Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbe74699-5ea8-335d-b6e8-76088ab6f389.roa
File:                     fbe74699-5ea8-335d-b6e8-76088ab6f389.roa (raw, json)
Hash identifier:          +KGpyirPb4AYBJcpPLMkUAG4h97lMn2S/PtgXH+Vj3Q=
Subject key identifier:   A9:86:87:BB:7B:00:44:12:22:9B:98:F3:0D:FC:AE:2C:78:8D:B1:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF61B5F363A7B56C8E2DE60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbe74699-5ea8-335d-b6e8-76088ab6f389.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        67.176.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:1b:5f:36:3a:7b:56:c8:e2:de:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f289d50d-e246-435f-bd8a-6e04022ad508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:e1:6b:4c:95:82:b9:78:30:ac:1d:57:e9:
                    a6:43:15:92:1a:10:65:01:51:5d:ab:ab:ff:ee:2f:
                    bb:f2:17:6c:53:46:71:9e:3c:f1:39:f0:be:54:cd:
                    11:b0:fb:b9:49:64:07:ca:ca:1f:88:16:c7:ec:a4:
                    37:18:e8:14:dc:cc:6a:64:37:df:2f:57:3b:e0:73:
                    32:a2:2a:08:ed:93:9f:33:47:58:99:b0:40:99:f0:
                    66:f0:bb:85:1b:34:ce:7c:75:b7:08:ff:69:a1:22:
                    d8:a9:1d:da:89:95:a5:a1:11:cb:a6:a3:17:62:0f:
                    a0:8f:e1:60:5a:1c:8c:3a:98:25:fb:d5:af:6f:30:
                    6e:a0:b6:b2:0d:21:59:4c:2b:61:88:ae:21:e9:d7:
                    6d:ca:b2:30:b4:f1:87:4c:31:24:aa:db:05:2f:6e:
                    c5:9e:da:b4:1a:d2:49:c1:ce:f0:d7:97:bc:ab:1d:
                    f1:2c:92:89:1f:92:1f:7a:86:c5:90:90:2f:cf:e7:
                    7a:65:1f:12:bd:ce:ce:66:37:82:9b:73:e8:78:64:
                    57:fe:83:4a:1a:90:1b:e0:16:a4:56:5c:6a:67:0f:
                    35:e6:39:d3:04:a9:aa:96:da:be:12:15:2a:c4:c0:
                    4e:8a:9d:3d:1d:3d:5f:e3:77:92:73:d9:ab:2b:c0:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:86:87:BB:7B:00:44:12:22:9B:98:F3:0D:FC:AE:2C:78:8D:B1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbe74699-5ea8-335d-b6e8-76088ab6f389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.176.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:5c:22:10:47:b8:7d:22:30:fe:e2:dd:c1:a6:74:a3:63:
         6a:ff:50:54:49:e4:c9:54:c3:43:a9:41:fe:c0:e5:98:81:96:
         f4:11:05:b4:64:ae:3b:7b:33:9f:05:70:eb:5f:da:b1:09:88:
         76:72:09:0c:e7:9a:05:ef:6c:26:78:d0:1b:3c:41:d6:77:dd:
         c8:fb:82:84:8e:37:23:41:af:f6:ea:4d:bc:df:bf:6d:ec:89:
         03:0c:57:8d:7d:8b:86:e2:2a:0f:2d:24:a9:81:9c:58:c8:a6:
         3f:16:4a:a6:e9:c1:00:76:32:59:34:b5:89:91:47:85:12:52:
         34:3a:e0:e4:46:07:b8:3f:e3:42:3b:e5:97:8b:71:8f:bc:48:
         e1:d4:a3:bb:8d:5c:2b:38:69:e3:68:c7:5a:3d:a4:7b:2b:cf:
         dd:10:65:83:0d:7c:17:8c:3a:26:7b:ee:83:27:f7:84:9b:24:
         dc:8d:1a:17:ca:fc:18:5d:b5:69:fe:21:15:be:31:d4:40:37:
         5b:d7:a1:5c:f6:3a:85:d1:ad:82:e7:c7:03:60:08:1e:92:c7:
         a2:df:6c:09:9a:97:ff:88:d5:34:3b:e9:de:ef:6f:d2:5d:09:
         bf:fe:3c:fc:72:b2:a1:14:df:59:e0:ee:3a:64:39:5a:e7:eb:
         dd:b1:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:34:12 2026 by rpki-client