Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2911d2d3-073e-3a3f-969f-d12bcccd5b5b.roa
File:                     2911d2d3-073e-3a3f-969f-d12bcccd5b5b.roa (raw, json)
Hash identifier:          0aApPbvAC3CR6FdId4A1IbDMpsbPHM0vTf9HAyZ9o8I=
Subject key identifier:   E5:F8:9C:21:37:C2:00:C4:FD:EA:07:2E:ED:57:D2:05:71:39:51:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA75942850BEBF96DF1F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2911d2d3-073e-3a3f-969f-d12bcccd5b5b.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        76.105.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:75:94:28:50:be:bf:96:df:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=f140dfb4-bcff-4572-b07a-696e98f7a87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:fb:74:85:8c:be:05:29:3a:1e:eb:ac:59:
                    c8:56:f4:f3:23:e1:b4:a7:32:d7:45:c4:a5:4b:03:
                    7f:1d:ef:2b:75:55:f0:9a:8f:dd:93:96:9e:f6:74:
                    c9:e8:86:d5:e0:7a:54:02:70:e5:6f:32:c8:30:1d:
                    c3:5e:10:90:7c:e8:e7:d5:f9:46:ef:ee:e7:5e:b7:
                    66:f9:d7:21:82:28:6e:ad:ff:c1:df:96:b9:1d:e1:
                    da:e1:10:44:9c:9e:26:33:8b:55:61:ae:3a:a8:d1:
                    69:7e:0d:c4:01:67:63:4c:57:db:0f:ee:76:81:2a:
                    6e:cc:a0:97:bd:b7:0b:0a:25:a5:34:c2:c4:2f:ce:
                    9e:5f:14:47:b5:43:2b:32:de:d3:40:d6:ee:0b:2b:
                    3b:c0:93:2b:d0:fb:cd:93:8c:1d:e0:69:f2:5d:40:
                    b3:7a:39:e6:9a:00:bc:e1:5a:69:a0:46:49:b9:ea:
                    eb:fa:bf:da:02:a6:03:37:8a:cb:66:1e:01:b4:be:
                    6b:90:be:62:bb:fb:f7:5e:19:3b:f5:df:e9:b2:64:
                    4c:19:da:47:bc:4f:07:ae:d8:93:e9:c8:98:21:ff:
                    d4:a0:32:18:05:09:e8:14:5d:7c:d0:8b:58:e1:ae:
                    4b:04:a5:a9:10:cb:fb:5f:eb:99:0a:d4:0b:a5:db:
                    23:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F8:9C:21:37:C2:00:C4:FD:EA:07:2E:ED:57:D2:05:71:39:51:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2911d2d3-073e-3a3f-969f-d12bcccd5b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:13:4d:34:7c:e5:83:0f:4b:a8:cc:92:f6:28:ae:12:d0:67:
         de:86:22:43:72:f6:7f:e4:e4:b4:33:5c:c0:05:21:42:e3:cd:
         3a:6e:f0:88:7d:b2:b0:9c:7f:19:5c:24:71:54:3a:b1:75:54:
         f0:e9:fd:2e:02:84:07:47:09:44:d8:f5:4d:a6:ce:a4:70:a3:
         4a:65:50:66:25:e4:0c:a6:12:e1:d7:bb:30:e0:42:46:55:80:
         65:17:92:00:59:a3:d2:87:5e:28:2e:7e:57:e3:2a:45:f2:91:
         eb:32:5a:ae:a0:d5:ed:ec:dd:8e:4b:93:79:2c:b5:6c:5a:5e:
         c0:58:d5:4d:77:33:9b:1b:74:e1:71:40:07:2d:86:65:09:7e:
         9b:ba:4c:10:c8:ea:d0:39:e3:3c:26:67:f7:b9:c7:08:e4:57:
         34:a9:77:4a:91:44:22:2e:83:3c:42:5e:30:c2:a5:f9:84:42:
         0a:a0:24:c6:8c:80:62:4d:51:b8:2f:9b:91:d9:30:63:b4:e2:
         22:32:f4:52:ea:13:d1:38:b7:1d:14:3e:53:ae:c9:a1:75:df:
         4b:b4:a0:7b:f6:0e:b1:46:10:43:d5:1d:0e:a4:85:74:4a:01:
         1c:60:dd:d5:62:4e:9d:51:0e:8b:81:60:03:88:1a:61:43:5d:
         af:1d:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:57 2026 by rpki-client