Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc245443-eff8-345c-ab36-1d36b7250143.roa
File:                     cc245443-eff8-345c-ab36-1d36b7250143.roa (raw, json)
Hash identifier:          0Mo8PBIHE/tCMh7908g5q0bo0KOGX0TUmSU2EWGFxQc=
Subject key identifier:   2F:41:6C:B5:70:78:B6:15:24:63:2A:67:0E:B1:71:F6:E6:C1:2F:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D26B80A1A6EB60D99A2A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc245443-eff8-345c-ab36-1d36b7250143.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33491
IP address blocks:        67.173.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:26:b8:0a:1a:6e:b6:0d:99:a2:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=ef5b076d-c347-4580-9a0a-a0f749924898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:ec:bb:83:7f:cc:e2:ff:d5:6a:57:e6:11:
                    c2:6a:23:f6:66:3a:f5:54:80:b6:44:82:13:a3:45:
                    d7:25:fd:db:73:d2:25:12:87:d3:6b:f8:0b:2b:db:
                    93:30:f4:cf:c3:01:c8:f0:79:51:e5:6f:d4:11:56:
                    ed:cf:b2:ba:e7:c8:ce:9f:a7:f4:d5:60:21:83:49:
                    29:fc:d4:28:45:a6:73:10:fd:37:a0:be:21:ae:07:
                    a6:4f:a5:54:af:c7:54:46:7b:bb:b5:46:cd:0d:07:
                    ec:dc:81:5a:9e:28:4c:85:99:bc:43:ef:75:b4:98:
                    f0:e5:d2:59:02:9c:ab:aa:b8:67:8e:9b:f1:df:21:
                    5c:83:d6:b9:95:9b:7c:d5:48:50:5f:86:fe:68:d7:
                    8a:56:0b:94:f1:6c:bf:79:68:63:16:45:70:25:db:
                    57:41:c5:58:96:d7:53:ea:63:ad:f8:83:66:1c:d6:
                    a3:04:5f:92:eb:ab:ae:59:fc:40:c6:fb:a4:96:d6:
                    96:7c:f4:ee:8f:d1:0f:ac:ba:dd:f9:31:32:44:86:
                    94:a2:47:d5:bc:5b:49:65:7a:59:fc:bb:cb:61:a6:
                    7c:61:f6:d7:46:61:1b:e3:13:e4:d3:91:1b:24:fe:
                    e2:55:5f:b0:4e:c5:e3:a9:9c:c2:1b:28:61:5a:2e:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:41:6C:B5:70:78:B6:15:24:63:2A:67:0E:B1:71:F6:E6:C1:2F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc245443-eff8-345c-ab36-1d36b7250143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.173.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:2b:e6:a7:46:a1:16:24:1c:18:2d:a3:3f:a0:f3:b2:84:92:
         6a:7d:b7:ca:b8:5a:ed:1d:f1:bc:8b:a8:c1:bd:f7:d2:19:f9:
         49:fe:5f:70:04:7f:0f:b9:83:d2:71:dd:6d:35:4f:03:ea:f9:
         e2:0b:73:d3:b4:36:e3:b2:f4:3e:5a:2f:b5:0d:9e:18:6b:8c:
         5f:c3:80:2b:84:da:ab:fb:36:9c:98:66:10:ee:31:44:04:4c:
         f6:6d:5b:af:63:a9:32:2f:d1:8f:83:85:32:aa:59:b1:ff:17:
         af:dc:db:b6:4d:4b:84:c3:c8:0f:96:9e:17:7b:40:70:ca:5d:
         78:6f:42:38:43:28:8f:43:4a:82:71:18:1a:e7:40:1a:43:15:
         cb:33:92:73:9a:2f:dc:a1:22:d2:00:8b:c0:a3:52:a6:08:73:
         d7:7d:95:53:1f:6c:3a:20:32:6d:54:6b:84:43:de:3f:68:bb:
         83:2c:d9:40:23:a7:5a:6e:36:0e:b3:53:22:4d:db:fc:f2:35:
         c0:f9:7f:d4:84:70:42:2b:46:19:9f:33:0f:7c:37:27:71:dc:
         10:1b:80:9d:01:c9:52:63:71:1f:38:ba:24:26:d4:f3:9a:4e:
         f3:e0:44:f1:17:d2:d5:dd:7e:93:1e:81:4a:7f:49:b9:9e:3f:
         8a:1c:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:44:05 2026 by rpki-client