Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1b62e81-bb9c-3283-8697-465832118e7f.roa
File:                     b1b62e81-bb9c-3283-8697-465832118e7f.roa (raw, json)
Hash identifier:          ufnswTMYDh0wfFebsH2AEnN/jYqDO7GxaQyPe734IWs=
Subject key identifier:   36:37:F9:C0:51:20:87:08:B5:41:04:04:55:CB:D7:C5:99:3F:78:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EFBB15D93DB25818FEEE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1b62e81-bb9c-3283-8697-465832118e7f.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33490
IP address blocks:        76.105.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:fb:b1:5d:93:db:25:81:8f:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=54eccde8-ba94-49d4-b148-d1e729d1a67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:df:dd:30:d6:71:37:39:58:bc:22:d8:22:
                    74:84:43:9f:3f:48:59:00:11:8d:a5:ee:23:ed:26:
                    21:b8:3f:8e:1f:2e:a8:7c:fe:c2:0e:59:5d:e2:4e:
                    2f:4b:c9:56:6a:29:71:6d:0e:e1:a0:10:67:8b:f1:
                    85:fc:c5:f0:f4:0d:2f:e8:1a:24:5e:27:3d:3d:f8:
                    6e:b1:d8:38:18:b0:4e:58:93:05:45:3f:02:7b:57:
                    99:f2:e3:da:44:17:a7:f5:5e:f0:24:b6:f7:9b:3c:
                    58:24:76:8b:fa:ec:d9:88:a0:60:d2:bc:7b:67:ec:
                    e3:bb:17:20:02:15:4f:0f:0d:0f:c0:f1:fe:77:c4:
                    40:60:a8:b8:9c:c0:26:2c:96:a0:74:76:41:8a:3b:
                    18:78:e3:40:17:c0:07:d0:f4:71:24:d5:2c:8a:62:
                    be:97:ba:57:7c:ff:10:c1:11:38:d9:eb:fd:4f:7e:
                    c8:c5:92:fb:0d:a4:48:18:fa:bd:12:b8:b6:c8:e5:
                    cc:c3:a9:94:bc:00:b0:ce:cc:d6:49:2b:57:30:03:
                    35:8b:e7:3f:5a:c3:13:80:55:fa:3d:15:8b:06:83:
                    ff:52:b7:4d:d0:71:b6:c3:04:b0:c8:b4:8d:d3:27:
                    8c:77:0f:d6:03:5b:05:99:30:b8:a7:d6:0d:5d:c7:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:37:F9:C0:51:20:87:08:B5:41:04:04:55:CB:D7:C5:99:3F:78:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1b62e81-bb9c-3283-8697-465832118e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:e2:f3:33:5f:cf:6f:f3:eb:f7:35:ea:cf:53:92:81:ce:
         d2:40:b0:cf:48:d7:5a:91:a5:b0:15:ba:d4:fa:79:36:f3:60:
         c1:46:36:20:d7:36:fe:18:75:3e:07:41:b1:c5:30:04:4f:d0:
         da:1f:76:8a:ab:6f:5c:0a:b9:a9:d0:03:97:5c:4d:8d:5c:4e:
         c5:e8:bd:aa:7a:97:69:e1:be:0f:81:74:78:42:ef:76:24:e5:
         50:60:3e:45:21:62:d9:5d:d8:72:a0:8c:17:97:e6:d0:be:53:
         53:94:3f:da:cd:00:25:5d:1b:17:f9:d4:a3:76:a9:0c:27:6c:
         9a:26:6d:d3:3d:5b:d3:d5:64:2c:61:02:92:d0:4f:1b:cf:41:
         35:57:0e:ab:31:e6:b1:d2:a4:de:ca:56:d6:17:fd:6c:f9:77:
         23:07:cf:84:09:ee:88:f8:1d:fd:fa:15:95:2d:1f:79:78:c3:
         1d:b6:ac:31:ab:5a:15:26:3e:7f:71:13:8f:bc:89:b4:63:71:
         e4:f5:b9:69:45:b0:46:2d:35:9e:0a:3b:e3:0e:9d:a2:91:02:
         83:74:b0:6c:37:8f:07:47:16:57:ee:f6:ec:87:ab:72:dd:26:
         b6:95:7b:24:ac:95:48:85:ff:75:0d:21:de:e3:74:bd:95:f1:
         a0:6a:f5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:40:31 2026 by rpki-client