Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa
File:                     2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa (raw, json)
Hash identifier:          ZEQRDjo2NoLJHdnHWkwe+IA26NzOQkb7WMi9qfSsCS4=
Subject key identifier:   2D:1B:14:6E:85:98:4D:B9:10:81:26:56:4C:06:08:AD:69:7F:16:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE99CF402FDC74C5705AB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     21508
IP address blocks:        71.56.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:9c:f4:02:fd:c7:4c:57:05:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=6da85bf3-4844-4cee-bfb9-bc9a4ca10697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:30:88:04:ce:dd:e0:5d:77:43:62:db:22:
                    76:6d:54:e3:a6:c1:70:dc:bb:0b:cd:f3:df:75:13:
                    f8:f2:9b:f4:3e:35:29:ba:37:d2:e3:b7:81:e0:4c:
                    ab:67:da:35:b2:d3:96:c4:5f:31:0f:39:7f:5e:ff:
                    71:70:17:f4:83:c5:46:3e:a7:86:6d:98:63:b4:da:
                    02:2a:58:ed:7c:69:4b:a4:07:ee:69:d0:1f:fc:29:
                    54:82:37:90:dd:31:10:17:51:fa:eb:37:e6:6e:92:
                    9e:55:d5:bd:cf:bc:93:eb:3d:c6:b8:6f:44:32:52:
                    2b:cf:bf:24:68:47:05:df:b4:bf:c9:50:7b:ee:a7:
                    34:ab:88:12:c5:b6:e2:0b:71:4b:f9:ce:3e:c9:20:
                    bc:6f:4f:bc:20:3e:07:4c:f2:a6:b3:3a:4f:b8:b5:
                    e2:54:cd:8f:b2:23:b5:4f:f6:75:72:24:c6:e7:c7:
                    3c:61:a0:6e:f0:ec:6a:ca:3f:54:1b:f8:b2:1e:eb:
                    58:61:c2:44:07:57:d7:11:5e:85:6c:5f:6a:c2:e5:
                    d4:2d:f9:a7:05:e1:f5:39:d7:89:b8:77:9a:ec:48:
                    a0:57:1f:19:8b:73:b5:bc:f9:55:3b:78:72:94:7d:
                    7e:46:4e:b9:6f:e4:3b:ce:17:44:81:73:a3:71:70:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:14:6E:85:98:4D:B9:10:81:26:56:4C:06:08:AD:69:7F:16:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.56.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:ad:f2:80:9d:e1:88:4b:49:ee:d0:a4:a7:9e:90:4c:ad:
         79:0c:83:4f:e2:a3:a7:af:1f:a0:03:25:63:7f:ea:f5:42:ee:
         d5:35:72:7b:6d:8d:a4:05:d5:3f:ce:26:05:c2:66:bb:9e:b6:
         94:ce:1d:24:4a:1f:10:a1:5c:52:13:e1:ef:97:f7:31:8a:38:
         d4:f4:6a:cf:45:83:3f:d2:1b:fc:8b:bf:bc:89:f0:9a:91:de:
         ef:8b:a2:df:b4:e7:05:c5:14:e8:66:22:69:cb:d2:56:97:c6:
         90:c9:90:88:2c:c8:a8:ee:11:5d:a2:ac:a9:62:46:b9:40:52:
         ee:19:9a:1f:78:b7:91:65:1d:7d:dc:48:8f:62:cf:b9:bd:c1:
         bb:14:d3:af:da:1e:37:87:d9:84:25:67:1e:19:43:f9:43:60:
         ae:57:03:75:1e:ee:78:f8:19:c8:44:0a:27:88:7a:cc:20:eb:
         a9:5d:0f:71:5d:53:c8:b1:2c:3f:9d:89:e3:ba:f0:88:85:92:
         b2:1e:e1:3c:02:a1:ba:2c:07:a2:4a:d2:cf:72:d0:d5:98:b0:
         b1:1e:4c:49:e8:3e:bb:16:a3:fd:a4:e0:a8:38:27:ba:d8:2f:
         5e:63:bf:e9:6e:62:0b:71:e5:50:5b:8b:1d:b4:b7:05:98:be:
         42:d0:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:57 2026 by rpki-client