Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd94d7c1-8d8b-3051-9803-dbbfbc67dca5.roa
File:                     bd94d7c1-8d8b-3051-9803-dbbfbc67dca5.roa (raw, json)
Hash identifier:          Djkdf2ZOjeOs3Er1eYXgVARO6aSjmhSqPrWiZajPyiQ=
Subject key identifier:   40:10:84:50:41:1C:36:65:B8:C9:BC:C9:BE:8E:14:67:7E:A5:8D:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4DF27849C9FE2EC1A9A060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd94d7c1-8d8b-3051-9803-dbbfbc67dca5.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        71.232.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:f2:78:49:c9:fe:2e:c1:a9:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=0010d696-44eb-4967-af1e-aa751ec49599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:ef:0a:4f:8e:22:cf:b3:6d:36:1f:a0:42:
                    11:93:7b:36:40:f6:a2:9e:89:c2:2c:69:32:87:12:
                    e9:f6:30:7f:61:8b:a3:85:d2:23:99:05:19:a2:68:
                    a5:0f:ab:47:91:fd:97:8b:99:04:4e:f8:a3:0a:84:
                    fe:dc:47:39:ee:8f:fe:63:6c:f0:04:a8:85:39:de:
                    1a:e5:06:58:54:03:e2:b7:a8:44:c4:2d:b2:b7:61:
                    a0:01:cb:a0:2b:41:76:f3:b1:77:13:fd:ac:15:36:
                    be:8c:9f:35:a8:53:84:bd:06:de:a5:a2:7c:13:93:
                    53:ee:1c:50:3e:ba:83:51:97:34:c5:03:a0:9b:83:
                    36:f2:be:33:61:84:d3:17:80:8a:8d:52:a9:f7:d7:
                    57:15:b2:72:2a:11:41:12:68:80:91:53:16:53:2a:
                    5d:b1:2b:4d:06:2b:7d:f9:5a:0d:86:44:ea:74:fd:
                    23:99:b4:b7:55:bd:58:b0:01:44:a4:e3:46:dd:db:
                    c0:0a:63:6e:8b:e6:d2:cf:4a:1a:23:42:74:57:df:
                    3a:da:21:ef:d5:c6:23:b0:8c:ae:27:97:9b:d2:53:
                    33:fa:28:59:25:c3:1c:78:05:da:22:fe:7e:ac:9b:
                    e7:9f:a8:eb:f2:df:6a:cd:34:40:9a:74:d0:0c:b5:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:10:84:50:41:1C:36:65:B8:C9:BC:C9:BE:8E:14:67:7E:A5:8D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd94d7c1-8d8b-3051-9803-dbbfbc67dca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a3:50:49:8c:15:f7:e1:f3:eb:81:66:c9:1e:c1:6a:8f:8a:
         f1:3d:22:58:e6:33:2d:b8:f8:f7:9e:e0:b2:a3:8e:cd:e0:49:
         10:aa:3a:ec:13:6c:bd:75:88:61:fb:19:e5:0a:a8:66:f2:aa:
         53:80:53:fa:16:0a:4d:45:a9:bb:90:ce:76:0d:08:fc:56:46:
         31:e7:90:0c:57:b7:66:4e:8b:3c:28:cc:99:19:39:30:3b:b5:
         13:4e:87:ed:43:68:70:0d:32:aa:89:31:93:ca:ec:6e:08:59:
         e2:02:19:83:44:29:bb:cb:dd:17:2e:f1:18:21:08:a4:28:b9:
         46:08:a2:de:bd:ac:7b:11:dd:f4:e8:93:0b:de:91:31:d0:db:
         e8:e7:16:bb:fb:e1:dc:6c:bb:3a:54:62:a6:fe:e8:0f:4d:dd:
         c9:15:36:88:7a:da:5d:eb:00:90:44:f2:b4:77:65:41:fe:ea:
         65:49:3c:74:24:71:eb:b2:c2:8f:4f:f0:92:4a:f3:90:f6:cb:
         f0:7e:22:d7:49:59:f5:40:57:4f:2c:6a:b9:0e:c5:52:ba:98:
         dc:85:bf:a7:49:b4:11:03:bf:96:b5:80:65:b2:0f:b3:d5:a3:
         25:49:2d:52:81:ac:79:16:3c:18:0b:c9:09:a7:ab:35:16:f8:
         97:ed:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:05:53 2026 by rpki-client