Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ff3de1f-dbcf-352b-b71f-3a588d28602e.roa
File:                     4ff3de1f-dbcf-352b-b71f-3a588d28602e.roa (raw, json)
Hash identifier:          ZOm9gBlW7xyaM+Al/+pMl7OW2DUQn63y7Jn8JoSfFAg=
Subject key identifier:   7B:D5:52:E6:02:82:51:45:3C:25:CC:6B:34:3E:AC:0C:E2:49:E6:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7521B22E33758FFB6EE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ff3de1f-dbcf-352b-b71f-3a588d28602e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        71.226.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:52:1b:22:e3:37:58:ff:b6:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=5f6141fc-05ab-42f7-a2f9-3bcee40f5335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:3d:b7:47:45:e1:b6:9c:22:3b:b9:aa:ca:
                    e1:95:71:4b:67:4c:05:05:ae:db:56:1d:e8:58:5b:
                    d1:60:f5:0d:e2:87:a6:53:22:c2:d2:ae:ba:14:99:
                    8d:72:b7:ec:34:d9:4c:14:2a:b6:63:33:1d:bd:2e:
                    bb:d8:d4:1a:78:7c:67:b4:fc:bd:0f:7d:01:12:47:
                    40:bf:6e:18:4b:08:6e:9f:f8:5a:af:7e:20:28:41:
                    7c:63:1b:59:e3:a7:7b:c7:8a:dc:1c:cb:17:c6:ae:
                    b6:89:3c:46:58:4e:38:6b:e4:da:ea:69:be:c2:56:
                    c5:aa:fc:0f:e2:0b:3c:17:f8:f7:24:48:ab:4c:77:
                    e9:ce:17:e1:cf:87:3d:43:c8:63:55:3d:99:51:55:
                    b7:3d:08:98:d1:bc:1b:fd:46:7f:66:8e:ce:ce:5a:
                    0d:ca:73:f4:b3:ba:a3:97:0c:45:3e:c6:1c:d4:3b:
                    db:1a:a0:17:be:b8:16:38:78:50:6a:25:13:5f:f9:
                    ad:02:b2:3f:ac:75:60:18:b1:d7:6f:f1:99:d6:1f:
                    e8:35:51:9f:e0:19:d7:0b:04:9d:78:6c:f2:e6:93:
                    6e:bd:7b:f3:a0:5e:bf:a7:46:f4:50:70:1e:68:db:
                    ca:55:27:df:f0:0f:b1:cb:35:e8:81:26:bd:00:9c:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:52:E6:02:82:51:45:3C:25:CC:6B:34:3E:AC:0C:E2:49:E6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ff3de1f-dbcf-352b-b71f-3a588d28602e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.226.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:de:52:75:f9:a7:cd:0b:07:af:72:58:b5:d4:a1:77:06:
         96:d1:80:50:d7:e9:60:6d:be:27:3b:13:b0:44:c2:e7:c2:41:
         b0:ad:da:83:68:7d:4c:75:a5:f0:2d:8a:49:a7:5b:5f:84:82:
         65:99:a3:6f:72:f0:17:0e:60:42:b4:1b:06:66:6c:93:c4:11:
         76:cb:d5:d9:35:52:06:72:bd:f3:26:a5:a4:a8:66:5e:41:89:
         c5:17:64:15:86:5d:fc:62:34:55:b3:83:dc:2e:b0:9f:a8:0a:
         b9:60:67:a1:53:6c:a1:78:b7:fb:69:08:ba:e3:14:cf:c6:a5:
         b3:4a:81:0e:17:08:55:2d:ac:d2:93:56:02:c0:5e:12:39:65:
         56:d9:0f:7e:f8:57:76:71:c8:75:90:3a:ec:a1:93:c1:cb:c0:
         90:32:3c:e6:e0:8d:4b:fd:e3:56:35:a2:86:b0:5e:f9:22:b4:
         ad:3a:7f:f0:6b:1c:5f:b5:8d:8b:a2:69:eb:e8:3c:a6:47:ec:
         60:0d:2d:f4:96:99:5a:b3:f5:5d:21:41:5a:65:1d:bc:85:00:
         cb:f4:45:cc:78:98:93:74:fe:d7:16:b2:b2:23:dc:44:08:50:
         aa:ff:1f:44:b6:82:68:f4:72:04:0b:2d:d7:59:80:b0:0c:db:
         20:54:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:13:17 2026 by rpki-client