Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
File:                     b40c47e3-8988-3029-b819-5be6fc4d7af7.roa (raw, json)
Hash identifier:          z973eFiHCXz4brcFAEou4Pe8JRMNqAIdPryd29t7ZtU=
Subject key identifier:   CA:8A:80:39:EC:C2:97:5B:1A:67:46:B8:29:57:1F:3E:2D:B8:92:07
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584D8AC546BC0D0186A912242740
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     399244
IP address blocks:        76.164.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:46:bc:0d:01:86:a9:12:24:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=4baeb748-0900-4a08-a59a-e6b36a250a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:8f:9e:c2:3f:5c:94:45:bc:7b:f5:3d:08:
                    e1:54:90:90:a8:de:db:9c:a9:8f:ed:92:67:7a:08:
                    bb:fe:d0:31:fc:55:b6:87:10:f5:9b:ad:c4:f4:b8:
                    1d:9f:ac:16:ad:ae:ef:e3:46:63:64:7c:97:9e:80:
                    31:61:cf:43:ee:30:db:e0:a8:9b:68:4c:8e:45:a8:
                    7d:bd:c9:be:94:34:f3:6b:21:39:80:0a:60:1e:86:
                    cb:73:f0:16:58:e8:d4:0f:d5:fd:64:f8:65:d2:aa:
                    bc:d4:97:b7:07:4d:75:e0:45:ab:8c:aa:d8:87:48:
                    fe:a4:00:98:4c:6d:55:46:26:a1:f9:2e:63:27:bd:
                    00:f8:7a:69:88:e3:72:3b:47:50:44:9e:4b:d2:4f:
                    e9:6f:42:71:3c:29:7a:c6:63:8d:51:c9:d7:5a:a9:
                    d1:58:5a:ca:78:4e:74:e2:1e:05:4d:d3:49:86:da:
                    8c:35:ae:79:63:af:25:9c:b5:ac:79:1e:86:5b:9b:
                    a4:13:d4:8b:7e:84:5a:38:da:09:d5:ed:d4:9b:46:
                    34:f0:d8:9b:d6:a6:76:72:39:d6:9b:6b:56:5a:12:
                    09:39:ba:24:29:83:30:88:62:ac:76:0f:0b:cb:f3:
                    18:98:5f:68:9b:d8:d3:d5:7d:03:39:e3:0a:79:92:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8A:80:39:EC:C2:97:5B:1A:67:46:B8:29:57:1F:3E:2D:B8:92:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/b40c47e3-8988-3029-b819-5be6fc4d7af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:cd:74:55:52:07:ae:f4:90:db:4b:64:dd:d2:70:4c:43:
         99:c3:af:a5:1e:55:ce:c4:2a:d4:84:e4:60:fc:ea:94:e4:ce:
         d3:71:71:8b:6e:f6:ee:6b:7b:01:ec:99:f7:3a:97:73:1c:3f:
         5a:f2:20:1a:34:fa:a9:9c:a1:6e:86:af:72:08:d6:f8:44:3f:
         75:04:ca:8b:5e:6d:5a:46:55:0a:e9:1a:94:42:0e:33:36:cc:
         0f:76:18:00:17:98:fe:2f:26:3c:9d:ee:64:e7:24:fc:58:af:
         66:26:f5:4d:cc:22:ed:d0:1f:7b:8d:da:52:b4:91:82:5f:21:
         eb:78:cc:39:08:cf:7b:79:8b:65:34:3d:47:96:9a:d9:ca:b9:
         15:eb:e6:7a:34:11:fb:b6:51:de:ec:87:b5:19:15:14:46:3b:
         01:93:25:a9:5d:64:4c:07:8a:78:db:d7:c3:af:c8:ee:2a:9a:
         dd:83:4c:2b:b9:f7:68:71:38:50:99:71:46:f4:66:9a:f7:0b:
         e5:55:9e:be:9c:73:2f:b3:be:0e:bd:35:c7:15:ab:7c:dd:fd:
         8f:75:40:73:86:ef:ea:98:0d:bb:7c:56:42:0c:e3:a6:ec:0f:
         14:05:82:83:dd:35:53:b0:37:70:13:ad:8a:91:20:0f:3d:67:
         6d:d3:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 04:06:22 2026 by rpki-client