Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa
File:                     12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa (raw, json)
Hash identifier:          XOkmhaB6tnPOgj2eAMZ2C8/p8pCbPYICemfvGfpzyXw=
Subject key identifier:   02:FE:45:32:CC:00:2C:D5:86:E9:D5:75:26:33:09:2C:75:AC:CD:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87ABF78DABACED35CC7280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     13367
IP address blocks:        76.156.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:ab:f7:8d:ab:ac:ed:35:cc:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=4c60cbfe-1599-4e50-b2ec-5161c5626cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:e4:58:b4:92:dc:83:ee:4e:64:53:3e:fe:
                    f5:53:b9:0a:d9:06:ea:bb:3b:84:a1:a0:8e:2a:7c:
                    ac:f6:5c:d7:b1:f4:fb:33:18:ae:fe:4d:80:2f:ec:
                    38:9d:99:91:9c:9a:d2:c8:92:19:04:61:b5:6d:16:
                    62:a4:8a:36:48:13:17:a0:60:b4:13:86:15:c5:c3:
                    a2:e3:de:ed:da:e0:b3:b3:42:43:21:7e:22:1c:8c:
                    75:16:2e:34:e1:9f:9d:bf:cb:d5:a9:9e:a2:00:fd:
                    e8:de:cb:fe:8d:94:fd:ef:97:10:0a:4d:be:4e:69:
                    19:d3:7b:93:9a:04:7d:6c:fa:72:db:22:90:ab:a4:
                    0a:e7:e9:ae:cd:16:22:bd:27:b7:85:5b:38:02:4f:
                    63:2b:a3:35:e0:d4:9a:c6:7b:b2:b4:14:bd:05:cf:
                    e7:fe:ba:33:d5:c4:b3:f0:55:8c:78:8b:96:16:c9:
                    cd:e7:3c:78:53:a9:9a:4e:d6:ca:b5:65:0e:06:5e:
                    63:e0:dc:b7:dd:7b:dc:37:67:9d:46:7d:4f:ea:19:
                    2b:14:e4:f6:da:9c:bd:55:78:03:e2:ec:0e:86:64:
                    00:77:30:d7:66:dd:2f:b5:04:89:1a:16:19:1b:c2:
                    e2:79:b0:aa:9c:0f:35:f9:e9:ea:ad:27:d0:29:04:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:45:32:CC:00:2C:D5:86:E9:D5:75:26:33:09:2C:75:AC:CD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:da:89:04:64:a0:4d:27:4e:91:68:ee:f1:18:d7:3b:c6:
         34:99:54:94:11:5e:d6:b8:fd:5e:f0:d4:ad:34:a0:92:33:27:
         bd:fe:55:34:7d:66:2e:71:ed:b2:5b:3f:9c:00:b3:0b:9d:e4:
         a1:40:9e:25:8b:5d:7c:0c:e0:f0:6f:c1:7d:d0:70:ed:97:7a:
         8f:14:4d:46:86:4d:4d:92:24:2d:c2:e3:56:95:0d:0b:fb:16:
         90:6b:ca:00:11:b5:60:51:fd:59:49:ee:9d:19:4d:f2:b8:36:
         72:b4:a0:f9:2f:53:fb:17:0a:b0:26:0d:0b:e2:d8:2c:f4:09:
         34:41:a3:de:95:f5:6d:1f:45:ff:f2:a9:1f:66:8b:a2:b9:cc:
         be:2a:21:e1:39:87:8d:56:5c:33:dd:31:6e:63:3e:1d:04:f1:
         15:48:cc:ea:75:c5:2d:d3:62:7e:d9:28:bb:71:18:fd:ca:cf:
         07:c7:ed:06:3b:b3:a7:46:26:84:de:00:e8:09:b1:74:9d:f6:
         68:3c:1d:7f:8a:45:2c:64:b6:7f:8d:0e:5c:8d:0e:51:26:4d:
         3c:0d:6c:88:c8:02:06:cc:82:35:b5:3c:dc:c8:ca:10:13:3e:
         8c:fb:2b:50:96:03:15:c9:0b:33:53:a7:6d:73:62:5c:9c:c7:
         f6:11:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:46:40 2026 by rpki-client