Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1aec450-a828-3b21-a9e6-c5064ebc1806.roa
File:                     b1aec450-a828-3b21-a9e6-c5064ebc1806.roa (raw, json)
Hash identifier:          BFG1isUgkIBwR2LcWpOKyWVcGa8G2V5+/JXlmfByp7E=
Subject key identifier:   D4:B5:C4:E8:76:73:23:BA:34:B7:C0:4D:D1:65:33:FD:6F:43:9B:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6DA3B5D9B8DE6CEAE7E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1aec450-a828-3b21-a9e6-c5064ebc1806.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        76.102.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:da:3b:5d:9b:8d:e6:ce:ae:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ff7d457e-5e84-4bc0-b98c-fd2c87a8ad29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:6c:9b:a1:b2:e6:e2:31:a8:1d:b7:9c:2c:
                    9e:6b:2f:2b:7e:ee:df:5f:ef:da:49:1d:be:d8:d9:
                    aa:2c:bd:f1:2c:59:86:2d:4c:aa:93:1a:6b:a8:d1:
                    e8:0a:30:b7:6a:17:52:7e:aa:65:67:8c:e3:47:4e:
                    46:10:02:46:6c:8a:67:0a:8b:64:cd:7f:87:11:9a:
                    af:e8:56:b6:fb:b8:61:68:5a:d5:28:bd:f7:70:59:
                    2e:7c:6f:19:ce:55:c2:cf:82:77:dc:16:d9:90:eb:
                    81:d1:96:37:51:b1:67:0b:40:05:18:a1:6d:68:56:
                    78:6e:dc:94:35:e3:7d:8a:bd:35:c8:8c:d6:51:fa:
                    49:50:00:20:3e:0d:12:fc:d3:54:e9:6b:09:63:87:
                    f3:79:bd:ab:f4:bc:a4:2e:91:1a:08:c3:a7:52:11:
                    b0:25:f9:46:db:6c:72:89:17:a0:fa:67:44:4a:b9:
                    3f:f3:89:5f:5b:2d:d2:9a:4c:a8:77:aa:f0:a1:15:
                    d9:0a:e7:8b:1e:ed:35:13:3a:13:c8:08:ee:e8:06:
                    ef:d0:b5:6f:2b:de:39:4e:55:67:fa:21:e8:96:e4:
                    53:f2:a5:62:f0:62:18:1b:ab:df:65:47:d2:f0:38:
                    14:92:26:f0:bd:8c:f4:2e:30:38:10:69:0d:ec:62:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B5:C4:E8:76:73:23:BA:34:B7:C0:4D:D1:65:33:FD:6F:43:9B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1aec450-a828-3b21-a9e6-c5064ebc1806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:e7:84:e8:a8:e6:63:f4:d7:c6:a0:dd:22:f6:be:6c:b0:
         ff:0f:b7:e5:59:00:2c:fc:ef:12:6e:cf:67:1d:dc:28:92:a4:
         9d:41:60:a9:85:33:6a:a4:4d:78:d1:72:d8:68:84:53:38:81:
         72:11:b0:7b:98:20:9b:4f:dc:1d:c2:84:f9:d2:07:d0:b1:8d:
         19:94:2c:72:19:c6:6f:77:02:59:f8:97:75:54:65:35:d1:45:
         44:6d:e9:41:28:74:ac:df:0f:8d:e3:3d:b3:24:ac:d4:8f:94:
         af:5a:a8:ae:81:b4:99:b2:5e:c5:6a:f4:3a:00:26:c9:34:45:
         fb:57:fa:f7:03:eb:d1:74:a6:79:7d:6e:14:24:68:00:07:25:
         c1:b5:92:88:5a:49:e2:be:42:98:a3:8f:df:f8:2a:9c:35:75:
         89:8d:65:1e:0e:40:98:a4:3c:f5:8d:25:98:27:44:68:cf:39:
         48:e8:ad:41:37:57:ac:65:72:02:58:c1:76:5d:e8:53:89:9f:
         98:ea:9d:6a:c9:7a:91:82:8b:cc:bb:5f:ea:fa:92:d5:88:8d:
         79:1d:2a:d0:61:35:b2:ac:11:1d:90:29:5f:41:12:10:82:20:
         cc:5c:23:63:ca:bf:bf:99:fc:7c:c9:f9:76:c8:92:b5:a6:a2:
         ad:c3:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:23:45 2026 by rpki-client