Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0441d4e-ab1d-3e72-bc97-3422f8f8d2f4.roa
File:                     e0441d4e-ab1d-3e72-bc97-3422f8f8d2f4.roa (raw, json)
Hash identifier:          XQ2rcw0jy0aKjDAKBO6Z1SSpaNOAjsOaWPdGSzRwwoQ=
Subject key identifier:   59:EF:6A:1D:60:42:2D:7E:2B:93:EC:20:96:D9:A3:DE:A3:84:4B:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FB63F6ACBB06C73742E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0441d4e-ab1d-3e72-bc97-3422f8f8d2f4.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        76.139.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:b6:3f:6a:cb:b0:6c:73:74:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=9653a3de-4a0a-434c-a830-aee122fade5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:38:ae:4d:24:18:83:f8:63:34:72:35:0d:
                    74:5b:b2:6d:e8:cf:9b:06:3d:b4:91:2b:4a:ce:70:
                    8f:70:f8:2a:09:28:fa:d0:96:61:1a:db:1a:0c:d4:
                    6c:7c:6e:fd:14:f9:77:05:56:99:0c:3a:99:20:f5:
                    e8:c4:40:39:17:74:9f:3a:da:f0:19:84:9e:aa:e5:
                    31:74:26:57:99:44:bb:b6:22:c1:ec:ff:6d:27:1f:
                    8d:b4:d9:38:01:0e:82:8c:76:3c:7d:24:b2:92:bb:
                    de:ea:21:f6:bf:9e:82:4e:6f:3b:d5:be:f0:b2:9d:
                    9f:0b:49:bc:4b:87:f5:72:1b:36:65:50:c0:8e:db:
                    f8:e6:5f:f0:49:a3:85:82:ce:45:3a:9d:fb:43:ac:
                    66:70:53:7c:4c:01:d2:18:c5:2d:07:dc:0b:8a:41:
                    39:8b:67:c0:bc:19:40:74:ea:2a:61:3e:51:54:34:
                    fd:f4:29:6c:f3:11:cc:04:00:8d:4b:3c:f6:d3:ff:
                    19:f4:a1:ac:74:9b:c0:c6:77:e5:dc:8c:de:90:61:
                    2c:b4:40:de:36:2a:75:59:74:40:4c:c0:7a:a9:41:
                    63:4f:ac:71:bb:02:dc:a5:7f:43:0d:9a:bc:b0:cc:
                    16:bb:5b:8d:91:c2:b6:b6:25:60:3a:f4:03:8b:0e:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:6A:1D:60:42:2D:7E:2B:93:EC:20:96:D9:A3:DE:A3:84:4B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0441d4e-ab1d-3e72-bc97-3422f8f8d2f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.139.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:31:2b:66:7a:bc:bd:1b:03:31:44:2f:da:13:f9:e2:4e:f2:
         ab:6a:c4:a1:0e:50:fa:6a:ae:c9:8d:17:a7:3a:5c:f5:c7:76:
         5f:8e:56:cd:a8:52:06:25:f2:20:08:66:7f:3f:3e:5d:e4:92:
         76:66:55:10:39:d7:a7:95:ac:90:3e:b5:4b:e7:a0:0a:03:f3:
         3c:fe:73:3d:62:2d:86:3a:cd:00:ad:cd:89:44:d3:b3:a2:f0:
         77:e7:4c:37:45:55:71:8b:8f:89:79:e0:7d:41:eb:7b:04:eb:
         e4:85:20:13:94:5b:b6:53:3e:fd:fd:c1:fd:ce:8a:90:30:ce:
         9d:55:0e:31:75:3d:ed:7b:7f:e7:23:ab:74:b0:3e:31:e8:90:
         d8:5d:24:22:bb:33:37:36:80:b0:8f:20:58:0a:f7:67:25:d6:
         5f:a2:d1:2f:51:e9:03:5d:92:22:3c:91:b6:c0:2e:93:e1:ec:
         c6:6a:3c:1d:4b:24:4c:08:17:d5:60:df:32:f9:89:e1:a9:24:
         77:ef:3e:76:00:2f:a7:56:04:ac:af:55:30:a4:4c:00:fb:2b:
         c2:b3:32:d8:91:cb:a2:44:45:c9:31:fb:6e:47:ba:77:63:4d:
         2c:1c:d0:35:0d:9b:18:20:ae:29:f9:9b:41:4d:97:47:6f:d7:
         f0:d7:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 22:31:03 2026 by rpki-client