Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa
File:                     d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa (raw, json)
Hash identifier:          6y888AcvlQbLbCs0ZfjFUfvE0h5GDEo3MhXAUMJyGIs=
Subject key identifier:   3B:13:55:01:E8:60:D3:A4:79:87:25:60:DF:08:D4:04:68:D3:54:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BA7F39BF97B2F3BC815C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33660
IP address blocks:        76.149.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:a7:f3:9b:f9:7b:2f:3b:c8:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=e3a729f8-47ba-4475-9ecc-bd6e4aa3f3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:20:d0:58:5e:7f:30:cf:b8:a4:c4:5a:de:
                    b0:ac:dd:8d:00:ab:e5:10:11:c2:e6:d5:4e:65:c1:
                    c3:77:b2:bd:d7:a9:61:8d:b1:e0:34:12:40:58:e1:
                    43:aa:35:6f:1b:c5:ed:de:7d:31:4b:64:9d:b4:c1:
                    65:99:38:0e:b3:b0:94:d0:e8:d5:d8:b6:e2:d5:34:
                    f9:37:e3:72:ae:c5:de:3d:66:21:f9:7a:b3:4b:d1:
                    02:e0:7b:7e:8d:df:ea:d6:e9:d5:a1:8b:f9:1b:9e:
                    38:ea:1d:23:2b:60:8d:da:2c:64:8a:c3:43:75:22:
                    48:7a:46:9f:d0:89:78:d8:e1:37:5f:11:38:1a:83:
                    86:0f:fc:b9:ae:d0:f4:f6:71:3f:95:ed:25:4d:2e:
                    27:a0:a1:82:31:ed:d8:60:a1:b7:61:3b:80:c6:80:
                    8e:f1:42:d6:94:6e:16:ca:31:a2:16:1b:7c:1e:55:
                    e1:c5:a5:ab:5a:80:50:7e:b2:f6:ca:ce:79:d7:8b:
                    2c:2d:3d:0d:21:b4:41:f9:10:86:cf:0a:e6:08:14:
                    e8:fc:57:f7:25:33:c8:32:b1:66:61:27:86:f8:84:
                    13:94:66:f0:10:04:1f:a8:f2:45:fa:a8:7a:b9:a2:
                    87:7a:ee:7e:e0:54:4d:21:67:36:6d:04:f9:f3:a9:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:55:01:E8:60:D3:A4:79:87:25:60:DF:08:D4:04:68:D3:54:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.149.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:6f:04:6b:66:bc:91:2d:8d:74:03:f3:2c:b4:d6:ea:48:
         86:db:2d:db:7c:c0:bb:7a:cd:28:4e:17:c9:8e:70:3a:05:34:
         99:6f:85:1c:9e:2e:05:d1:c5:1b:58:93:a8:8d:70:83:7e:28:
         9f:65:ff:7c:6f:0a:cb:8d:77:85:cb:c9:0d:6c:78:47:2f:cb:
         a4:46:4d:c1:56:20:9d:0d:2c:22:7b:01:bc:4d:30:bd:29:a1:
         ba:67:85:83:ce:66:e4:d2:eb:30:13:06:b8:b5:78:20:66:41:
         d2:e5:43:ec:05:da:f4:a1:6a:b2:8b:37:08:9c:99:4d:f2:e7:
         e0:69:95:50:e3:50:b7:8a:60:fe:bf:97:d3:92:d8:64:11:fa:
         22:55:13:9f:0f:83:f9:bb:82:d2:c9:c6:90:8e:70:62:b2:f5:
         5a:7d:cf:a0:c3:89:54:71:ab:db:af:4c:26:8f:d1:4f:ee:e3:
         8f:31:4d:0a:c2:f0:f0:f6:5f:cb:04:06:a6:65:51:09:45:b8:
         12:7f:dc:d1:98:be:71:ad:9e:03:11:d1:aa:98:9f:30:ba:bc:
         e4:08:b5:a7:e6:d3:55:f4:75:ca:28:07:42:8d:c0:57:dc:2f:
         49:42:99:c5:6a:9e:99:ae:61:2a:81:ec:4a:3e:77:a4:99:34:
         21:50:5e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:07:27 2026 by rpki-client