Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa
File:                     a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa (raw, json)
Hash identifier:          fjAXVeRFkQNiUwIRm1u1xlkCnCy51sLiaAAMzS7FyGo=
Subject key identifier:   BC:46:8D:EF:73:12:CB:54:EB:0F:94:2B:E1:BD:33:18:2F:3C:A5:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6E30736350FDC5F99AA60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        76.21.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:e3:07:36:35:0f:dc:5f:99:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=86d42ba4-8141-4919-abc3-6cc85d833763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:d2:c5:d2:45:1c:fe:fe:ea:d5:56:c2:95:
                    80:52:d3:42:fd:1d:71:e7:ee:f2:34:d9:a6:19:71:
                    cb:fd:08:a4:a6:d2:45:5f:39:43:2b:de:e2:c7:52:
                    bf:e0:cf:66:9a:57:48:42:3e:76:24:9d:36:53:eb:
                    0b:34:75:11:a3:4e:2e:ea:46:e3:8c:95:77:66:bb:
                    2a:ca:01:21:de:1d:94:e9:c6:d9:be:3c:e3:d1:09:
                    fb:03:1d:18:aa:ee:84:f3:00:7e:1d:68:d4:ba:e1:
                    7c:dd:96:85:b5:9e:e9:3f:0a:2d:74:0b:58:6c:0b:
                    9b:1d:07:28:13:82:ae:b6:3a:14:44:56:69:1e:4d:
                    54:75:a0:77:b8:fa:80:8a:ef:70:c8:75:f2:b3:e3:
                    59:b6:64:59:2e:31:b5:7a:a0:40:24:5f:6c:f3:49:
                    4f:41:f2:bf:99:dc:31:2e:00:43:ec:8b:68:e7:16:
                    21:bd:57:ff:59:36:43:ab:b5:69:85:5c:de:43:6b:
                    5b:77:1f:15:59:52:ed:19:6d:be:86:cc:d5:61:28:
                    59:9b:93:d6:1f:4f:ed:87:c1:93:95:2b:70:fa:0d:
                    f8:0e:b8:54:36:8a:ed:15:50:9c:06:7c:05:8a:e4:
                    0c:73:76:2d:b9:72:6d:78:cd:57:ca:1b:fa:a1:ef:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:46:8D:EF:73:12:CB:54:EB:0F:94:2B:E1:BD:33:18:2F:3C:A5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.21.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ae:15:1f:71:1c:e6:b4:cd:34:c7:e4:fe:5f:03:f6:80:b5:
         d0:2a:9a:57:98:ea:92:ca:bd:f5:82:44:d6:d5:e3:fb:e6:a8:
         0b:08:40:a8:36:19:e4:5b:b1:63:24:dd:eb:d8:6b:ab:73:3c:
         cf:87:d8:a4:91:55:b6:50:5d:50:fe:6e:e3:04:d1:d6:64:aa:
         eb:ff:1f:a4:9e:1e:dd:72:b7:c4:11:0c:cd:a6:01:03:d5:f1:
         c8:d6:25:69:ea:43:dc:27:a3:32:3a:22:4d:f9:98:fa:bd:c8:
         43:72:77:65:25:f6:29:a5:5d:fb:24:a6:5c:a5:1d:b8:c4:54:
         e8:cc:0e:56:b2:19:76:a0:59:57:fe:e5:68:7f:97:ad:f0:ed:
         a6:44:77:c0:ae:1e:17:27:e3:e1:e1:50:ad:b0:85:1b:1e:68:
         1d:0f:9c:ba:e6:80:77:7d:57:61:4e:77:b6:88:4d:eb:65:70:
         60:57:15:3d:e4:bf:73:30:b5:b2:1c:a2:b9:18:dc:fd:02:4e:
         9a:ac:7c:6d:d2:ce:14:79:15:2e:3b:57:a0:ed:52:ec:3d:03:
         28:01:f2:29:3a:9d:0b:0e:aa:7c:36:cc:d9:fd:0f:47:bd:07:
         0b:3a:c9:c8:68:c2:3e:cb:a8:dd:9a:c4:de:93:c6:c0:f3:5b:
         ff:b0:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:20:09 2026 by rpki-client