Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb4f433-fbbe-3473-aa0d-b5da1345c082.roa
File:                     0eb4f433-fbbe-3473-aa0d-b5da1345c082.roa (raw, json)
Hash identifier:          l5YyCoDwzf2Ozq0vbkwHLpZcbi7k+bsWFVmclYIOp6w=
Subject key identifier:   0F:E4:B2:57:F6:7D:25:E8:0C:5D:E4:CA:0C:1C:99:C5:96:4B:48:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57BD5D27FF854A153A6D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb4f433-fbbe-3473-aa0d-b5da1345c082.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33287
IP address blocks:        71.224.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:bd:5d:27:ff:85:4a:15:3a:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ad437e93-4b26-493d-a0b0-6796e7788bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:00:95:af:59:75:50:34:98:af:c2:b6:c0:
                    74:26:fb:ac:b1:2c:8a:b3:c5:97:8c:a7:5e:77:e4:
                    fb:9a:0d:f0:2e:a1:c9:26:1c:5d:fa:dd:8c:be:85:
                    39:16:dc:e9:d8:74:b6:93:ca:c2:0f:0c:71:2c:ee:
                    73:04:1a:fb:d2:ca:c9:6a:f0:54:f9:e8:0b:d8:b5:
                    cb:e9:a3:c6:13:75:b8:e0:db:a1:0e:6d:ac:af:84:
                    ab:0d:21:a2:af:82:1a:8e:47:39:bc:a8:6d:d3:eb:
                    5d:42:5e:91:c9:cf:5d:cd:bc:e1:67:27:56:bf:a2:
                    0e:cd:db:9a:ac:cc:59:5a:de:ab:6f:2e:b4:09:d5:
                    5e:98:b9:39:2f:24:a7:f4:4d:00:a8:7b:c1:ab:73:
                    f2:36:ae:8d:9a:8f:6e:a9:bb:bd:40:0e:f8:56:96:
                    27:53:48:22:f1:b9:d8:39:b7:35:be:95:be:f6:ae:
                    15:80:97:a1:ce:8e:a6:a6:37:51:12:dc:18:d9:e6:
                    fb:03:b0:d0:a3:54:ce:06:6e:2c:7d:29:0d:b1:7d:
                    b2:26:49:10:89:14:7f:00:d9:a7:6b:bb:64:f1:70:
                    09:64:11:0a:17:64:bb:57:a0:00:cb:d4:cd:2a:15:
                    dc:95:9a:c6:29:33:c1:66:bb:fb:2b:23:7d:d9:86:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:B2:57:F6:7D:25:E8:0C:5D:E4:CA:0C:1C:99:C5:96:4B:48:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb4f433-fbbe-3473-aa0d-b5da1345c082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.224.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:35:0e:9a:11:91:47:7f:da:e8:0a:4f:6a:e2:f3:41:9d:
         01:96:b4:78:fd:7d:74:27:e1:e7:1b:24:22:4e:2f:93:6d:a7:
         28:bd:12:bd:fb:7e:62:1a:95:8b:e7:77:58:3f:5a:3c:4e:bf:
         a9:f4:be:25:19:8d:57:63:e9:c1:94:6a:71:b4:3c:42:26:f9:
         0e:28:8a:90:cd:ce:1d:60:16:b8:d1:92:e0:ac:97:a6:cc:5d:
         aa:88:32:c5:96:74:15:20:c4:f7:7b:32:35:df:21:23:0f:80:
         7f:d9:37:8f:2c:21:6f:b4:88:ce:a9:8c:eb:ec:3e:60:bb:7f:
         49:08:f9:6f:7e:c0:0b:de:26:63:7f:88:02:94:b6:9a:da:88:
         4c:26:71:40:80:45:f0:f2:db:6a:77:c4:3e:41:c6:e8:68:18:
         89:c9:20:a7:bb:69:c9:42:e2:e1:3d:d9:11:a5:60:2e:e5:eb:
         e9:a2:bd:c5:a4:71:a9:23:cf:70:88:d2:81:bb:32:aa:84:39:
         10:10:a5:71:cf:a4:a7:94:f8:33:e7:8b:14:eb:61:ab:56:da:
         64:3d:cc:ae:61:51:9f:c4:22:59:d2:5d:8e:11:2a:4d:7c:f9:
         2a:16:d9:81:63:56:b0:16:0c:61:2e:ea:24:ad:36:06:e6:47:
         26:f6:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:38 2026 by rpki-client