Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa
File:                     ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa (raw, json)
Hash identifier:          JES8Aii9/zXdL8I35WLd7R0gLQDWIfBqpkST6E19uYs=
Subject key identifier:   CB:21:0F:0F:E7:DA:30:89:27:1B:E2:42:30:E5:29:55:B9:1A:40:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF5FFA94562F1E8F9792AE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        76.124.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:ff:a9:45:62:f1:e8:f9:79:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2bf52e2b-dc77-4d85-b875-52a28589f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:d0:b2:4c:36:f7:57:c8:9a:fd:8e:cb:91:
                    d9:1a:7d:80:9f:39:27:f4:03:3f:39:20:e5:24:95:
                    39:4c:e0:f1:90:a3:25:0c:d4:c8:4d:ea:94:93:d1:
                    e0:24:e1:4e:f5:41:87:3d:6e:3e:78:d6:5a:c1:e0:
                    5d:9c:c9:dc:90:a1:de:e8:54:cf:77:8d:c1:cc:a3:
                    c5:fd:af:d1:b9:01:06:c2:6c:4c:8e:09:18:3f:6e:
                    9d:5a:3f:c3:c0:f3:d6:a2:18:f4:b1:6d:46:a4:32:
                    75:63:d9:a5:05:3a:2a:b1:3d:a4:98:30:37:8b:78:
                    e6:c7:85:06:a0:fa:83:51:f3:c3:6a:19:50:79:e8:
                    e2:c9:a8:31:9a:7d:89:2e:1f:17:7a:9a:37:f6:68:
                    d9:e2:7b:d4:7c:57:fc:09:91:14:1f:07:ce:b2:37:
                    49:5f:d5:bd:04:a7:f4:3f:5d:48:49:be:73:d5:31:
                    e7:56:af:db:a9:7e:9e:62:c9:6a:0f:7d:6c:4e:14:
                    6a:7f:c4:c3:75:72:7d:e4:e2:d0:51:27:c5:48:dc:
                    48:cb:64:27:ba:61:03:b3:c6:67:0f:c5:52:18:c9:
                    0a:50:2a:49:c0:97:41:4c:bf:a1:52:7a:d2:4e:9a:
                    ff:f7:71:72:12:3f:79:09:95:cc:f2:63:e7:55:04:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:21:0F:0F:E7:DA:30:89:27:1B:E2:42:30:E5:29:55:B9:1A:40:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:97:27:e3:65:2f:6e:65:84:21:33:71:25:59:49:e9:9f:
         85:c2:2c:01:d7:04:56:d2:2f:09:a7:9d:a7:d9:b7:ec:74:1c:
         68:59:08:1d:13:8f:5f:4d:32:26:52:d5:a9:41:fd:ea:98:5b:
         1e:96:fd:00:7c:c2:67:19:50:91:7f:fc:45:94:c6:74:4c:a5:
         a5:00:a7:c0:2d:1e:f0:a3:98:91:74:c2:c3:53:32:fd:30:e7:
         da:69:38:70:b0:49:3f:1e:a8:00:3a:62:75:4e:0a:6a:54:ec:
         69:b8:fd:fd:f9:be:03:b8:80:8c:78:34:33:42:98:27:16:0b:
         2c:7b:a2:96:eb:75:89:01:73:73:11:85:35:4e:c0:9e:ba:40:
         a7:21:2d:6b:dc:95:84:97:e1:40:67:5f:cc:5e:46:a7:17:ec:
         94:5c:31:c2:27:a8:f7:a2:2b:f0:60:ea:0e:5c:33:01:f8:b8:
         e4:99:66:49:fa:87:a6:ac:fd:55:52:32:09:21:e5:4a:cb:b5:
         e3:8c:e4:14:f2:2d:2f:64:33:bd:17:cc:47:f2:c9:8d:7f:0a:
         f8:9f:77:27:76:65:25:aa:ac:00:15:dd:76:e1:d7:6a:bc:d9:
         ac:83:a4:ef:41:9b:2b:32:ce:5b:37:d2:e0:4d:08:67:a2:a1:
         4d:4c:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:23:23 2026 by rpki-client