Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416a4f01-e781-3ea4-a190-ad97ccd417ea.roa
File:                     416a4f01-e781-3ea4-a190-ad97ccd417ea.roa (raw, json)
Hash identifier:          LpNkjJIkmeB0sWy/FiKCk1JbBZyFhVumZj5S2WEldG0=
Subject key identifier:   7C:33:EC:0D:1E:68:74:E3:6A:E8:5C:AA:D0:55:58:90:50:7A:AD:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4977956643FB494B62954800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416a4f01-e781-3ea4-a190-ad97ccd417ea.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        71.206.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:95:66:43:fb:49:4b:62:95:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a9ad45c7-b7cb-4d30-b0fc-45362e17105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:1e:e2:ad:4d:98:82:93:92:a4:46:00:aa:
                    6d:b8:8c:ad:cf:65:59:9e:6f:97:d3:26:f7:d3:ad:
                    5d:b1:0e:47:07:de:88:f6:d2:ba:51:c5:d0:70:e6:
                    98:d8:81:54:67:8c:1d:0d:7d:2f:c2:80:32:4a:e2:
                    d3:2e:9d:5d:04:f2:2c:d2:3d:d9:d1:23:f8:9f:05:
                    b2:40:20:92:c9:9d:ba:df:55:a3:eb:e7:b6:88:0b:
                    cc:b8:da:7d:1f:cd:80:d1:83:05:eb:3d:c6:82:b3:
                    ab:31:fa:2f:f9:8f:99:d4:5b:9f:ea:14:77:c0:2e:
                    7d:e6:a3:e2:0c:f8:60:bf:3f:da:0a:34:24:08:7a:
                    ab:bb:14:00:6a:92:48:77:ee:a1:dc:91:2b:88:de:
                    ad:6d:e0:09:e8:0d:cb:2e:4a:fa:c4:39:81:da:c8:
                    49:19:cc:d6:fa:0b:b7:28:5d:51:e8:4a:f1:8a:ef:
                    08:b5:28:73:b2:c6:51:d4:fb:be:25:40:44:67:2d:
                    99:bf:b7:7f:3c:00:96:0d:21:4f:49:ad:81:f7:cb:
                    22:3c:93:52:a6:c1:1c:7e:b5:05:17:3a:28:76:ad:
                    ef:67:13:bc:b3:fb:da:a0:c3:5f:3e:e8:bc:63:b7:
                    d4:96:58:25:62:ac:b2:11:f6:aa:17:64:c5:82:a6:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:33:EC:0D:1E:68:74:E3:6A:E8:5C:AA:D0:55:58:90:50:7A:AD:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416a4f01-e781-3ea4-a190-ad97ccd417ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.206.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:92:af:5d:92:2a:5d:de:86:1b:68:d6:4d:17:11:56:83:b6:
         f9:e6:2e:8d:bb:f2:9b:49:0d:68:e5:4c:23:4f:42:c1:18:d0:
         b7:76:b6:70:3a:77:cc:e3:2a:ba:e8:91:40:70:ce:12:a6:4b:
         7e:53:74:90:d8:69:2f:75:8d:7e:07:d8:da:00:11:eb:90:be:
         ab:af:2d:70:06:fb:bc:d9:ee:b3:19:01:97:a4:a9:ce:c0:0d:
         79:b9:c0:96:e5:5b:05:ed:de:db:66:4e:2c:4d:78:d4:77:69:
         a2:5e:d2:b7:37:33:68:da:dc:b3:9e:5f:f0:f2:3e:34:8d:52:
         af:d0:38:59:81:c8:db:52:b4:6d:6f:66:95:2c:6a:a8:bb:4b:
         03:7e:bb:3f:6e:4a:c1:bc:86:f3:cc:29:92:ae:01:3c:d5:b2:
         5a:ed:be:5e:04:8c:94:50:f6:95:6a:80:ed:f2:21:5d:fb:62:
         bd:dc:b5:4d:ab:7b:72:7b:e5:82:e0:a1:76:3c:71:c9:aa:2e:
         94:7c:13:26:02:32:e6:aa:a3:b2:51:b7:ff:81:ac:63:29:65:
         53:0c:8a:68:01:3c:2a:4e:c3:ca:85:45:9f:00:04:89:0a:36:
         c9:2a:d4:b3:0c:13:f5:97:d3:43:86:89:ad:45:f1:37:0e:2d:
         e5:5c:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:21:37 2026 by rpki-client