Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b40060c1-a6c0-32ee-92f0-555703be0960.roa
File:                     b40060c1-a6c0-32ee-92f0-555703be0960.roa (raw, json)
Hash identifier:          oRf1cvymkSNkCVzBAXjwRaKPliVjFZaS/daRAV/hDsU=
Subject key identifier:   16:FE:16:2F:3A:F4:78:F6:AB:AF:E1:59:40:40:7E:73:B5:CF:9F:A0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862417D973805A4009E7EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b40060c1-a6c0-32ee-92f0-555703be0960.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        71.192.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:41:7d:97:38:05:a4:00:9e:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=1d5ea189-d661-4b8f-ad10-2a788db2f013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:11:c1:67:62:ea:ea:99:0a:87:fa:a7:d6:
                    a5:fe:1e:8f:7b:88:46:9f:32:a6:a8:4e:9e:4a:4e:
                    c7:f1:f3:fa:6b:a0:4b:60:4a:14:6b:fe:f2:2a:ff:
                    c2:84:8b:59:fc:d6:4e:86:d3:55:9e:89:4d:c6:5b:
                    40:58:db:3f:c0:6c:d2:c2:a6:ae:c9:b1:78:9e:bf:
                    39:dc:b8:8c:ee:b8:b5:04:fe:e5:71:03:01:76:10:
                    e4:50:41:08:6c:27:f9:40:08:71:11:a7:e8:f9:3d:
                    92:ff:dd:7a:99:33:e6:c2:8a:68:e1:46:58:29:55:
                    c0:ec:9d:58:d2:d4:17:2a:46:bd:f1:fe:7e:ab:2b:
                    df:ee:36:34:e5:2b:d3:b0:45:48:e0:2a:59:6f:a6:
                    cc:1b:42:9b:ae:ee:2c:85:94:f0:0e:ca:91:72:8a:
                    72:26:a5:4e:4b:71:24:b2:a7:d5:0e:7b:c5:58:fa:
                    69:0d:f1:2f:53:6a:83:5b:6e:b9:4e:58:3f:82:c0:
                    c7:d1:41:9f:99:fc:c1:08:8f:46:9a:bc:e1:12:0a:
                    86:43:6b:e4:64:f6:8a:f9:a7:f5:27:90:b5:16:ff:
                    a4:41:b6:65:b5:af:29:2b:e1:dc:8e:c0:eb:ac:7a:
                    44:11:42:a6:37:92:ee:d1:14:8e:f2:51:22:c7:18:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FE:16:2F:3A:F4:78:F6:AB:AF:E1:59:40:40:7E:73:B5:CF:9F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b40060c1-a6c0-32ee-92f0-555703be0960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.192.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:b2:4e:fd:69:63:59:aa:f6:71:50:c1:fb:95:4e:15:0f:
         23:1e:c0:e9:be:f1:da:e0:81:59:d0:bf:20:88:b4:f5:37:66:
         fc:da:0a:92:3d:a9:79:23:9f:51:d7:e9:a1:45:c7:ff:18:15:
         68:ac:d7:72:23:25:5b:95:41:8d:98:26:d7:15:64:cb:0a:bc:
         06:93:a2:5f:c7:fc:03:21:12:82:1c:b3:62:9f:00:c4:7f:21:
         d5:20:b7:6d:67:82:2d:08:93:bf:e0:59:f3:4d:a1:ff:fa:94:
         f8:79:4e:78:32:51:9c:30:b0:74:98:25:d7:b0:55:0c:35:44:
         8d:5f:56:6d:b0:a7:d6:70:86:3d:b8:c9:2d:ec:7b:df:96:02:
         7c:cf:8f:97:fb:c5:56:2d:9d:ad:81:a1:e9:52:85:13:a4:13:
         00:09:ef:42:bd:bc:98:01:31:0a:85:7d:ca:46:5b:e4:9d:ac:
         cb:38:fc:27:f6:5b:26:80:cb:5c:08:a6:4d:50:e9:a5:57:58:
         3f:61:12:f1:24:d5:8e:37:a7:c0:d6:3e:4d:7b:e7:94:66:e0:
         c9:53:04:e8:47:3f:99:c0:06:a4:94:f2:17:c4:2f:5a:e7:a1:
         c3:0f:72:06:e4:ca:13:b4:5b:99:fb:f1:8c:5f:4e:54:8c:64:
         cd:6f:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 20:33:59 2026 by rpki-client