Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a98c2d9-88f2-32d0-a313-c0eb9608351a.roa
File:                     3a98c2d9-88f2-32d0-a313-c0eb9608351a.roa (raw, json)
Hash identifier:          58JfweApoC6Vo3uHZt4kfH82EY8CVe0K088b9I/gCes=
Subject key identifier:   C6:27:95:47:5D:95:AB:AF:EA:AD:F8:DF:3D:81:5A:19:B4:AF:40:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B87D478C11F9CA3518700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a98c2d9-88f2-32d0-a313-c0eb9608351a.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        76.21.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:87:d4:78:c1:1f:9c:a3:51:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=de4c321d-acd4-4efc-9606-fb68ef97c910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:92:11:57:82:86:a9:99:22:fa:db:17:73:
                    50:a5:b8:e4:27:da:e0:f9:29:d0:c0:27:fd:ea:41:
                    d3:9c:0f:02:1f:93:81:7a:2d:95:39:1b:9a:37:d9:
                    c5:3e:7f:7c:67:ab:c6:1b:d3:34:e6:e0:ca:e4:70:
                    52:40:30:56:30:9c:15:b1:c1:42:bb:dd:03:0d:0e:
                    22:66:72:ab:57:ef:5d:b1:66:0a:89:36:35:b0:97:
                    41:eb:27:3f:61:ee:52:74:5e:78:1f:8d:23:23:b4:
                    3c:4c:97:4b:3c:4f:1e:2a:a3:ae:c5:6a:82:03:c0:
                    d4:e0:5b:a2:c8:16:ce:f2:d0:60:f1:a4:96:26:fb:
                    4d:ca:7e:19:b0:4c:34:0d:90:92:ca:1d:2b:9b:a1:
                    fd:bc:b5:81:9f:d4:36:66:32:7c:f6:5f:24:ef:cc:
                    dc:ac:54:44:87:4f:f0:e0:04:96:f7:19:48:6f:e5:
                    98:91:3c:a3:2f:db:99:bf:fe:97:36:a6:68:13:30:
                    81:3a:13:fd:7e:12:4a:ba:a5:51:76:24:1a:9e:f5:
                    fa:35:2a:59:4f:a4:3c:68:01:54:58:04:8c:2e:ef:
                    b9:41:df:70:2a:50:48:15:23:7b:94:3e:91:85:ff:
                    33:c7:3d:dd:52:94:52:98:7c:47:77:38:31:98:8d:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:95:47:5D:95:AB:AF:EA:AD:F8:DF:3D:81:5A:19:B4:AF:40:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a98c2d9-88f2-32d0-a313-c0eb9608351a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.21.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e9:a3:d0:5d:f2:03:61:06:e9:88:6c:55:38:36:7e:04:7c:
         ed:a1:c7:cd:11:bc:60:f7:eb:be:23:c8:07:e7:c6:b1:a2:b5:
         fd:4f:06:4a:46:8e:78:64:c4:6e:f4:26:46:34:47:2c:8f:a1:
         00:a8:a3:a7:50:94:36:cf:ca:1f:7f:83:c6:7d:97:68:91:21:
         f4:0b:c4:42:65:ee:e7:dc:02:85:21:75:07:47:09:11:01:2b:
         07:03:75:cd:12:ad:87:38:93:fb:a9:99:c4:f6:d7:9d:19:df:
         04:02:b4:25:a4:a0:d0:56:32:96:88:4b:00:06:33:be:c6:91:
         35:c2:32:0a:63:f7:44:cb:57:1f:85:ed:95:8c:ac:99:91:62:
         53:dd:84:30:07:b2:77:3b:93:20:7e:c1:d0:f1:17:49:fb:71:
         06:e7:35:8b:44:88:f4:a2:a6:71:eb:9c:6f:38:d3:84:39:d3:
         ee:e6:37:b0:fd:25:73:dd:09:2f:39:ce:e1:94:51:c4:f0:36:
         10:d2:18:50:58:93:22:9f:d7:d7:17:af:24:9d:11:29:9f:7d:
         43:37:05:a2:fa:b6:4d:75:ad:70:f3:4c:49:57:93:bf:d0:20:
         f2:eb:fb:8c:fd:ce:59:d1:3c:e3:86:2c:26:ca:8c:51:98:8a:
         ad:e5:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:35 2026 by rpki-client