Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2448872c-4bf7-3684-acbb-6036aba47e76.roa
File:                     2448872c-4bf7-3684-acbb-6036aba47e76.roa (raw, json)
Hash identifier:          sMZicXuiGRaoXbZpSBRgqyCkGo8i2u8N1NYk4Hc5JqY=
Subject key identifier:   91:AC:1F:93:1B:5E:57:A5:58:B2:CC:3D:0F:9A:49:30:9A:B7:78:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86F36EA853EF0DC7DB2B20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2448872c-4bf7-3684-acbb-6036aba47e76.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        69.254.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:f3:6e:a8:53:ef:0d:c7:db:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=911caa66-544e-403c-a7ef-c151d4c2536c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:25:1f:48:76:b9:c1:a8:4e:9a:f7:74:5b:
                    e3:b4:a7:ec:0d:11:6b:aa:8b:fd:f2:81:c9:41:a9:
                    04:43:18:52:d4:16:90:15:d8:21:49:8d:b4:8c:6f:
                    b7:82:cb:0b:09:b5:99:38:21:f4:03:25:e2:f3:01:
                    bc:1e:d7:4b:46:7a:c0:9a:a3:f9:9d:39:f4:af:17:
                    71:34:f3:45:fd:3f:ec:d0:30:c3:fc:49:69:98:65:
                    6b:92:74:c2:0f:a0:5f:b6:33:10:7d:46:0f:9a:2b:
                    73:1e:8c:50:fa:3a:86:45:13:da:97:72:52:31:62:
                    db:87:9e:70:16:56:26:46:0a:52:6b:66:83:9b:d0:
                    a9:0b:5d:16:03:6b:e8:bf:48:37:2c:a5:96:4a:89:
                    c3:2d:0b:7c:9f:4d:83:bf:80:62:10:a5:51:6d:72:
                    6e:a1:6e:bf:65:09:3c:5a:14:d7:d2:9c:5e:7a:41:
                    e4:d1:62:53:2d:fd:22:85:a1:a5:22:19:8c:3f:df:
                    10:38:ae:ef:5b:58:66:bd:80:93:f9:a9:3e:86:ab:
                    9e:30:7a:32:f5:8a:15:f9:a7:a5:07:58:09:3c:05:
                    71:2a:dc:e8:24:0c:ff:7e:14:a3:67:2b:75:dd:92:
                    42:d1:55:48:a1:66:df:c6:c0:a5:93:35:ad:3e:dc:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AC:1F:93:1B:5E:57:A5:58:B2:CC:3D:0F:9A:49:30:9A:B7:78:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2448872c-4bf7-3684-acbb-6036aba47e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.254.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:98:e3:e5:08:5c:17:f6:5b:b5:c9:e9:ff:6e:35:a7:d3:ce:
         84:8f:47:8b:4e:af:f8:b2:c9:1d:c5:ee:c4:53:41:c6:ec:72:
         3a:8e:6a:7c:f1:03:87:e5:9c:6e:14:35:73:e2:ef:4b:ca:fb:
         ad:15:af:01:61:a5:a3:af:81:47:8c:ac:66:5e:7b:6f:c3:48:
         48:9a:a8:32:39:c8:2d:b1:31:61:b5:52:2c:ba:73:45:bf:84:
         91:da:5b:49:33:3a:d7:e5:d6:23:33:34:b9:39:bc:59:e0:67:
         41:2c:d4:87:4f:b2:be:36:ff:90:13:fb:9e:d8:df:3d:53:62:
         1c:a8:54:84:d2:b8:95:a1:6d:e8:61:db:78:10:0f:b2:0e:8b:
         98:f3:2a:40:ef:41:c1:0d:38:36:f4:cc:4c:0d:e0:c6:96:67:
         9b:cf:63:72:42:90:f5:47:52:a5:4b:0a:2a:e6:a8:02:80:a6:
         56:89:d3:55:a9:62:cf:83:78:83:c8:04:f1:74:f1:15:69:33:
         10:87:70:14:1a:08:c9:66:21:6d:62:f8:21:ed:e9:05:19:38:
         c4:39:ad:dd:bb:88:cf:d5:02:d9:ba:ea:da:e1:ef:7f:83:60:
         1d:3a:1f:c2:d8:93:0d:2e:5f:08:94:b0:a0:a0:4a:0f:0c:0f:
         44:eb:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:21:57 2026 by rpki-client