Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df61a03-f143-377a-aeac-6b4299e3e95e.roa
File:                     7df61a03-f143-377a-aeac-6b4299e3e95e.roa (raw, json)
Hash identifier:          Nzj+t533D0AS0kAVkNinXzzIXIflww0cxTqrid7hSJw=
Subject key identifier:   BE:22:E4:F8:51:AA:8A:8D:BC:EC:71:18:5F:E5:B6:90:01:D9:2D:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AEA30DEB19B2E2348D400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df61a03-f143-377a-aeac-6b4299e3e95e.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        71.194.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:ea:30:de:b1:9b:2e:23:48:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c4aa3a4d-fa33-4849-bf49-8a2a486171d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:8f:be:b1:67:2c:e4:3e:3a:25:16:35:38:
                    3e:24:d2:eb:22:cc:bb:b6:e9:8a:a6:36:38:b7:6b:
                    88:e0:e7:cb:a0:e4:a7:51:e1:57:5c:6c:31:1e:e1:
                    42:44:e6:1f:ea:d4:5b:ca:ec:7c:bf:19:bd:c3:41:
                    55:78:bf:17:2b:80:e6:a3:32:a9:a6:74:c3:ed:66:
                    e1:96:b2:e7:01:db:85:40:f7:88:ad:18:3e:cf:e1:
                    71:2e:37:91:70:77:f5:e0:e2:cc:e4:6e:3d:48:3a:
                    c3:2f:c6:42:8b:e4:a6:58:75:73:b1:96:5f:db:60:
                    6b:85:1e:bc:49:da:eb:f4:db:6b:a1:fb:b4:57:98:
                    82:24:dd:03:b3:dc:b7:ff:5c:4b:60:c9:e1:65:3f:
                    d6:29:f0:36:7c:cf:f9:b7:e8:ce:bb:6b:5d:81:f2:
                    26:67:aa:08:0e:b8:ff:1e:87:cd:b5:6e:38:9f:22:
                    ea:51:85:39:83:ba:1f:62:36:e7:03:cc:d5:17:93:
                    3a:52:24:56:2a:ab:01:0f:ec:2e:f2:3c:88:31:1f:
                    b9:95:07:f9:13:7d:e5:1e:39:96:5f:a6:f3:d2:6d:
                    79:70:78:40:12:97:68:d2:c7:f9:44:5d:06:6a:6e:
                    49:c3:25:d7:80:00:21:0a:f4:9c:7f:f5:79:1c:4c:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:22:E4:F8:51:AA:8A:8D:BC:EC:71:18:5F:E5:B6:90:01:D9:2D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df61a03-f143-377a-aeac-6b4299e3e95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.194.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:3c:91:1f:1f:f4:42:cf:24:24:95:e3:6d:6b:a4:57:f0:e9:
         8f:4a:2b:47:ff:b8:aa:0d:13:06:d0:01:5a:8c:2b:6b:91:7b:
         60:b6:47:0f:31:b0:ab:87:4c:d5:80:f8:9e:73:d1:41:3b:15:
         64:fd:67:c2:06:ff:be:fc:1c:bd:5a:fa:09:5c:3f:f3:46:49:
         80:9d:2c:14:c9:65:89:9e:b8:d8:82:9d:af:f6:cc:75:6d:f3:
         26:52:08:2d:a0:34:dc:cf:2f:cb:b4:a0:10:f1:c9:bb:30:2f:
         3f:00:96:64:f1:f0:b9:a3:e1:b8:9e:9e:94:83:24:40:c0:21:
         10:a2:e6:c6:53:be:1b:04:4c:3b:14:42:14:b0:71:c9:56:58:
         4a:f9:0a:50:c8:38:22:e7:3e:65:e1:21:13:98:e7:1f:25:12:
         34:00:9b:0c:3e:d1:89:3f:3c:ad:35:12:35:76:68:aa:1b:6a:
         5f:4c:d2:76:43:0f:db:c5:32:86:8d:4f:5f:e1:94:b5:29:12:
         2b:5e:25:0f:21:4f:78:8d:2b:4d:a0:cd:a8:31:3b:7f:50:43:
         e6:8b:5b:cc:41:15:4f:6d:e4:59:0c:18:45:31:e5:eb:2f:be:
         ec:9e:c5:3e:12:7e:5b:72:d2:15:09:49:36:5c:7e:de:60:8d:
         73:1f:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:02 2026 by rpki-client