Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/317fe628-ca44-325a-9028-3d46b28ae65c.roa
File:                     317fe628-ca44-325a-9028-3d46b28ae65c.roa (raw, json)
Hash identifier:          5ronxu+X8ddlQxHj+MSGOSLjQv4szuLeo3CxFExGPDA=
Subject key identifier:   67:CA:FB:41:9A:5C:5F:AD:8C:09:D9:6A:40:26:73:D0:CC:2D:CC:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600305DB6A1D2B41291A300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/317fe628-ca44-325a-9028-3d46b28ae65c.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        76.31.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:30:5d:b6:a1:d2:b4:12:91:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=bf42466c-5923-4249-810f-24c45a4faec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:02:1a:df:fb:cf:4d:c8:48:24:cc:91:c3:
                    51:31:d6:12:56:61:be:7d:0d:97:e8:6d:1a:3c:7c:
                    f9:d8:1f:86:8e:5c:b1:d7:66:46:d3:cf:08:b8:6c:
                    34:56:cd:7d:cb:01:bb:7e:53:cb:b4:33:83:17:65:
                    73:a4:60:ef:54:65:24:ae:14:8c:3a:17:9a:83:7a:
                    ef:de:b2:49:7e:fe:4f:fe:7b:72:e9:58:91:a4:ba:
                    87:e8:82:33:f7:19:46:c0:33:50:06:2e:33:6e:72:
                    c9:e0:b1:c5:b1:a8:ea:f5:95:4b:64:9f:27:71:bc:
                    3b:c5:63:91:df:c3:9d:e8:3a:98:93:05:3c:ff:0f:
                    d9:a9:51:da:1e:2e:65:c9:58:0f:d3:86:af:d5:b9:
                    13:c8:08:d2:04:9b:46:be:71:93:51:c8:a6:17:c3:
                    50:64:de:74:ec:7c:00:0d:a3:58:d2:5d:d0:ff:f2:
                    cc:ee:70:a9:d9:0c:67:8e:0f:e9:95:5e:5c:41:1f:
                    0f:d1:39:62:01:fd:a6:8f:49:f5:1a:13:60:10:ee:
                    88:90:e6:c3:91:ba:e9:10:0c:5e:17:ec:dc:dd:14:
                    bb:47:83:13:cd:43:cf:ee:44:4a:74:83:f1:73:d2:
                    cb:2e:e9:b2:06:03:8c:99:02:e5:1d:4b:bc:96:f5:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:FB:41:9A:5C:5F:AD:8C:09:D9:6A:40:26:73:D0:CC:2D:CC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/317fe628-ca44-325a-9028-3d46b28ae65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:37:98:72:29:44:ed:a1:34:32:f8:be:57:dc:66:b3:07:
         e0:15:63:7b:2b:3d:3e:82:18:10:9b:1b:2c:d9:e4:69:bd:7c:
         16:67:77:0c:06:50:52:5a:c5:b0:59:81:41:70:c9:79:92:67:
         45:49:e5:12:65:7d:6a:b7:42:fe:f9:21:eb:19:fa:0e:1b:f4:
         0d:fd:fa:6d:07:ef:59:a7:0a:53:43:f1:b7:1a:41:bd:b7:db:
         60:af:e4:af:ce:f5:c5:56:6e:43:4f:77:39:07:08:63:c9:d6:
         53:df:e8:d7:f0:c4:44:4d:cd:54:f1:88:10:92:cc:fd:d4:35:
         54:64:ac:b1:3e:e4:15:8f:eb:36:f4:31:44:01:92:38:00:bf:
         db:43:90:85:10:4e:9d:dc:9d:cf:e0:15:03:0b:2e:70:be:b5:
         b3:0c:e0:b1:d3:6b:6d:15:27:2a:84:60:8b:cd:87:dc:8e:41:
         2a:08:46:97:d4:92:43:71:e4:4b:4c:1a:15:9d:e5:a3:b1:cf:
         ee:39:ce:62:ea:ca:e7:53:26:0e:5d:2a:37:e8:57:60:54:9a:
         bb:62:2c:07:c3:b3:25:6d:ae:e1:a1:af:23:eb:76:1d:a4:34:
         97:a5:f7:58:28:ba:1d:99:ab:85:be:a4:d0:48:a8:0b:2c:9d:
         ca:7b:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:40:23 2026 by rpki-client