Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa
File:                     28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa (raw, json)
Hash identifier:          uCIlH7mWZvsYx3dWVSEZnM2XeTwaRig6AJE6UxKabho=
Subject key identifier:   D9:BA:D0:32:E9:35:84:D9:B5:46:11:3E:8C:99:B7:4D:F9:EC:29:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE981AB0EB9C20B952B8400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7016
IP address blocks:        174.49.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:81:ab:0e:b9:c2:0b:95:2b:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=045d4a7e-6923-4c7d-8e9e-0cac2a622eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:93:90:e5:3a:d9:57:81:8b:23:5f:35:1a:ec:
                    d2:a4:52:80:17:3f:9b:b6:40:ff:78:c1:8c:61:0c:
                    d6:30:b3:0c:54:c0:e9:19:b4:23:e6:bb:cc:0c:b7:
                    63:a3:27:34:c6:1a:42:40:b5:87:79:d2:7b:b0:a1:
                    d1:21:b8:b0:a8:f6:98:70:8c:1c:0b:a9:21:81:bd:
                    3b:36:7b:18:57:4c:04:21:cf:a7:b4:04:84:62:7d:
                    6c:8f:da:fd:a8:12:7f:07:13:59:c5:6f:cc:c7:d5:
                    32:bc:9d:9e:a9:82:3b:f1:49:42:36:32:68:3b:a2:
                    e3:90:dc:e0:99:3e:88:57:7f:46:d1:e1:33:db:89:
                    47:99:e7:69:e9:4c:1e:b0:0c:4d:63:c0:ad:bd:3c:
                    09:3f:41:77:59:66:55:3b:d0:f2:ae:85:cf:f7:bf:
                    9c:2c:9a:28:02:ab:04:bf:97:8e:da:8f:00:16:fb:
                    84:fa:c2:be:90:b9:b3:c2:a9:87:6d:1c:7e:64:4e:
                    80:b0:c9:a8:66:97:22:7b:ad:64:23:d4:2a:b6:d8:
                    97:2f:84:88:7f:89:5e:c0:69:cb:2b:a5:49:bc:00:
                    2b:d6:30:9c:2d:ef:e7:32:54:4e:85:9f:f2:ae:c1:
                    62:ba:db:5b:fd:71:46:da:41:02:43:77:69:7f:ff:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BA:D0:32:E9:35:84:D9:B5:46:11:3E:8C:99:B7:4D:F9:EC:29:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28d0f2e3-6781-3d7d-890f-b9f4d47169b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.49.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:4c:c2:14:6f:1a:7e:e6:7a:ba:7d:f9:e3:9c:a3:53:67:42:
         b0:0d:c3:6a:3c:0a:f3:bd:f3:ad:fe:76:20:b6:0e:e6:08:e6:
         8b:aa:15:37:03:71:10:6b:cb:40:d1:4c:56:d6:fc:93:b5:66:
         69:1c:04:11:c2:7a:1b:c9:d6:38:ba:12:7a:eb:3b:db:56:46:
         3d:c6:68:24:5c:4d:13:70:6a:16:3e:57:19:ed:42:de:b5:da:
         98:64:eb:13:7b:ec:c9:d9:f6:82:71:ac:67:c6:61:91:e1:4b:
         3d:84:58:a4:23:a7:95:bf:3d:aa:77:a2:6b:18:ff:5a:04:ab:
         04:e1:49:d5:dd:37:fe:24:75:93:a6:44:4a:9c:e5:ad:15:18:
         b4:4c:13:08:7e:c0:7f:c6:44:1c:dc:3b:6c:c4:bb:a5:49:10:
         49:50:70:d7:27:9e:ec:f0:e0:63:48:c9:11:72:a3:fe:5c:18:
         b3:a6:39:04:41:d8:21:28:c6:34:ee:a0:d0:f2:ca:84:74:a6:
         6d:9a:a1:26:d4:4b:15:c5:1a:1d:cb:c9:de:92:92:03:49:ff:
         75:8c:4d:51:65:65:07:1f:df:dc:49:74:d3:42:d3:ed:35:42:
         df:bc:32:66:78:56:5e:8e:b9:48:19:f6:e7:25:bb:5e:b8:e5:
         d0:3f:0f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:42 2026 by rpki-client