Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa
File:                     2f71b400-38e3-3931-a436-bfa122952b2e.roa (raw, json)
Hash identifier:          a2tZDHYls/FEnB/Bo5p6O9R4Sg1XZTpQtPVC4JO3Kbo=
Subject key identifier:   74:C0:B1:34:AE:3E:0E:98:7C:A2:7F:89:04:AA:35:7F:DB:BC:DA:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D11727EB01441AC0E256F02C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        96.99.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:7e:b0:14:41:ac:0e:25:6f:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=d5245d20-f7f1-4ea5-9707-387997feab16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:81:e1:da:30:36:60:95:db:03:10:73:a7:
                    23:68:95:4b:93:51:20:d0:de:21:7f:29:28:c7:0f:
                    ca:7e:c9:63:f7:f4:7f:31:16:96:bf:2a:43:4b:d3:
                    2e:52:a7:59:67:4b:87:49:56:57:f3:a6:63:a7:88:
                    87:13:46:c2:c3:51:e6:fd:5a:72:51:da:7d:ee:a0:
                    ba:5c:7c:fc:d5:78:86:19:d2:0d:e0:6a:2f:2d:79:
                    a8:6c:d6:fa:22:71:db:81:99:0e:53:89:5b:df:93:
                    1f:3a:10:5c:0b:b5:59:bb:1d:44:45:c5:ff:f4:07:
                    77:02:8f:35:08:07:e2:9a:1c:8b:5e:1d:4e:12:8b:
                    3a:20:28:df:fb:82:25:6a:37:fb:fd:0e:c6:83:8d:
                    0c:52:6f:3c:cf:7d:c7:4a:60:b4:f0:3c:6e:ff:ac:
                    e4:4d:0d:c0:83:96:6a:86:28:79:34:83:77:15:3d:
                    04:1d:77:d8:36:40:e5:ab:fe:f8:c9:cd:2d:5f:e4:
                    cd:93:7f:dd:d3:50:9c:cf:d4:ec:17:da:6f:9d:58:
                    b4:33:10:4c:a4:1a:e7:11:c1:94:7b:9d:2c:cd:83:
                    ab:4f:fd:d9:8c:e0:53:77:d9:ef:b7:e5:ad:45:6d:
                    99:7f:a8:b1:65:62:28:e9:95:fa:dc:23:16:85:88:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C0:B1:34:AE:3E:0E:98:7C:A2:7F:89:04:AA:35:7F:DB:BC:DA:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.99.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:09:9b:61:d3:b2:0e:44:d0:d6:e9:e1:09:76:4f:fc:88:
         37:2b:c5:ed:73:e6:4a:d4:50:12:3d:46:12:51:1b:77:19:22:
         15:7a:46:92:1d:ce:6d:25:6f:2a:42:50:82:b3:27:c2:ed:8e:
         3c:80:2b:f2:d9:e0:5d:b8:7e:71:83:2b:86:c0:4f:56:34:fd:
         fb:8b:64:97:fa:f8:68:8e:3e:cf:dd:0d:27:36:bb:c0:cc:5f:
         64:ac:51:cf:85:21:42:d7:c7:b2:36:78:d5:2f:eb:7a:db:34:
         8c:84:b2:42:56:a9:1a:fa:bd:5d:d3:f2:64:71:85:ce:26:6f:
         48:e4:77:b8:fe:e8:9d:6d:63:ad:b1:30:46:7c:70:f5:67:92:
         93:68:36:69:f2:12:a7:68:aa:dc:a4:52:15:65:58:44:d7:50:
         a8:b0:6a:18:b1:70:03:7b:6b:d1:b0:a5:72:39:08:f4:d8:f4:
         0d:70:0a:11:28:9e:0e:a7:77:76:3a:84:e4:91:31:e5:00:30:
         b1:f6:e1:16:79:fb:e7:86:b5:c0:e3:48:a6:b3:62:55:66:43:
         19:92:5b:6d:8b:59:e2:23:ec:da:12:df:b1:5a:4d:06:ac:57:
         6c:6d:bf:9a:c5:1d:35:bf:d4:cb:1e:9a:b6:52:89:e8:cc:51:
         7b:23:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:33:38 2026 by rpki-client