Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa
File:                     0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa (raw, json)
Hash identifier:          m9U7h1O89dskTZ0nBX+4s0HqxS/SeqiIpkL8bd1CuF4=
Subject key identifier:   4E:23:D3:85:01:F5:E3:A4:40:1A:E5:12:13:21:F2:F6:FF:FE:C4:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE942B5D6FED4856D8BD700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        69.138.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:42:b5:d6:fe:d4:85:6d:8b:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=ad7f8b20-b6c8-49f5-80bd-733ee04f69d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:a4:3f:2d:1c:11:a6:1d:04:08:db:99:e0:
                    c0:20:7b:8e:4c:55:1a:22:1f:48:c0:4a:c2:f1:cd:
                    9f:8f:25:4f:c7:a3:9b:c3:b0:08:14:5d:16:20:a7:
                    24:1f:42:65:39:a1:5b:8c:6d:ec:67:27:57:94:19:
                    aa:8b:47:e5:fe:12:b7:67:24:d4:c3:0a:a2:38:9b:
                    52:6a:a6:02:2a:00:13:9a:0a:a0:c2:04:81:b9:47:
                    39:6a:a0:df:9a:13:26:4e:43:a1:16:28:f0:db:66:
                    c0:a2:5e:c8:df:99:0b:0c:35:42:0e:46:d5:26:b0:
                    b7:65:ab:f9:36:9c:54:b5:be:d9:61:2d:fa:aa:0d:
                    40:66:60:30:c8:60:be:08:7e:64:4f:62:ba:c1:2d:
                    2c:f1:40:17:d7:93:be:4b:d1:40:41:c4:40:32:ea:
                    e0:4a:2b:f5:69:f2:97:91:ff:e8:21:aa:50:d2:1d:
                    40:22:4c:e7:5d:e9:d6:9e:ca:1e:45:fb:b0:49:87:
                    f3:39:18:43:77:13:92:6e:c4:12:a5:00:8f:6f:1f:
                    76:f6:56:6f:47:58:c1:72:17:0e:48:39:4e:ce:8b:
                    87:51:ba:94:7a:8b:39:5c:e2:d5:9c:d7:37:74:50:
                    c1:5a:65:8d:b5:59:fe:f1:08:52:b3:78:a1:99:b6:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:23:D3:85:01:F5:E3:A4:40:1A:E5:12:13:21:F2:F6:FF:FE:C4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.138.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a1:75:d0:53:d8:72:13:71:35:30:4e:4a:c4:70:86:e7:42:
         3f:96:f1:d2:17:2b:15:7f:66:41:32:c7:bf:bb:b2:32:22:7e:
         b3:7d:55:5a:a2:84:45:85:56:9d:97:2b:4f:d6:9b:6a:8e:bb:
         03:cb:e8:6d:bf:37:dd:8c:36:9b:0f:bd:6f:6d:21:b4:07:13:
         94:54:5a:23:b1:7e:be:cb:f1:00:09:ab:30:1a:29:66:9b:47:
         94:7a:88:0f:16:34:98:77:50:ae:6c:a4:5a:4c:8e:f4:22:d9:
         70:57:1f:0e:d1:1f:72:aa:9d:a0:f7:03:7c:df:b3:de:ea:c1:
         21:3c:12:0e:44:ab:10:09:ab:c2:64:9e:5c:c0:71:90:ff:82:
         f5:be:e9:75:29:7d:34:ee:f6:4d:70:94:ed:b3:9d:f8:82:65:
         eb:f8:5c:29:13:f8:55:2c:6b:b6:f1:71:24:e1:8b:e6:55:75:
         36:7b:5b:75:ff:55:d9:35:f4:71:2f:1d:d0:d5:45:c5:f9:4c:
         c1:06:bb:80:09:3e:3b:b8:a7:a0:00:bd:f3:02:89:67:6d:33:
         0b:4e:ae:11:1f:18:2a:50:8f:6e:f5:a9:a0:f2:bd:2a:cf:36:
         0c:8a:e6:7c:ac:da:cb:b4:bf:8e:25:25:7d:cb:39:9c:f4:09:
         4b:a6:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:51 2026 by rpki-client