Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa
File:                     8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa (raw, json)
Hash identifier:          Z2ALPt/jElwc7iSLcby7dY5NPbPvPCnFfCjB2f+gq9k=
Subject key identifier:   D0:02:42:D2:84:37:FD:75:90:93:17:00:77:80:B3:BF:34:86:30:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF4D0AA24466B8DC125A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        76.115.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:4d:0a:a2:44:66:b8:dc:12:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=17f1a262-2b4b-464c-a994-6e1a0a2dd37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:fc:96:6e:dd:10:6c:1a:ad:c2:8d:f0:16:
                    ce:0f:bc:e2:75:1c:ae:8c:61:6b:1a:2d:c5:fd:ad:
                    d1:28:15:cb:1e:f7:e5:71:e3:71:e8:d6:a2:1e:ed:
                    77:0c:df:1b:4f:f1:03:e3:36:bc:cf:62:6d:dd:45:
                    5f:7c:8b:71:89:8d:fe:f8:16:0e:41:00:6f:23:85:
                    87:68:6a:92:4e:77:46:4c:42:2a:c0:d6:e3:c4:ed:
                    6d:ec:e3:0a:59:29:cb:16:6f:35:a5:67:f4:28:47:
                    8d:2d:e1:06:8d:68:af:e6:87:89:e2:47:03:73:7f:
                    e7:a9:dc:c7:48:73:5c:aa:e8:62:20:77:12:0a:f0:
                    c8:05:d0:4f:e1:20:13:16:61:3c:ac:00:16:59:ad:
                    c5:e7:86:6f:c0:df:6a:81:16:9d:8b:0b:69:07:05:
                    64:a9:fc:9e:ea:f0:0f:8e:13:ad:5a:ac:29:44:a8:
                    05:52:8a:ea:e8:0f:e0:13:f1:86:aa:99:19:0a:67:
                    88:0d:dc:ee:2f:81:80:46:15:63:5c:24:b6:1d:50:
                    65:bd:41:d9:a4:71:c9:d3:b2:6c:21:33:27:01:a6:
                    8d:79:3c:0c:82:fc:bf:6a:b4:e8:34:20:f5:ed:a5:
                    5e:77:b2:c3:44:40:b5:20:20:f4:27:0f:e7:f9:17:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:02:42:D2:84:37:FD:75:90:93:17:00:77:80:B3:BF:34:86:30:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.115.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:ad:03:c4:c3:5b:4d:ed:94:1e:6d:78:58:ae:55:15:7d:
         ef:40:79:ab:0a:fb:4e:54:cf:e1:41:26:b2:6a:5e:7d:e2:2f:
         a2:d9:7f:43:ec:06:82:8f:b4:43:97:8e:ba:c7:b0:74:f9:61:
         1f:bb:40:fe:a1:95:50:80:af:fb:db:8c:5b:a9:60:93:7d:07:
         b3:8b:6b:0b:99:a3:59:e7:e2:58:26:5d:8d:ee:4c:2e:22:a1:
         62:32:f3:5b:00:3d:8b:a5:1d:b7:f8:fd:0c:cc:76:c9:54:3e:
         4e:e3:f5:34:c2:c5:0e:01:4a:f2:cb:7a:0c:85:7f:f2:9e:c4:
         b1:5f:2f:58:26:87:5e:3e:de:83:2a:6a:f3:cf:b3:c1:1e:ef:
         fe:7f:cb:43:ef:b9:80:e3:e4:bf:8c:eb:c3:b1:be:19:ed:5f:
         1d:6d:b0:82:3d:2a:7b:d0:1e:a6:5a:1d:24:0c:08:02:c3:25:
         1b:61:c2:ab:6f:d7:b3:35:a4:33:29:b6:55:df:00:16:e7:04:
         48:ef:9f:13:57:1b:e8:37:bd:7d:9f:08:70:b3:36:34:7d:2a:
         f1:84:5f:5d:76:12:72:f3:4a:3f:9c:a7:41:4e:fb:08:e3:d2:
         6a:29:70:ab:89:f6:71:4e:33:79:10:34:5d:5a:1e:20:be:65:
         d6:e5:24:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:14:50 2026 by rpki-client