Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/557d830d-ad40-384e-be0a-2b52b7609950.roa
File:                     557d830d-ad40-384e-be0a-2b52b7609950.roa (raw, json)
Hash identifier:          zdAODJWt7baewMy7eojLgxYD/DdElUfaTogcdtOMF5g=
Subject key identifier:   A4:D3:46:46:73:5C:EC:67:5D:63:54:07:3A:E2:AD:58:FC:F0:ED:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E360149D76184952465781BC4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/557d830d-ad40-384e-be0a-2b52b7609950.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        76.31.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:49:d7:61:84:95:24:65:78:1b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=67de6d58-247f-44e9-8fa0-3602d10ee770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:71:f8:bb:33:97:cc:2d:86:cf:08:97:e1:
                    a6:b2:03:b6:52:49:4b:51:9f:cb:b8:cf:80:21:e7:
                    d9:b8:3e:3b:22:2d:b5:21:8a:d5:96:9b:4b:c1:66:
                    95:69:97:5f:94:4d:1b:cb:04:90:8f:fd:d5:67:11:
                    6a:b8:c8:52:06:9a:6f:cf:aa:b8:94:f0:1d:32:cf:
                    a4:b9:1f:c8:56:10:7b:70:90:a8:54:2e:eb:49:e1:
                    61:48:f9:54:58:52:32:cc:3c:45:1b:76:50:92:96:
                    9a:7e:bf:ba:49:ee:68:ab:b6:ab:2d:0d:ab:89:9e:
                    40:cc:9b:24:98:d0:0f:4f:54:53:77:d6:61:d9:70:
                    54:b8:d2:14:d5:19:fd:6b:da:5b:77:0a:6d:e6:c8:
                    82:0f:78:01:e3:f8:6c:1b:ea:9f:ea:2f:28:ae:9f:
                    18:cb:25:41:5c:42:78:66:a2:4f:ff:90:70:23:18:
                    0f:f4:c7:eb:75:fc:d0:85:17:a4:26:82:14:56:31:
                    13:3c:a1:57:2c:87:33:57:92:1f:d8:be:43:13:76:
                    1c:e2:c2:6a:d5:1c:4c:33:88:58:41:15:a0:80:5a:
                    cd:a9:b1:ec:57:2b:4c:64:aa:67:5c:1a:96:71:95:
                    b1:f7:d1:06:52:3b:49:d6:55:c4:c3:2d:8c:0a:8c:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D3:46:46:73:5C:EC:67:5D:63:54:07:3A:E2:AD:58:FC:F0:ED:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/557d830d-ad40-384e-be0a-2b52b7609950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:63:fc:8e:7b:6b:b4:b2:82:a4:70:69:66:4c:d6:93:5f:
         96:e1:22:3f:89:0c:ee:25:2e:55:bb:f9:7d:24:4b:ac:32:e5:
         87:4c:df:b8:e1:46:8c:74:0b:24:d0:eb:b4:f8:86:28:47:ae:
         a1:46:0e:15:1e:62:22:b5:96:03:60:39:d9:58:e9:c6:61:09:
         c7:0a:c8:48:2b:25:f9:86:cd:b2:d7:d0:c5:cc:e5:f2:1a:7d:
         90:89:6f:c5:c9:22:27:87:99:9c:29:4f:39:d0:72:8f:57:ea:
         7c:69:6d:94:ee:21:85:39:64:6c:5d:90:ea:34:19:12:8c:73:
         55:41:65:f4:7e:7e:45:b8:99:00:60:c3:61:db:27:10:c0:39:
         9b:59:a1:0f:7f:1f:09:71:2f:17:db:01:b4:1f:72:fc:e2:ce:
         6f:81:bd:59:71:17:ff:db:bc:9c:f1:cb:13:1b:03:10:f9:ce:
         fd:25:fc:f2:e7:e2:7b:11:bb:9e:22:53:7c:36:72:50:17:47:
         78:fc:a2:75:c2:46:40:14:20:f1:45:e1:20:64:01:cd:ad:69:
         c9:94:b1:25:4e:45:53:60:ba:09:45:3d:ad:83:b7:1f:b5:86:
         e1:ab:83:68:88:d9:ad:b0:5c:8c:e8:19:08:12:de:1c:ce:0a:
         c5:95:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:39:53 2026 by rpki-client