Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f218740-0322-354c-8874-710b8d93c611.roa
File:                     8f218740-0322-354c-8874-710b8d93c611.roa (raw, json)
Hash identifier:          4YEZpo/b1zLpZSSz+X/GIjtPCZyGut2RA4BMCf+dOfk=
Subject key identifier:   E4:6F:5A:D7:ED:AF:62:92:EB:A5:2B:1C:1E:0E:7D:BE:62:B3:80:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF673081043B3C9F730F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f218740-0322-354c-8874-710b8d93c611.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        76.139.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:73:08:10:43:b3:c9:f7:30:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=fbe7776f-1621-4efb-b69e-ce89fd2d129d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:16:be:bc:91:db:23:24:c7:9b:df:4e:92:
                    30:35:3d:d1:c3:e2:87:c8:6c:8c:15:69:a2:97:1d:
                    1b:0e:a0:69:0c:0f:ca:9e:00:00:f8:df:04:a9:99:
                    55:b2:48:07:90:0d:42:c4:fd:a0:bc:31:4f:9f:b6:
                    7e:f7:19:ce:42:1f:64:c9:57:af:ec:36:02:ca:04:
                    bf:40:fb:61:78:22:c6:11:85:3e:4f:f6:bf:8b:9d:
                    d4:e6:ce:fb:97:0a:ae:9e:5a:b6:27:43:ae:38:5e:
                    cc:88:cb:c7:4d:b2:3f:3c:e7:51:6d:fd:fc:c0:67:
                    88:d2:98:7d:31:03:0d:83:71:9e:90:71:97:83:80:
                    5c:7e:d6:24:8b:58:0c:6e:40:28:00:b0:99:15:a2:
                    8f:94:4e:98:fb:3d:cf:49:d2:b5:d1:00:10:4e:f3:
                    29:7f:5c:cb:07:5f:be:f0:dc:21:6c:e6:f7:96:0a:
                    2e:34:7b:f2:e6:23:65:a8:2f:a6:24:d6:9d:69:e9:
                    7e:8c:a9:92:7e:00:34:82:2e:ba:d5:a5:95:0d:63:
                    fa:55:8b:54:c9:af:d4:fe:a4:09:91:fe:a0:b8:43:
                    cf:e4:07:44:3c:63:0b:02:0a:fe:ee:80:b3:c8:c3:
                    b0:4d:dd:97:03:36:b9:d4:a4:38:9c:57:30:ea:d3:
                    75:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6F:5A:D7:ED:AF:62:92:EB:A5:2B:1C:1E:0E:7D:BE:62:B3:80:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f218740-0322-354c-8874-710b8d93c611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:af:f6:3d:ba:ca:10:87:3e:e1:de:f6:4c:9b:09:03:07:
         0f:ab:29:79:a1:d0:95:97:61:b4:f1:93:7c:cf:7d:5a:b5:19:
         7d:0c:03:6e:cc:a3:3d:9c:e2:36:6c:db:a9:43:81:f4:ec:47:
         01:ea:70:5d:ed:0e:91:8f:56:2f:43:69:41:72:00:42:d1:79:
         4f:3d:8c:1b:c7:8b:a5:f9:d7:4a:31:00:9e:4b:7c:f2:26:f9:
         aa:06:c2:3c:88:99:2b:0c:38:46:d3:b6:07:28:56:58:49:60:
         51:8e:96:b9:28:42:31:4a:84:61:0d:e6:a7:e4:1f:52:84:f9:
         b3:f2:66:c3:c8:30:67:02:84:95:91:54:f7:14:2b:c9:15:03:
         4e:59:32:87:ff:10:1b:3e:10:33:6e:5f:87:67:6a:ed:95:a0:
         97:ac:08:19:e8:fa:81:71:b5:47:8e:64:12:6a:b5:74:63:d9:
         37:c2:26:90:66:5b:67:4c:d6:f8:6f:27:7b:3c:8a:e6:b4:80:
         5b:6f:20:5b:de:11:49:a2:37:56:db:79:0a:33:80:4b:d2:d2:
         95:46:06:b0:99:84:d6:c1:98:ec:1e:b3:8c:4a:51:8d:25:84:
         bd:ba:e6:b9:27:e2:7e:f7:50:77:5b:32:63:8e:d5:34:53:6b:
         f4:98:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:52:44 2026 by rpki-client