Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a759a1-7dc2-35fb-afdf-ef56783b107f.roa
File:                     10a759a1-7dc2-35fb-afdf-ef56783b107f.roa (raw, json)
Hash identifier:          MHsAtJUcZkpokAbqmy0EBj6B7XRczSvS+p9IFaHUtjU=
Subject key identifier:   FF:22:3E:30:4F:3F:E1:CA:93:34:03:3C:50:DD:0B:B3:35:21:F2:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243AD9F7E686869819D4500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a759a1-7dc2-35fb-afdf-ef56783b107f.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        75.64.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:ad:9f:7e:68:68:69:81:9d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=0ff6e864-b20c-4352-bf8a-c122042f3b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:9d:b5:bd:6a:f3:87:ea:04:d1:a6:d6:06:
                    32:35:5e:df:ea:46:b3:57:c9:cb:4e:6e:9b:0d:f0:
                    26:06:20:29:51:df:3f:9b:f3:a3:79:7c:d6:ae:c3:
                    6d:7b:3f:3f:05:34:d6:21:94:bd:4d:99:5a:a7:af:
                    2b:d2:a8:cb:b1:ff:23:ba:48:18:23:ad:91:ee:0b:
                    22:aa:2c:5d:3d:70:79:f6:47:a7:2e:0e:bd:2e:ae:
                    b5:27:11:25:32:5a:b9:b6:5d:99:a4:e8:d1:50:a4:
                    89:03:ec:96:68:75:b2:23:32:20:e9:6f:b4:45:33:
                    3c:92:3d:45:68:6a:97:6c:d9:97:70:67:17:94:c1:
                    2c:22:2e:fb:30:bc:37:cf:af:bb:93:87:94:2d:d4:
                    98:61:be:6f:f6:eb:59:a3:a1:e0:1d:04:5e:7e:cf:
                    22:b5:3a:80:06:f6:e0:10:ee:4d:5c:11:96:67:93:
                    b7:8c:c6:79:9a:e2:f0:85:60:8d:00:e2:55:e8:77:
                    ab:cb:20:51:c9:f6:db:08:2b:d2:44:c1:51:35:50:
                    1f:13:84:1e:d5:32:91:e2:5a:7b:be:33:9d:f7:31:
                    ab:b5:dd:5d:e5:7e:52:43:c6:d0:d8:53:b7:40:39:
                    87:27:d4:5b:45:f9:cc:9f:2e:ef:64:76:7d:0d:c2:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:22:3E:30:4F:3F:E1:CA:93:34:03:3C:50:DD:0B:B3:35:21:F2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a759a1-7dc2-35fb-afdf-ef56783b107f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:23:66:4d:8f:3f:8a:27:ba:81:95:7f:ab:f1:25:dc:c0:68:
         92:cb:bb:e2:ee:18:8b:ed:5d:e7:71:74:3d:47:c4:7a:4d:79:
         38:a9:b5:f5:1a:51:87:37:ae:e4:76:b2:fc:87:fa:98:6a:d4:
         be:e1:82:3c:11:94:31:26:b5:01:7a:c2:7b:e1:98:9b:30:d5:
         19:16:3e:16:f4:8a:52:1b:c4:2d:69:a4:09:3d:81:0b:76:0a:
         5a:05:b7:93:d5:b4:e0:90:7a:9a:09:54:46:47:bf:d9:6c:d6:
         a8:3a:a4:78:d1:0d:69:29:42:5e:10:ee:bd:1d:b0:88:07:5c:
         cf:e1:91:83:06:6d:c3:fc:28:ad:e5:4c:97:98:6b:54:ad:c6:
         fc:6c:c2:62:51:20:95:02:78:62:dc:b4:73:bf:06:67:b6:fd:
         79:98:b5:4b:cc:b4:81:fa:4c:96:70:d7:c8:d7:ab:b0:93:27:
         b4:a7:67:16:4e:44:05:9a:32:b8:2c:5b:4f:fc:ed:62:54:5b:
         36:d5:c8:95:cf:07:86:a6:e9:af:16:36:bd:c4:88:9a:59:59:
         d0:35:50:09:de:ca:64:f5:58:ab:04:ec:ba:eb:c9:05:e8:c6:
         ea:00:34:05:8b:c6:a2:27:fb:b8:e2:86:e6:f2:d9:cb:2c:5d:
         79:b9:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:36 2026 by rpki-client