Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d4b67c-cc16-3e4c-9734-b1278ecfc2ee.roa
File:                     01d4b67c-cc16-3e4c-9734-b1278ecfc2ee.roa (raw, json)
Hash identifier:          vzhlHbr4pf0xin15HcbkDZN1mX+OqBewLWLu8wE6jjQ=
Subject key identifier:   D3:BB:F7:4A:B2:D0:00:9A:74:C2:36:55:BB:AF:EA:73:DC:8D:03:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81004D7AF376FAD9C6D05C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d4b67c-cc16-3e4c-9734-b1278ecfc2ee.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7015
IP address blocks:        76.119.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:4d:7a:f3:76:fa:d9:c6:d0:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=e9d7f1d7-4c1e-4363-8565-2312448431e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:8c:3c:8f:f1:db:86:8e:23:f0:1b:90:39:
                    c0:cc:a6:dc:e1:b7:d5:f3:20:2a:5a:b8:59:66:13:
                    c8:9e:f4:2b:d3:35:d3:e7:77:79:f5:ef:3d:ac:a2:
                    d0:45:58:d8:1c:42:08:61:f8:af:8b:db:bb:3f:3a:
                    fd:f1:ee:a3:a6:5c:2b:49:ad:9d:81:e2:5a:af:f0:
                    21:3e:12:4d:26:66:fa:1e:d3:f9:af:3a:16:24:c4:
                    bd:42:43:9b:f8:ee:15:74:a6:96:3b:c3:b5:4b:d7:
                    a9:e3:0a:de:58:bf:35:32:6a:c5:80:65:8c:40:95:
                    2b:71:22:21:bd:a3:b9:e9:6e:32:c6:e1:f0:88:2e:
                    72:58:b2:14:2c:bb:f3:95:29:bd:72:d1:41:35:3c:
                    05:a0:d4:aa:2e:24:55:6e:c7:a5:bf:9a:0d:80:f2:
                    a6:b0:7b:4a:2b:54:9a:41:6d:de:4f:d4:74:46:88:
                    b9:8f:66:6f:9f:9b:d1:d3:54:81:40:1e:53:3a:f3:
                    ee:54:98:c9:f2:e2:cd:19:2b:5b:54:c4:a1:9f:d2:
                    e1:7d:1c:82:65:a6:76:11:c8:8d:90:1a:82:90:64:
                    3e:16:d3:31:6b:bc:66:5e:2e:b9:50:eb:93:2b:6d:
                    84:d1:78:ac:5c:ff:fe:30:c5:0d:40:af:f8:f9:02:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:F7:4A:B2:D0:00:9A:74:C2:36:55:BB:AF:EA:73:DC:8D:03:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d4b67c-cc16-3e4c-9734-b1278ecfc2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.119.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:71:c7:01:94:5a:3f:99:22:99:dd:b9:ea:8f:39:b7:6e:90:
         59:38:58:03:6e:7e:ca:da:0f:c7:b5:b6:28:14:3e:f7:a9:ba:
         1b:be:3c:f6:3c:85:d4:56:7b:1b:29:78:3b:8c:e0:28:73:8c:
         1f:8e:3e:bb:e5:10:e6:b1:c0:6b:9c:8d:1b:64:d9:7d:f0:d2:
         12:a4:6b:3a:51:6d:30:9c:14:ac:4b:8d:92:51:c1:cb:75:ba:
         9e:73:d9:fa:37:49:ac:70:c5:e8:45:ea:0a:b0:d3:09:20:ec:
         7b:24:cf:5c:02:43:fe:fb:41:b8:21:5a:ac:dc:af:f6:ad:0a:
         3e:05:0c:5c:b8:e1:ec:75:d1:99:39:52:b8:9b:d0:01:75:72:
         ad:3e:86:84:da:2e:bc:cb:e8:c0:ad:b6:3b:39:cb:82:01:84:
         6e:f6:b9:bb:8d:e6:61:9a:f4:0a:75:47:bb:50:70:04:f5:4e:
         6e:0d:9c:98:9d:a5:c9:e5:15:91:1c:df:b0:c1:a4:e7:2c:d0:
         d2:1b:ca:23:05:20:15:71:73:64:5a:63:ae:aa:57:a5:be:0f:
         e1:fc:78:ac:8b:69:68:e7:ef:ad:68:fa:64:b7:57:3d:b5:c2:
         de:b1:a9:da:fa:e7:cb:93:2a:17:9f:8a:63:92:3b:a5:b9:15:
         45:57:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:35 2026 by rpki-client