07:26:5e:19:66:ad:4f:af:d2:d1:bd:8a:83:
         8d:fe:62:88:61:b2:4e:b7:da:75:92:d0:be:e1:63:54:20:46:
         74:bc:5b:16:3e:9a:7e:34:6e:5e:4b:48:69:cb:4c:b6:99:10:
         33:8e:df:d2:95:22:c1:6c:4f:6b:22:e6:e8:b3:40:6b:b2:44:
         1e:5e:26:8d:0f:05:8b:f3:32:37:18:3d:a9:46:1b:0a:a6:a3:
         a4:f7:38:2d:8b:9a:fe:ba:fa:b3:4a:3a:5c:2c:7a:81:64:04:
         b1:7c:2e:d6:dd:03:c0:d5:4c:93:7f:f9:4e:f4:a9:2d:47:c9:
         00:28:3e:99:89:c2:20:ec:e5:f1:06:c1:d8:2f:72:50:28:77:
         d1:3f:f1:97:c2:cd:32:7c:5c:64:7a:5b:d8:33:72:7a:54:3f:
         3a:2b:f2:2a:fa:86:cb:ee:dd:13:d6:62:53:fc:46:3d:45:6b:
         ba:e1:5d:af:98:6c:1c:36:16:41:ed:ab:d4:76:21:2a:b6:21:
         78:cf:e5:7a:4d:56:eb:78:66:d8:9b:63:3f:79:e6:a5:44:e8:
         fc:83:4f:f1:72:f4:b0:9a:5e:ab:32:1f:7a:9d:7b:ca:7b:d3:
         63:c3:93:cc:4d:4d:d3:70:cd:04:96:2d:82:cc:46:e3:db:ad:
         85:f4:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:10:31 2026 by rpki-client