Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f81ae381-10ec-34fc-b44c-ceba94653ad5.roa
File:                     f81ae381-10ec-34fc-b44c-ceba94653ad5.roa (raw, json)
Hash identifier:          EESm1yYq1lUY1Pko/4qb0mk+F01az8H/+gkVIgLuS8k=
Subject key identifier:   5B:67:BC:49:8C:77:F3:3E:A1:BD:73:67:8C:9D:82:0F:91:2D:F3:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6F9304E418E8BE74256C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f81ae381-10ec-34fc-b44c-ceba94653ad5.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        71.195.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:f9:30:4e:41:8e:8b:e7:42:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b82e29bf-ac69-486e-a92b-5212debbeea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:58:64:14:6d:fb:78:5d:56:ca:b7:fe:77:
                    e0:19:1b:8b:bf:7c:3c:1a:10:72:3a:4e:20:21:7c:
                    78:71:00:36:68:51:9e:36:cb:15:0d:dc:2e:30:8b:
                    54:67:e4:02:2f:76:41:a1:cf:4b:7f:6d:fb:13:82:
                    13:e4:f6:b2:b2:2e:3f:c1:17:75:b6:f6:bf:b0:49:
                    bb:e6:56:b3:ca:53:85:21:fc:a1:61:70:34:3c:e5:
                    c4:c0:0c:70:23:b1:21:f5:c9:b8:4b:d4:fc:64:e3:
                    aa:2e:c5:b1:d8:89:3d:03:f0:02:08:42:8e:90:bb:
                    0f:99:75:9d:93:b6:91:d4:da:bf:c5:bf:c3:e2:20:
                    3b:08:9e:5e:15:60:52:cc:88:53:80:a2:15:f8:16:
                    4a:11:4b:d6:bf:62:2f:60:cb:c8:21:e3:d9:1a:8d:
                    41:78:30:8c:81:7c:4f:65:df:48:14:c8:e4:a9:e3:
                    32:53:fe:e0:88:80:4b:25:26:cb:9c:ae:96:ab:c1:
                    8b:c2:56:7f:7d:8c:2d:a0:91:ce:35:36:75:d4:ac:
                    88:84:13:e2:6b:a5:3a:28:5d:d8:8c:85:8c:e6:39:
                    f8:52:c6:47:93:e0:9c:ad:e2:1f:1e:44:7d:28:59:
                    5e:70:4b:39:70:17:7e:e5:5a:9b:d2:a5:96:de:d5:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:BC:49:8C:77:F3:3E:A1:BD:73:67:8C:9D:82:0F:91:2D:F3:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f81ae381-10ec-34fc-b44c-ceba94653ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ea:d0:ac:9c:fd:23:f4:05:75:ae:a3:52:fc:80:81:2b:ee:
         6b:8d:a3:68:21:88:32:2e:33:b4:01:2f:52:8c:1e:18:c5:00:
         b6:d4:75:a9:2c:61:07:87:00:1a:d7:c7:e4:ca:6c:9b:dd:10:
         7d:6b:28:c5:ff:e3:48:a1:4f:9b:cb:b6:04:e0:8f:b9:a4:2c:
         b0:36:70:2e:0b:d1:88:10:d6:70:84:6b:d3:f0:27:85:10:aa:
         b0:2e:87:f1:4b:44:d8:86:d7:80:f9:32:1e:9d:2c:be:ce:17:
         aa:f4:5f:67:81:25:fa:d4:0e:53:f2:8a:da:bf:92:19:87:80:
         71:a3:c1:6e:5e:64:9e:25:92:8c:47:ea:7d:5d:05:69:32:5d:
         4b:15:7b:33:ad:81:09:dc:b8:ee:cd:b2:ea:c9:59:85:c0:8a:
         c9:01:d2:f8:0f:0b:7e:45:7e:15:ed:3b:a0:fd:8a:c2:c9:bb:
         b2:ba:df:5c:c2:22:8f:de:07:2a:5e:10:fe:2f:67:1d:b9:9b:
         93:a8:09:ed:da:f2:af:2b:21:ad:d8:54:29:9e:bc:ca:70:5a:
         83:0d:8c:3a:41:61:f7:db:ac:15:17:81:10:2a:75:3e:f5:93:
         d0:fe:70:68:68:f6:ee:21:75:2a:fe:43:31:c2:e8:08:b5:03:
         43:c1:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:45:59 2026 by rpki-client