Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa
File:                     d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa (raw, json)
Hash identifier:          kMJdELGkoGi7Pb5KN0je23EY9kjmN/slZocrkg7iaqA=
Subject key identifier:   46:8F:75:9A:98:4B:B1:B2:CE:11:4E:D5:D8:26:30:8C:AC:20:02:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3601224275098561E4E4D880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        174.171.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:22:42:75:09:85:61:e4:e4:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=41c0776e-a479-4e08-94e3-e9c9f6a3b7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:09:52:a6:ea:d4:b4:3a:4f:73:29:48:cc:
                    6a:5a:69:0f:7b:fe:d5:43:d1:c2:9c:f0:c0:34:7f:
                    5f:75:a7:83:ff:66:ed:26:5a:8f:e8:ec:34:3c:3f:
                    43:07:18:1b:f7:47:a6:f2:e3:4d:6e:c3:58:7a:b4:
                    8c:2e:4a:93:bf:41:b2:ba:51:cc:b9:38:20:a5:56:
                    b5:5a:04:89:93:f6:e8:5d:82:bc:14:f8:f0:ed:31:
                    18:52:11:d2:ef:34:78:c7:93:ac:f9:4e:89:51:d8:
                    cc:14:d3:8f:5d:2c:ce:39:36:6a:22:b7:ef:0f:fe:
                    02:14:61:34:27:62:e4:54:04:2f:54:27:3b:72:5a:
                    87:1b:5d:9a:92:66:f7:65:10:5d:6b:c1:61:4c:07:
                    88:fe:a7:44:cd:f0:37:89:af:61:bc:62:b6:89:76:
                    4d:9f:e5:00:a0:f3:4c:03:d8:1d:c5:46:90:ed:d8:
                    a3:89:c3:89:cd:ba:da:73:52:63:f5:e4:79:9c:f0:
                    df:65:8a:97:f1:f0:6b:88:ca:38:78:e3:e1:bc:c8:
                    9c:38:42:ca:f2:ea:3d:73:43:60:52:1c:73:ac:92:
                    fa:7a:ed:d8:13:63:7e:f4:34:6f:0b:8c:d7:b9:0a:
                    1d:a8:f7:94:67:29:e1:11:3c:af:6e:b1:96:cd:95:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:75:9A:98:4B:B1:B2:CE:11:4E:D5:D8:26:30:8C:AC:20:02:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.171.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:6d:f4:22:63:b9:dd:ac:1b:12:23:e0:61:b4:fb:df:15:
         08:d2:0e:3c:1a:cb:a3:0b:ac:2c:57:92:a1:f5:50:cc:c0:d6:
         0c:fe:38:f9:0e:f6:80:a7:9e:56:9c:a8:43:47:6f:8f:a4:f2:
         14:f7:d2:3a:b2:e1:73:97:7f:97:54:06:0d:8e:ff:d8:18:7a:
         0f:fd:8d:84:79:22:31:e4:77:5d:bc:71:d2:83:0a:66:1a:3a:
         66:89:25:a9:d9:74:90:db:e8:c6:55:f9:06:db:cd:f0:03:fa:
         a5:37:49:18:2c:6c:fa:09:77:ad:18:fb:7e:da:28:c2:cf:c6:
         e1:a0:ef:92:08:72:c5:41:02:fd:74:36:9f:a2:9d:d3:bf:ad:
         de:27:66:07:de:a2:ea:8c:12:b0:01:5b:9d:15:91:27:43:c2:
         d3:69:e0:c8:4b:0a:08:5f:57:0d:f4:ad:2e:45:b2:30:7e:fe:
         dd:35:09:aa:44:d6:06:cd:4b:bb:20:b1:0b:f6:d2:7b:11:ab:
         f4:df:b5:8d:de:3d:34:b4:05:b9:8e:1b:3a:78:40:41:53:88:
         03:fd:ae:f0:02:08:58:0a:c2:19:fa:14:42:dd:09:61:c8:d8:
         7c:2e:87:1f:e5:9e:ea:33:d2:58:2d:27:12:87:60:f9:43:bc:
         6c:f6:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:32:18 2026 by rpki-client