Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bec15a9-fbac-3263-8e12-d6741bbba07a.roa
File:                     8bec15a9-fbac-3263-8e12-d6741bbba07a.roa (raw, json)
Hash identifier:          /pcxwpxmDxhUwvphfJZsbJ77T5ewzeXmHp/kzncuMuQ=
Subject key identifier:   89:2F:89:1A:D6:54:AE:91:00:C2:9C:11:C1:39:CE:A1:FF:5F:B0:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF42BCAF6E18449B5BFF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bec15a9-fbac-3263-8e12-d6741bbba07a.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22258
IP address blocks:        76.138.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:42:bc:af:6e:18:44:9b:5b:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=1238b874-d1d5-4370-ab18-66e1706c05be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:98:8d:8f:db:fb:20:a4:5f:ac:c1:f3:89:
                    c9:2f:d9:25:1d:f1:21:be:60:19:5f:3a:6d:64:36:
                    e5:37:1f:9c:fa:e6:e6:61:ac:b8:89:2c:9a:d4:75:
                    46:1a:6e:6e:81:b3:a5:1a:89:45:4f:a0:8a:17:90:
                    8f:47:15:2e:d9:05:28:1f:9c:e8:c6:fe:6f:ea:79:
                    d3:34:3b:e9:cf:9d:6a:19:b7:65:eb:83:29:6b:25:
                    24:83:a4:66:7b:67:24:33:36:f8:76:cd:c8:4b:ce:
                    16:9c:bb:44:8c:f4:ac:0b:34:70:53:65:ee:24:eb:
                    9b:2e:e6:f2:16:7c:fb:88:28:15:1a:26:8b:2f:b6:
                    a2:4f:57:6b:97:ba:91:09:dd:29:e8:db:09:6e:0a:
                    79:03:25:e4:81:65:14:5a:0c:0b:cb:c2:3f:51:95:
                    25:9a:d1:f4:95:c3:76:2f:8d:3c:96:30:e1:76:bf:
                    fb:74:63:fe:6c:e0:5c:f6:c9:2a:f0:b1:bd:75:30:
                    de:1c:e8:6c:a0:c8:b0:7f:69:38:8c:ff:e9:06:72:
                    93:f5:fb:5e:e9:02:af:9f:7a:06:a0:d9:9f:5d:b0:
                    d9:3f:5d:1e:82:3f:ef:f5:4a:1c:6c:b9:c6:83:28:
                    88:dc:37:f2:9d:2a:1d:9f:cd:3b:78:9f:d5:8a:51:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2F:89:1A:D6:54:AE:91:00:C2:9C:11:C1:39:CE:A1:FF:5F:B0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bec15a9-fbac-3263-8e12-d6741bbba07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:41:c1:46:12:00:c7:19:0f:7e:27:45:ff:dc:c5:a2:71:41:
         80:36:c8:b8:ec:49:ca:20:2a:c5:30:4f:9b:0c:ec:d3:f1:01:
         4d:79:99:90:95:80:de:d0:77:ac:14:6d:11:1e:33:31:e0:64:
         70:d2:63:3f:4e:13:8d:9a:64:fc:b1:5b:1a:7a:43:a1:86:9c:
         a4:a3:72:c5:0c:11:6f:ac:e8:06:1b:a8:ad:ed:fb:65:b2:ef:
         b6:38:90:c1:7e:f2:f9:32:5c:37:18:35:8f:a4:ca:8e:2f:14:
         81:80:37:39:94:aa:9d:a8:eb:ab:5b:e3:7a:14:97:0f:db:31:
         72:94:13:18:a6:e3:12:6a:4c:c6:4d:96:e2:68:6b:a0:16:39:
         4d:e7:8c:34:9b:3a:1d:e8:9d:89:98:83:92:d3:9a:52:38:b0:
         cb:03:6a:7e:87:e8:08:0d:00:7f:17:6c:c3:5f:d2:f4:23:8b:
         c4:b3:93:50:88:e6:66:12:ed:ad:c9:56:97:d4:3b:24:7c:4e:
         f0:02:ad:4e:be:37:17:f0:8a:70:4a:42:42:fe:a5:42:53:ee:
         b8:c9:b1:26:26:73:11:f5:ef:c0:6a:17:08:72:78:d1:6f:0f:
         e5:d7:22:df:e0:c3:d8:0a:7b:a2:42:f2:fb:04:e1:bb:9e:90:
         9e:73:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:17:46 2026 by rpki-client