Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/127aa79e-f1f0-3d95-acf8-7b46b27c8d8b.roa
File:                     127aa79e-f1f0-3d95-acf8-7b46b27c8d8b.roa (raw, json)
Hash identifier:          DAki9sGQoQEqyrz0Qh1JByZ+8vi7yQJRxspdGx8mc7c=
Subject key identifier:   BC:A2:AB:5C:10:3F:BF:55:93:82:59:90:45:20:CA:2F:F6:70:A3:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8CC01411020E275D1E3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/127aa79e-f1f0-3d95-acf8-7b46b27c8d8b.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33287
IP address blocks:        96.115.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:cc:01:41:10:20:e2:75:d1:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=a5cc7acf-663c-4e97-aef0-a74a076d2d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:c0:da:a7:cc:fd:c9:bc:90:14:e9:29:ae:
                    d3:20:36:1e:d8:94:21:b4:80:b9:fb:e5:94:38:f1:
                    85:1a:e5:ad:be:c3:a4:eb:0b:a7:ff:69:88:96:34:
                    ad:7f:e2:fb:f7:14:d0:b7:17:80:2f:c4:79:a7:01:
                    58:dd:1f:3d:06:cc:49:10:15:a3:af:72:f7:00:ce:
                    02:6a:32:96:ab:30:c2:87:98:c9:2b:c0:aa:6d:4f:
                    00:48:1c:b9:b6:1d:fc:77:ef:c9:b0:89:79:13:88:
                    99:20:68:ce:ad:94:cf:93:35:11:7b:b3:ee:02:ba:
                    0f:8f:2f:27:f4:04:d0:65:62:e9:1d:51:59:83:0f:
                    5d:5c:bb:dc:7e:c6:03:10:09:7e:42:fe:51:a2:c3:
                    4c:dd:64:91:ee:6f:00:19:83:01:93:79:14:4d:34:
                    01:12:48:1b:e5:78:71:38:b9:13:fe:94:5e:ed:b9:
                    b9:30:b2:0e:f7:ef:c0:ac:9e:91:a3:c2:ea:99:4e:
                    c7:d2:db:0a:01:3c:cd:be:35:ee:30:d3:44:eb:0a:
                    2c:7b:5f:d4:60:f4:61:74:cf:9f:c0:75:c0:f9:b4:
                    6c:7c:b7:31:29:91:33:68:6f:93:bf:80:1a:6e:1b:
                    c9:70:30:27:d0:88:54:96:87:17:75:06:69:f1:57:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A2:AB:5C:10:3F:BF:55:93:82:59:90:45:20:CA:2F:F6:70:A3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/127aa79e-f1f0-3d95-acf8-7b46b27c8d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.115.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:00:35:d3:12:11:5b:cf:68:14:73:f8:0e:97:e2:18:53:
         3a:8e:b4:dd:81:37:51:5d:24:54:5d:a8:a8:f8:58:9c:71:48:
         2e:a0:d7:fa:d7:20:67:46:59:0a:72:06:a2:f3:1f:56:aa:4c:
         5d:80:7e:34:9d:69:45:eb:84:df:c4:38:68:0a:41:9d:64:86:
         ef:3c:36:83:6b:0a:89:cf:60:4e:61:73:2a:cd:e3:13:89:49:
         b0:6b:bb:c7:4f:e9:2c:9d:3e:a8:8e:20:62:3a:2e:1a:39:ba:
         70:18:46:2d:6c:de:96:37:b2:fe:23:a4:ca:d6:cc:7f:d5:f8:
         bc:e0:0c:16:b7:7f:05:b4:10:86:81:b3:02:78:8a:2e:1c:00:
         f5:43:d5:0e:40:dc:0e:3e:82:6f:7c:f3:f6:dd:a2:9c:6a:c3:
         40:34:15:23:ea:f7:5f:cb:de:2d:e6:41:7f:cb:99:15:e7:7e:
         e0:cb:6e:b0:75:c6:89:6e:22:0c:72:a2:87:1d:57:ba:6c:21:
         aa:ed:42:fa:25:3f:cb:c2:44:ef:e4:94:b5:c7:13:ad:0a:ed:
         c5:77:76:73:9b:e7:45:81:b4:03:d2:48:f4:5a:81:c7:d4:ea:
         c5:a5:5e:5b:f7:7a:65:1d:28:f5:61:5f:33:d7:b0:db:7f:2a:
         74:ca:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:48 2026 by rpki-client