Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b937538-7732-3608-93b9-5c0db57f5c35.roa
File:                     4b937538-7732-3608-93b9-5c0db57f5c35.roa (raw, json)
Hash identifier:          i0qMctsGxM2ZkMHU4Bbc1MT5NaJZ6jEXnnOcm1ISx14=
Subject key identifier:   02:91:B0:0A:EA:A3:65:A9:84:B1:A2:1B:38:48:81:8A:FF:2A:0C:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFC4A3649C4CCA310C8C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b937538-7732-3608-93b9-5c0db57f5c35.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        107.4.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:c4:a3:64:9c:4c:ca:31:0c:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=8be3948e-82cf-430c-a268-d1c499b5d6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:50:93:63:b5:94:75:4a:e1:00:c7:cb:01:
                    88:ee:84:1d:e9:31:33:77:e8:43:77:94:de:32:70:
                    02:6c:20:5e:db:36:83:b8:77:1c:da:f5:4f:cb:de:
                    a0:de:8e:b0:a3:09:a8:eb:f3:7c:c3:e9:e8:1e:d6:
                    b4:05:ee:9e:bc:e4:b9:2b:1a:1a:09:b8:b3:5f:03:
                    5a:05:d8:11:5f:5f:93:57:43:6d:53:63:43:c3:ea:
                    8a:a8:d0:c3:b8:68:d5:bf:70:02:a4:02:e1:2d:a5:
                    7d:c7:34:9c:44:96:84:f5:b0:68:d0:00:9f:6f:37:
                    8f:e9:b3:f9:9e:89:4c:30:e3:82:72:f1:19:f3:e5:
                    40:22:d0:35:16:44:ca:0c:cc:61:35:10:a4:22:ae:
                    08:41:b9:8b:cc:47:8b:4a:d2:c3:fa:10:bf:79:5d:
                    fd:86:cf:a5:3e:49:2a:90:84:8d:5f:74:30:69:d8:
                    e5:8b:cd:dc:a8:fe:ec:2f:8d:cf:48:3b:60:7a:0d:
                    07:6d:60:f4:03:ae:3d:30:7f:70:37:bf:34:56:05:
                    3f:90:27:fa:09:f3:ae:d5:9b:e9:ee:dd:3f:d1:9a:
                    c1:f9:ae:83:3d:a8:15:71:01:52:b0:1e:7a:08:e4:
                    6f:83:d6:c9:a4:13:a1:d2:b1:1b:da:d3:8d:9d:88:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:91:B0:0A:EA:A3:65:A9:84:B1:A2:1B:38:48:81:8A:FF:2A:0C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b937538-7732-3608-93b9-5c0db57f5c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d1:78:ad:11:6e:fd:9a:8e:19:36:b0:0a:4f:a9:16:bf:ed:
         5c:15:c7:f1:d4:e8:24:3c:d8:bf:fb:d6:d9:a1:e6:38:50:5e:
         c7:6e:cb:72:a0:45:b1:a1:c9:bb:e9:a0:f6:6e:db:22:6c:90:
         96:af:34:f6:18:6a:33:0c:cb:39:09:3d:90:66:80:3a:52:8d:
         df:2f:fd:61:0a:47:7d:09:56:01:d9:50:f8:8f:61:f6:d5:0c:
         f1:66:9d:ae:3e:c7:8d:e8:7a:cb:22:c7:07:61:13:02:60:54:
         97:5b:24:66:89:b1:93:7e:42:d3:00:29:9a:84:6f:5c:f2:f1:
         9a:f6:b8:1c:0a:1a:f7:a4:66:29:23:cd:77:d1:43:0b:77:0d:
         cf:18:59:4e:bb:a0:dd:8d:eb:49:9a:fb:e7:f5:9b:ed:09:cb:
         e4:50:8d:52:75:bd:86:a2:99:3a:99:16:b1:ab:8d:84:b8:e9:
         5c:d0:9a:50:0a:a7:e1:8a:c8:dd:49:92:5d:dc:8b:d0:25:dd:
         62:64:67:f1:1b:d6:4b:ac:dd:4d:6d:5b:f3:51:18:19:a8:f9:
         96:e4:48:b5:44:35:59:f5:53:25:5a:37:b9:76:12:f3:b9:df:
         78:dd:b7:3c:a0:4f:48:69:3c:d7:96:f7:ff:8c:4f:0a:7f:b0:
         cb:eb:24:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:43 2026 by rpki-client