Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e438c60-f2c5-3244-882c-1788b23df6d6.roa
File:                     4e438c60-f2c5-3244-882c-1788b23df6d6.roa (raw, json)
Hash identifier:          0Agqds802nTtFRLzIF8v2PK4XcrJPhgudNN/tXa0FdM=
Subject key identifier:   EC:42:FB:CD:01:F6:BA:61:EE:F9:65:E3:CF:62:87:6E:84:CA:70:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E418D0E159CE40FC69D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e438c60-f2c5-3244-882c-1788b23df6d6.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        76.119.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:41:8d:0e:15:9c:e4:0f:c6:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4094ce35-a71f-4aa9-a697-734bb9822072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:22:c6:06:56:bd:84:91:a7:d9:b4:25:b9:
                    c7:6a:22:db:4a:34:9e:5b:c1:c3:2d:76:09:a1:19:
                    c7:00:de:b6:27:0a:e4:dc:58:19:9e:83:c9:e4:bd:
                    c9:b5:bd:f1:81:ee:08:42:0e:9b:ad:fa:12:ca:44:
                    3d:a5:02:5d:f4:b7:e0:10:27:0e:89:61:46:8a:55:
                    cc:ab:1c:40:1d:63:18:81:fd:1c:59:57:9b:f9:7a:
                    13:d3:5c:71:f9:63:5a:6f:49:c6:05:c2:00:e5:4b:
                    e1:ba:be:51:63:f3:20:4b:3e:e5:2e:1b:8a:68:42:
                    c7:88:18:14:fa:0f:da:2a:df:fd:ca:67:87:e2:2e:
                    95:7c:e1:56:d3:39:49:64:b3:4f:6d:e9:3e:48:47:
                    e8:74:6a:36:aa:51:f2:5a:04:17:bf:2a:3d:cf:5d:
                    4f:5f:f1:89:bc:ed:fa:35:10:46:0a:b4:ef:72:25:
                    e7:09:a6:7b:f5:59:d9:ca:60:58:96:17:cf:2f:b7:
                    19:0b:d9:60:3d:68:41:9d:a5:0a:5a:1e:15:f9:b9:
                    a4:bf:82:a9:96:dd:b7:42:13:7f:3e:81:31:a5:de:
                    93:93:00:11:3e:c2:bc:d8:d3:d4:77:c7:ed:81:6c:
                    c7:61:c2:89:12:85:60:98:17:68:e3:b3:e4:16:cf:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:42:FB:CD:01:F6:BA:61:EE:F9:65:E3:CF:62:87:6E:84:CA:70:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e438c60-f2c5-3244-882c-1788b23df6d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.119.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ea:4b:fc:9d:37:fa:52:9f:0e:93:04:52:b4:f9:3b:c6:44:
         d6:b8:b6:cc:44:61:90:33:95:69:2f:0d:70:12:5b:3b:b4:c4:
         e5:2c:ba:f7:b5:07:c0:9f:c7:d5:72:7c:b1:51:e2:24:51:9a:
         18:41:57:3c:56:44:03:ef:22:57:b1:9a:c1:4b:f7:de:62:6c:
         87:e5:12:7b:5c:4f:8b:db:29:b0:f9:87:6f:9b:32:91:0a:f2:
         84:ec:36:59:7e:d2:97:50:87:ce:ab:5a:98:8d:15:d7:43:12:
         27:72:25:21:0c:fd:0e:7a:ae:4c:f3:4f:91:1e:5f:42:2c:eb:
         76:af:1e:e4:bd:b9:9c:76:41:ad:f5:3e:5e:31:26:8b:4f:d9:
         9c:b1:3c:d8:5a:52:a7:be:88:b2:a5:c0:67:84:d3:1d:26:4a:
         66:7a:53:a7:a9:1c:0d:f3:64:2a:9b:71:f9:c5:3c:02:a7:43:
         bf:b5:50:22:f8:ff:70:c0:77:ec:6d:a9:22:18:61:e8:67:c0:
         8f:fb:b9:12:ef:7a:4d:32:42:28:a7:9f:5d:5d:25:51:38:61:
         d3:e1:52:54:02:48:f1:3a:a6:9f:52:98:44:c3:24:01:06:3a:
         e7:9c:4b:93:c1:13:b1:d8:d0:4e:b0:c4:dd:d2:0b:55:5e:43:
         82:5f:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:11:05 2026 by rpki-client