Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa
File:                     1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa (raw, json)
Hash identifier:          kDzux1Ik7TzsrUdchZ9p+xpKRJblHj+0jqV74yWrsH4=
Subject key identifier:   26:0C:9E:E0:CF:23:37:0B:B9:6B:B1:47:01:06:51:2C:FD:EC:D8:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52438030BABE6EC2FCAF6A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        76.107.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:80:30:ba:be:6e:c2:fc:af:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=c6a7af42-10e0-4c2e-a056-6bef89501e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:0d:b6:b1:da:b9:0d:8d:90:c0:db:3b:17:
                    a7:fc:23:2f:9f:0b:04:49:0d:b4:0c:64:5d:c7:eb:
                    b8:c1:e0:80:54:ae:c7:06:84:57:2b:93:7c:c0:6c:
                    ea:fb:47:5b:9e:8d:7b:d8:ba:ec:80:05:6a:83:68:
                    8e:88:a5:f6:08:17:8d:87:25:d9:ce:f4:34:65:48:
                    2b:80:13:e1:db:ec:fc:3d:c9:1b:ed:a1:e5:fd:c2:
                    e5:af:ea:0d:ad:47:77:74:c9:7b:af:aa:01:18:cf:
                    c6:77:2d:5c:ca:b6:1f:53:96:ed:16:44:38:39:82:
                    87:2f:cc:5b:0f:4e:45:a6:5c:29:79:b9:f1:1e:9f:
                    5e:df:8e:45:e0:e4:dc:5b:51:6b:55:2b:1e:7d:37:
                    ad:ca:b0:d3:71:1b:9f:5f:3d:f2:76:a9:62:97:67:
                    21:53:f1:5f:43:f1:98:70:02:13:eb:3f:ec:7e:d7:
                    f2:56:e2:f3:21:eb:4b:c3:06:a2:a4:ad:fa:98:69:
                    b5:e6:7b:c4:42:40:ae:d2:13:4c:88:4e:3e:f2:5e:
                    9e:72:f7:2d:46:69:d5:0c:94:8d:9e:21:3b:c2:84:
                    85:99:78:81:c3:d2:95:4f:87:4e:b5:a6:1b:6f:2b:
                    89:21:8e:c4:5d:28:b7:5d:04:b8:5b:ea:f0:1d:fd:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0C:9E:E0:CF:23:37:0B:B9:6B:B1:47:01:06:51:2C:FD:EC:D8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1996c1ae-4b7f-3536-a9e9-906c4b665d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.107.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ff:39:4b:c1:d9:f3:9f:e0:77:a9:70:d4:26:cb:99:e9:e2:
         75:de:2b:3a:fa:af:78:ce:b3:c0:fc:c3:ec:e3:cd:c7:36:e4:
         0e:98:12:61:8c:82:32:1f:2d:f2:8b:88:aa:02:f0:ff:94:1f:
         d4:8f:78:9c:ae:aa:71:67:00:94:1d:be:c2:17:f7:b5:5e:ed:
         9a:95:96:f8:5a:0f:a1:a0:1b:e6:71:8f:d7:42:49:4f:99:6b:
         d4:48:30:aa:3d:ea:dd:14:a6:bb:f7:e8:d7:04:89:e5:ad:21:
         42:d2:03:0c:41:0c:5f:c2:fd:08:92:6b:ef:db:17:bb:78:cb:
         0f:a9:6c:ff:3b:1b:a4:9f:21:f3:27:5a:3c:93:ff:8d:9f:8d:
         b9:93:8a:9f:07:26:42:f0:ab:9e:c4:d8:f6:45:df:df:f8:c2:
         2d:0f:b7:4d:cb:d7:f6:ee:45:c3:49:1e:6c:0a:88:0b:f3:1a:
         dc:4b:75:30:2d:94:20:42:e5:ef:b0:8e:3e:c2:2a:d9:33:5f:
         4c:17:43:34:bf:b2:4f:1a:b9:de:76:8e:05:7e:28:cb:32:db:
         0c:b1:6a:66:f7:4f:1d:99:f7:48:2b:dd:9b:73:e1:88:de:f9:
         77:01:95:06:bd:50:a0:57:2c:22:a3:2d:c1:e8:58:9e:a7:af:
         fe:45:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:35 2026 by rpki-client