Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa
File:                     2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa (raw, json)
Hash identifier:          rtvsAub6wYdMa8NJzBw51MMUzu/HVxT2aMdjlhrFtfQ=
Subject key identifier:   69:61:23:76:3C:39:43:56:F7:F9:E0:BC:33:D2:55:84:9F:3C:2D:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE7F6F01C64DE31FD0914AC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33661
IP address blocks:        96.124.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:f6:f0:1c:64:de:31:fd:09:14:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=2235089b-3349-4fb7-9a7a-0a397dabbd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:ee:c7:66:5f:64:5f:6f:a8:4e:7c:4a:2a:
                    ce:29:45:52:c1:0e:75:80:90:b9:57:0e:9d:b2:fd:
                    7c:c2:c0:ef:09:a8:f4:43:d9:a7:13:45:e3:20:de:
                    81:23:a9:d4:5e:58:94:7a:d8:48:ef:2b:c3:22:cf:
                    da:13:24:fe:8a:51:34:82:9c:66:6c:af:8e:01:cf:
                    80:27:0f:b6:47:ed:e2:75:a1:20:25:0f:06:79:0c:
                    78:9e:b2:83:b9:11:28:ab:bb:5b:09:3b:8a:89:16:
                    6e:a5:96:be:43:42:27:3f:97:52:9d:7b:7c:67:48:
                    db:98:85:d3:b2:84:6b:52:70:4d:15:57:b5:48:0c:
                    41:e4:01:83:c3:c1:66:9c:44:08:c9:7f:1c:45:e6:
                    24:88:a2:ab:f5:7d:b9:52:fb:7f:5a:a9:40:16:7e:
                    35:0c:bd:1f:bc:f5:10:e6:29:21:1a:08:fa:78:09:
                    d8:ea:93:cf:ef:fd:e1:90:b5:1c:d3:07:08:e7:4e:
                    15:71:f1:cd:b2:b0:18:79:97:a8:bf:31:51:0c:91:
                    b8:0a:4c:bd:c8:ec:76:f7:a7:46:ee:dd:e9:6c:7f:
                    ff:f5:bc:be:d4:92:54:52:af:bb:3d:a2:20:b7:08:
                    29:a2:e4:39:80:c4:d1:95:27:b1:31:b4:84:97:5b:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:61:23:76:3C:39:43:56:F7:F9:E0:BC:33:D2:55:84:9F:3C:2D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.124.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:b8:05:7f:80:bc:06:46:b3:ff:42:11:92:2d:3d:97:d3:14:
         43:d4:05:32:4b:79:64:32:ca:00:19:61:7b:9c:20:8b:36:5e:
         6d:62:8c:5e:29:c9:a1:88:2e:d2:05:9b:d9:70:41:62:9e:31:
         31:9f:9d:c1:f8:bf:39:fc:10:d8:59:58:a0:56:9a:4d:aa:17:
         6e:ce:a0:d9:37:bc:87:d8:34:e3:4a:df:f5:60:f0:9d:78:05:
         e7:fc:de:2a:a8:dc:8a:14:35:c7:15:82:8c:aa:0b:42:95:f3:
         d5:12:d8:ea:b9:f2:87:83:a0:4d:63:ba:d2:2b:34:c9:c9:44:
         67:89:e7:a4:53:db:5a:73:37:af:d0:96:d6:7f:48:d2:83:a4:
         2e:f0:1e:fb:db:69:de:34:1b:c7:e2:12:81:0e:5c:89:53:35:
         6a:b0:53:89:2b:b5:78:9e:97:88:af:4d:b4:c5:55:bd:66:27:
         78:ba:ee:c9:0c:f7:82:d7:16:37:4f:8f:9c:a5:90:a9:c2:8f:
         cc:fa:e3:ae:2d:2f:6a:3b:77:43:ef:70:53:81:d0:be:d4:81:
         96:5e:53:3b:2e:d3:da:f1:f5:35:99:89:38:e4:3a:08:a5:15:
         f3:e8:97:fd:99:ca:33:f9:f5:0e:ab:1d:20:db:ce:de:0d:32:
         14:05:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:40 2026 by rpki-client