Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/133ae362-21b7-3486-b2b7-ac023fafad0e.roa
File:                     133ae362-21b7-3486-b2b7-ac023fafad0e.roa (raw, json)
Hash identifier:          39AnyyPnz/pc+FAQN7gD1+BQhLc8fnbsH+sAJXMj85Y=
Subject key identifier:   4C:C4:AE:A9:4C:B3:90:19:F0:E4:10:22:38:27:BF:39:1A:96:91:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC21140CBB97E290A97400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/133ae362-21b7-3486-b2b7-ac023fafad0e.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        76.119.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:21:14:0c:bb:97:e2:90:a9:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=301e3af5-e3c9-46bd-8ef7-837c1555a1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:db:5c:8a:f5:e3:43:45:62:e3:04:96:48:
                    91:61:a4:5f:01:6c:7d:03:ba:89:7b:33:80:50:1f:
                    51:7a:2b:7a:47:1f:e8:a6:ff:3a:71:b8:8a:1c:71:
                    63:5f:87:6d:be:d6:c5:66:9e:bb:34:5a:84:f4:7c:
                    dc:44:87:17:9d:1a:a7:d1:76:64:88:bb:72:63:ae:
                    2a:bd:96:8a:d0:39:a9:ff:3f:2f:49:09:b4:56:52:
                    4f:13:3e:fe:ac:0c:62:44:ed:e1:7a:0a:b8:a9:00:
                    c7:ea:ed:75:22:c6:4f:7f:36:2e:40:98:60:85:15:
                    66:a0:a1:a1:dd:23:07:c9:e3:fc:b6:5b:1e:c8:a3:
                    c2:94:d1:69:e8:e0:ed:0a:93:ca:df:ef:c7:b3:fd:
                    74:c5:42:dc:d8:07:81:c0:61:ed:94:01:96:84:5d:
                    7a:dd:a2:8c:48:ba:6a:36:6f:88:27:37:5b:fb:b3:
                    75:80:57:49:8e:c6:34:b1:aa:b9:63:58:69:6b:24:
                    e0:ea:81:56:05:4a:a8:5d:34:71:00:42:0d:13:ab:
                    0a:7d:fa:a8:34:1f:7a:88:29:67:56:8e:a0:69:77:
                    60:2f:1e:da:4d:be:f4:6e:6a:3b:07:3a:9e:8f:ce:
                    80:79:87:42:f3:37:9b:9f:37:cf:78:dc:02:94:3d:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C4:AE:A9:4C:B3:90:19:F0:E4:10:22:38:27:BF:39:1A:96:91:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/133ae362-21b7-3486-b2b7-ac023fafad0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.119.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:2e:37:b1:52:79:b3:a4:dd:b8:fb:ce:31:42:19:84:cf:
         41:f0:66:90:55:6b:95:0b:2f:45:26:23:f7:26:34:b2:5e:44:
         cd:50:34:6e:c6:f3:a6:03:a0:8e:2f:93:db:4b:13:ab:e9:88:
         9d:e8:79:2c:31:fa:2f:5b:38:2f:72:da:44:a4:ec:08:2d:44:
         e3:79:e8:2b:93:d9:3a:75:42:76:46:e7:24:33:a3:a5:35:cb:
         b9:96:17:e2:f9:6d:d2:55:e6:e0:5c:5f:8a:b6:3c:2a:6d:98:
         76:fa:7f:51:66:87:1f:e0:5b:6f:a1:54:7a:2e:ea:2e:e9:6d:
         c3:01:dc:bf:65:f9:aa:47:fb:5d:b4:21:e1:15:44:5a:0a:b6:
         07:29:fb:0d:67:c3:60:ee:55:18:fe:66:64:db:56:38:b3:25:
         2a:a6:c7:2d:07:a0:35:fb:bc:fb:13:7b:c6:bd:0b:8a:03:55:
         d9:3b:43:b9:b1:87:75:16:cc:31:66:89:a2:64:c1:44:42:ab:
         22:a2:c6:1b:8a:c3:9f:64:87:3b:74:5c:fb:38:a2:f8:f2:a5:
         c7:b1:ee:92:0d:c7:33:37:07:01:b8:a1:ce:6c:2f:b9:1f:d6:
         98:bb:24:f4:93:87:d3:9c:0e:2e:25:c4:36:68:d9:87:cb:a9:
         de:8e:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:35 2026 by rpki-client