Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ef217ec-d58c-3e20-94f1-0a92d66069e5.roa
File:                     2ef217ec-d58c-3e20-94f1-0a92d66069e5.roa (raw, json)
Hash identifier:          AZk2WVe2cd3PE4JQKJALCelIAIQImq/L5gkV99qy8aw=
Subject key identifier:   1F:F9:89:B0:88:A0:7C:DC:B6:87:1B:E3:FA:87:A7:B0:7B:3F:41:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA7459FA9690B592B290C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ef217ec-d58c-3e20-94f1-0a92d66069e5.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33657
IP address blocks:        96.115.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:74:59:fa:96:90:b5:92:b2:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=8722df70-cd8f-4296-a15e-b1f0dc8a3a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:1c:97:ef:26:8a:8d:fa:71:bd:e5:24:2f:
                    26:5a:40:1e:d6:f8:79:2a:6e:a1:1e:5d:03:5d:4a:
                    52:b2:68:6c:8e:22:7e:1f:27:1a:d7:74:bd:9a:18:
                    9f:47:de:78:b3:c7:cb:8d:99:c1:b3:f0:8b:08:7c:
                    bb:fa:d5:55:90:1b:ff:bc:1a:3a:7e:29:ec:a6:7a:
                    61:e7:e8:37:31:60:cb:74:d7:0b:70:76:ae:4e:ed:
                    c3:e9:50:39:45:98:33:87:7a:e4:d9:a3:23:23:60:
                    9a:0e:e5:9a:41:94:84:d3:9c:18:a4:3a:b9:0b:c0:
                    6a:c0:fd:1c:0b:e5:ff:27:51:a2:40:21:45:21:99:
                    e9:14:f6:c7:e8:38:e0:03:dd:4f:7a:ea:93:31:d2:
                    33:9d:50:f1:e2:3a:15:38:26:0e:ae:42:cc:9f:cd:
                    e4:34:39:bd:f9:80:22:44:60:3f:ac:1b:b6:14:91:
                    44:da:88:31:d4:29:0d:53:36:87:e4:be:33:f8:b6:
                    50:11:f2:45:07:2b:6b:47:5b:91:3b:b7:7b:ee:19:
                    f1:9d:94:25:aa:3c:7f:c5:ef:b5:b9:f3:88:1c:19:
                    0c:a2:b6:13:a7:aa:6b:6e:61:e7:cc:ff:e2:ad:f6:
                    df:0d:35:a5:11:e1:72:35:73:11:12:92:7e:10:b5:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F9:89:B0:88:A0:7C:DC:B6:87:1B:E3:FA:87:A7:B0:7B:3F:41:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ef217ec-d58c-3e20-94f1-0a92d66069e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.115.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:8a:bd:11:91:10:c4:49:b6:e1:de:31:0d:dd:70:8c:55:4e:
         40:f3:99:5c:c0:97:15:85:1d:aa:f1:1e:f8:cc:8b:88:7c:25:
         35:85:cc:1a:51:37:8b:0a:4e:1b:9d:ae:79:78:3c:4c:a4:9d:
         c6:e9:78:52:67:4f:5b:4a:f7:b5:7c:9c:33:d4:71:b8:50:98:
         b7:b6:03:4e:38:ce:7c:a8:ac:b6:8c:00:9f:d8:7a:8a:12:32:
         06:d3:10:04:4e:a5:75:82:70:54:a1:2c:e6:c0:46:35:7c:88:
         53:c4:92:0a:20:4b:24:1f:ec:d5:6d:e8:fb:22:a7:a9:ff:44:
         41:2a:21:fe:83:b2:bf:84:09:ec:50:b7:3d:a4:96:16:32:2b:
         f0:69:69:7f:8d:24:e1:d3:40:73:b0:60:23:d1:c1:40:a8:3d:
         9e:76:eb:d5:54:c0:fd:f6:6d:30:59:5f:f0:4e:fc:b8:db:18:
         a5:3c:21:47:1a:73:f3:05:9b:ff:3c:2d:f2:1f:ff:4d:1e:70:
         51:16:ec:10:ee:9a:9d:21:5b:ce:d0:b8:fc:17:3a:b5:31:82:
         c2:41:f3:30:08:da:60:2d:1d:92:32:4f:b4:50:c5:fd:dd:10:
         db:29:ef:3b:ca:50:cc:54:35:09:b9:a3:38:23:11:eb:ad:89:
         fd:c5:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:35 2026 by rpki-client