Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5253c7c3-42dc-3f70-b193-3cd8efa1270b.roa
File:                     5253c7c3-42dc-3f70-b193-3cd8efa1270b.roa (raw, json)
Hash identifier:          raTMhMfZrHxX6OkKqFit6lP7bN4cJ2gIo6hIjRM5wfY=
Subject key identifier:   EB:9F:CC:9B:82:2E:C8:C7:D1:51:29:79:BA:C6:57:F2:6A:CE:53:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600E58F1B85508EBB5CB220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5253c7c3-42dc-3f70-b193-3cd8efa1270b.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        107.5.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:e5:8f:1b:85:50:8e:bb:5c:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=fbe69c37-baea-45fa-8664-1dc7231f83da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:70:f8:d2:e2:62:23:4f:ea:d4:db:f9:99:
                    e1:c6:90:6a:cb:46:de:e1:6b:12:68:f1:e5:e8:f0:
                    72:b7:74:8c:33:f2:28:17:27:af:6f:e2:ae:61:62:
                    0b:84:74:be:63:91:ea:96:49:44:4c:19:0f:e6:60:
                    9f:2b:de:dc:d1:f4:6f:c8:ab:83:aa:db:e2:a7:7c:
                    6a:af:28:fe:e9:c6:6a:f2:25:c2:69:c9:60:c7:c5:
                    0b:72:06:34:4a:d6:d0:6a:aa:4b:8a:d3:8a:bb:0e:
                    52:50:67:6e:b8:bd:ea:6c:68:8f:8f:a1:99:01:25:
                    a4:cb:58:98:77:bf:67:4b:a9:c0:dc:0b:70:0b:d6:
                    5a:47:9b:cc:b3:37:bb:c7:92:7a:23:72:c1:00:5b:
                    38:71:e5:95:17:8a:e6:29:a4:2c:ed:05:b8:e6:f8:
                    f7:bf:0b:2d:43:70:f5:d2:7f:f3:c9:8a:e4:98:77:
                    65:82:21:a6:c1:f1:ca:3b:2e:55:84:9f:33:55:44:
                    47:c5:fb:a4:a8:dd:b0:4e:a2:e4:d5:ce:86:53:64:
                    e4:46:b9:36:7d:36:04:e9:3a:1b:87:1c:fc:9c:55:
                    04:41:a6:40:3b:de:39:54:e4:1b:e4:1a:c6:b5:30:
                    b7:9a:fb:7c:51:54:b1:b4:e4:0d:08:4e:ce:3b:8b:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:CC:9B:82:2E:C8:C7:D1:51:29:79:BA:C6:57:F2:6A:CE:53:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5253c7c3-42dc-3f70-b193-3cd8efa1270b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.5.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:12:91:03:70:d9:e0:8e:c1:bc:3f:29:9f:59:22:fd:5b:b1:
         66:20:05:62:01:af:e5:60:fb:45:e1:cf:b0:ed:86:a3:59:d4:
         1a:3c:ba:e9:37:75:e2:33:cf:86:b6:45:2b:02:28:1d:4b:5f:
         e4:4e:1a:ee:fe:e8:1e:69:bb:94:0f:66:61:70:d5:77:b2:54:
         56:63:72:c6:cb:53:33:17:c1:33:c7:64:33:64:fe:41:ab:d2:
         48:23:66:c0:7f:12:97:4a:a1:58:5e:55:4e:19:78:1b:65:76:
         d0:8c:ae:2a:da:f5:e3:e0:28:7d:ae:4f:82:7b:1d:d4:a9:c3:
         b7:b8:b1:d1:e0:fe:8d:e8:8c:63:dc:e9:2e:ce:3c:07:c9:81:
         cf:80:61:dd:06:5b:ca:d3:53:62:77:4a:40:cb:95:07:06:92:
         32:c7:82:b5:9d:f9:16:88:02:99:6c:1f:2f:93:32:d2:04:57:
         f2:26:34:a0:45:0d:7c:c5:c6:2c:d0:c6:bf:7a:15:89:f0:4c:
         d3:e8:cc:0f:d1:cc:8a:33:89:e3:f3:93:e7:27:44:6b:d3:2c:
         51:ca:94:7b:49:05:4f:94:9f:9b:1b:5f:dc:16:77:26:04:5f:
         25:4d:71:69:99:4a:f3:3e:93:c2:47:02:34:33:cd:65:31:87:
         fd:ac:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:26:52 2026 by rpki-client