Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99de5d7-38cb-3587-88aa-c6e1ec4f5b21.roa
File:                     d99de5d7-38cb-3587-88aa-c6e1ec4f5b21.roa (raw, json)
Hash identifier:          8dpgMskQaLYivhb1+rXgcmATTF9GjDnDcJYwEq7yR2Y=
Subject key identifier:   CC:80:BB:06:33:AF:20:B7:84:48:35:17:D6:2A:D9:B5:89:A7:33:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4EFCF47FAC0D315CA3E280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99de5d7-38cb-3587-88aa-c6e1ec4f5b21.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33490
IP address blocks:        76.105.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:fc:f4:7f:ac:0d:31:5c:a3:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=774bd605-63f6-4dd0-84ed-c0aebae5ff82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:c5:84:44:d2:09:c4:9b:28:df:3d:92:9a:
                    c7:94:1e:12:b9:77:79:7a:63:07:e4:32:9a:97:26:
                    69:31:03:20:e8:ef:87:74:2e:7e:d0:28:cd:e1:98:
                    74:c7:e6:4b:cd:33:71:82:23:4e:56:61:86:a4:2f:
                    04:3f:66:46:ca:fe:5b:10:ed:63:49:61:90:9c:e6:
                    68:bb:9a:1e:37:62:06:91:3f:56:0e:26:e7:a7:8b:
                    24:69:bd:c6:57:db:29:00:be:96:16:9c:41:e0:39:
                    3f:de:73:30:09:97:b8:72:8d:7a:45:02:d7:df:22:
                    bb:7f:3a:f0:49:3c:cc:d5:da:da:09:d2:ff:60:47:
                    c1:df:b8:fc:65:a6:bb:e8:63:97:4a:0d:29:a7:f8:
                    95:30:2f:b6:41:16:23:18:57:fb:a9:ac:ed:3e:23:
                    47:27:35:ae:3c:25:28:e7:f4:d3:77:ee:6b:1f:f4:
                    41:45:5c:48:06:0e:9d:e1:92:09:0e:5b:fc:4d:08:
                    bf:b4:23:b4:d8:98:f1:a4:16:da:1b:1f:90:06:fd:
                    d9:c8:0b:58:57:9d:81:82:21:a2:08:4c:6c:eb:db:
                    d1:f2:39:9e:43:f8:d4:17:42:29:9a:65:ec:e0:74:
                    db:6d:2b:ac:4d:db:1f:7c:52:a4:16:ed:d5:1e:f5:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:80:BB:06:33:AF:20:B7:84:48:35:17:D6:2A:D9:B5:89:A7:33:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99de5d7-38cb-3587-88aa-c6e1ec4f5b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2e:9e:e8:9d:13:4a:b4:6f:af:62:76:01:cb:a0:27:73:6b:
         3f:f0:f1:f1:04:c7:19:17:12:df:2c:8a:58:5a:5b:44:d6:e9:
         85:c3:60:8a:69:f2:1f:d3:dd:00:c6:9a:69:f4:1b:0c:a6:4c:
         95:a5:15:9e:31:ff:5d:5e:cd:b1:04:c5:15:dc:8e:f3:85:7d:
         cd:60:8e:dd:7a:d1:3e:3d:b1:14:0f:25:b2:61:76:42:d5:d5:
         12:14:f5:84:a5:f4:b6:44:19:24:a4:92:99:23:2f:14:47:c7:
         ce:09:d3:56:08:f9:7f:5a:cb:aa:7a:10:36:70:7e:f1:26:1a:
         7e:ba:14:c7:68:30:d7:a2:7d:3e:2e:c2:db:57:54:80:e9:41:
         f0:f2:98:55:fd:7e:15:6c:41:64:16:61:41:f0:bf:ba:c1:a0:
         65:c9:76:cc:f0:4c:36:f4:2c:2a:e1:47:7d:08:8b:d3:47:e7:
         4f:30:11:ab:8f:dd:4a:ea:05:4f:80:89:ae:8d:39:7a:72:f6:
         d8:12:e9:81:f0:ca:a5:59:ac:7b:03:70:ff:f6:5e:6f:0e:ec:
         ed:ea:67:3e:75:c5:7e:41:e0:f4:41:6f:66:ab:45:c0:a9:f0:
         83:60:34:f4:f9:53:d0:35:b6:a6:f4:18:09:1b:08:4e:30:7b:
         7c:33:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:07:24 2026 by rpki-client