Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17766e48-b911-3c59-839c-a54d5c122795.roa
File:                     17766e48-b911-3c59-839c-a54d5c122795.roa (raw, json)
Hash identifier:          SDtoGBLmjO6YbRbffN8VLJWQ0piNZiM2to3mxUIv3YE=
Subject key identifier:   B1:30:BC:B5:E1:C2:0E:B2:F3:84:30:5A:49:76:EC:C5:71:90:0C:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DF2109003985823990AB3C880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17766e48-b911-3c59-839c-a54d5c122795.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     7922
IP address blocks:        76.159.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:90:03:98:58:23:99:0a:b3:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=16bc1939-7a3b-4b9e-880e-1f8b6e7b76b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:e5:34:ba:af:d1:bb:bb:b1:e1:09:c7:ca:
                    19:f2:a9:7c:80:75:26:8f:86:66:08:ca:bb:8f:95:
                    28:ca:73:fa:21:d6:f7:ea:f4:a4:80:2e:b9:4e:6f:
                    f9:a7:74:93:ef:31:43:f7:12:9c:7f:2a:b0:e7:5e:
                    73:9b:42:98:ad:a4:1f:d7:68:0d:6c:2a:84:b4:a8:
                    44:5d:5c:3f:97:af:44:b8:4e:3e:71:6b:96:46:50:
                    52:3b:4d:de:78:fe:9b:b2:a4:ac:0f:b7:e5:49:71:
                    81:c7:03:ad:4b:ac:29:60:f7:24:08:91:8e:9a:1f:
                    36:f7:c3:61:d7:df:6a:7e:63:f9:02:2c:6f:af:1c:
                    8e:96:78:dd:82:24:ea:c7:9c:3f:b7:d7:b8:f9:4e:
                    aa:69:fd:68:f1:fa:68:c2:3d:ba:94:97:e6:c6:4c:
                    65:ca:03:55:6d:a3:41:69:7a:1d:6d:fb:0f:79:82:
                    af:7b:23:f6:14:07:93:40:d8:d4:37:01:2c:77:3b:
                    26:a7:30:7f:63:df:bf:ed:ee:40:d4:5e:05:6b:0e:
                    93:45:de:7b:d3:8f:1d:5d:39:2d:03:7f:58:55:a2:
                    63:9e:07:72:53:00:2b:39:57:e3:5e:fc:5d:c5:fb:
                    13:60:8c:75:67:f3:26:a5:f4:e1:18:58:21:81:54:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:BC:B5:E1:C2:0E:B2:F3:84:30:5A:49:76:EC:C5:71:90:0C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17766e48-b911-3c59-839c-a54d5c122795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.159.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:95:18:9e:e3:58:1a:a8:9a:5f:23:01:c1:69:01:15:78:2d:
         cd:b6:45:3b:6d:bb:98:d9:46:98:65:2e:2d:bb:5a:40:1a:07:
         16:3b:5b:df:30:58:b2:41:24:e4:be:b0:f8:fd:31:f6:db:d2:
         6a:e6:dc:62:09:36:ed:3f:49:c3:73:e4:1e:be:e1:a2:03:36:
         c7:12:fe:35:18:88:f1:36:d6:30:70:fe:6d:d3:cc:5e:cb:88:
         ad:2d:d8:e6:85:98:d6:3a:a5:03:a7:d0:f1:34:b1:6c:64:03:
         24:ec:95:1c:72:59:29:2a:01:af:51:61:d7:a8:c8:6b:fe:fe:
         dd:10:b2:85:a7:ca:49:cf:11:a0:62:57:c7:a9:4a:a3:ec:f3:
         2d:47:d9:e6:c7:b4:ee:0f:e1:28:b6:c2:97:81:58:7d:4c:f2:
         b6:60:1d:f2:b3:f7:1c:cd:84:07:03:e3:2f:1d:4f:8f:ae:e3:
         fd:74:5b:d2:31:86:a0:10:58:86:2f:87:36:98:ea:7b:35:2c:
         75:ea:d5:68:80:40:73:d0:53:ee:e7:4e:1f:c6:b4:fd:66:a5:
         cc:34:10:f7:19:b9:c2:8f:c8:df:dc:88:fd:da:a3:3d:d9:1a:
         3f:e1:0d:fd:77:bf:38:76:94:b4:28:53:46:4d:ec:9e:70:db:
         f1:9c:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:50 2026 by rpki-client