Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f6410d-c2f8-399a-9a20-ea63a7666644.roa
File:                     c0f6410d-c2f8-399a-9a20-ea63a7666644.roa (raw, json)
Hash identifier:          6gLdkwEYp/ge74c/NybnWhUnZbxCC9Qk0s++bcx4YTs=
Subject key identifier:   EA:5A:76:A4:F4:9B:C1:A3:DB:32:98:2C:3E:0C:4A:25:89:48:91:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6B0BE81A9D926858A2F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f6410d-c2f8-399a-9a20-ea63a7666644.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        69.181.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:b0:be:81:a9:d9:26:85:8a:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=51bd4bbc-0b1c-4433-9057-404d09011bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:eb:32:a7:63:49:a4:b6:3e:52:8d:86:19:
                    bb:b1:f8:94:c8:a7:c4:68:62:7a:67:44:6c:6b:b2:
                    59:86:79:c7:a2:18:f3:d5:6c:fa:06:ba:43:a0:89:
                    42:47:6d:f8:66:96:f1:9d:d8:61:a4:1d:d5:e9:c3:
                    0e:25:64:dc:6f:b4:25:28:b3:e7:a2:c9:db:8e:24:
                    81:ce:58:ef:69:2a:bf:6d:88:7b:58:40:59:03:7f:
                    f4:bc:a9:24:f7:6d:1a:5d:ac:cb:7c:8c:88:2a:d8:
                    1b:6f:a5:27:a9:31:87:70:72:cf:f3:f8:fa:89:10:
                    d9:3e:61:1d:5e:fb:9c:0d:f5:84:c9:cc:c5:cb:f7:
                    11:bb:a8:2e:31:e5:4e:9a:fb:e7:d3:db:57:aa:e2:
                    d0:c8:8c:80:09:a7:51:8c:27:d3:2f:68:73:ef:d7:
                    e5:21:63:13:47:0e:fb:cb:b8:c1:36:c7:6a:68:c7:
                    97:4a:18:3d:ee:8a:bd:4c:04:14:bb:f4:04:d6:c8:
                    80:99:70:77:bb:e4:7d:e3:ca:f4:3e:0b:17:b5:5f:
                    18:66:a6:05:65:d7:fc:de:55:12:36:b2:f3:44:b7:
                    99:85:73:2b:78:cf:0a:57:30:78:ab:59:12:d4:99:
                    ae:02:c1:84:7e:d7:ef:5f:84:0c:53:31:80:ec:7e:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5A:76:A4:F4:9B:C1:A3:DB:32:98:2C:3E:0C:4A:25:89:48:91:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f6410d-c2f8-399a-9a20-ea63a7666644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.181.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:d1:cb:f7:05:f9:cd:35:f5:cd:d2:28:78:a2:f7:13:97:31:
         57:f7:4b:ce:91:11:28:88:51:e1:29:cd:96:31:14:8c:19:ce:
         9a:ff:2d:9f:3c:4c:78:95:dd:1a:11:30:3d:0c:c8:c2:37:fc:
         35:5f:ca:03:01:e2:bf:b5:32:8b:56:36:ff:eb:0a:27:8c:3a:
         22:a1:24:f3:6e:d6:7b:33:e2:b1:0d:ff:01:76:0e:7d:87:5a:
         cb:72:73:5a:e2:a2:e6:c7:c7:23:44:3d:fd:41:cc:d9:65:bb:
         33:b5:4a:9f:d0:c5:8e:b9:9e:5c:1b:bf:ae:3d:01:54:f6:11:
         93:b7:6e:23:bf:dc:69:27:b3:9f:18:de:37:6f:65:10:1f:8c:
         52:9d:c3:8d:2e:c7:74:f2:01:96:c5:51:44:5e:88:d1:35:5b:
         d8:9a:cf:30:d8:3c:ff:e2:ec:fb:44:71:95:22:6a:6b:3d:54:
         43:54:96:34:e1:d8:52:bd:f9:4a:35:3f:2b:1b:83:f4:4a:db:
         bc:b4:b2:cc:0d:0f:83:f5:24:3a:86:c0:01:8c:fc:98:ec:5d:
         9c:44:02:4b:79:06:ae:c6:2f:a2:97:5d:61:98:ef:c4:22:7b:
         9d:69:b7:eb:6b:c1:ce:33:c2:b6:12:0f:87:15:95:c1:e9:71:
         c3:3b:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:51:24 2026 by rpki-client