Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f01548c-582d-372e-8065-1edb01a524fa.roa
File:                     2f01548c-582d-372e-8065-1edb01a524fa.roa (raw, json)
Hash identifier:          h+xsuMzybhE7BdZqrdQ4nWCQCMWsp8Jjy8JIgsL34qU=
Subject key identifier:   A4:61:6D:59:88:A1:43:46:0F:74:CB:BC:73:FD:42:BF:9B:32:07:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB33EC85E185AC11C07A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f01548c-582d-372e-8065-1edb01a524fa.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33668
IP address blocks:        76.112.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:33:ec:85:e1:85:ac:11:c0:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=492f4e2c-98a2-4f2e-9ca3-4973dd48ba03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:a0:e4:2b:84:90:b0:33:78:e5:5a:04:81:
                    94:8f:be:5f:7e:8f:20:39:7d:ad:33:b2:6d:95:21:
                    10:ea:ef:1b:29:2d:5a:b4:e9:d1:28:5a:ce:5c:0c:
                    b3:03:49:f3:df:e0:4a:30:88:d1:61:e3:64:72:8d:
                    d9:e1:d6:e9:e8:ba:fe:56:86:ec:93:d2:24:6b:3c:
                    84:6a:78:8e:06:cf:ce:1d:ce:7c:a0:9e:de:ec:56:
                    2e:24:69:41:6d:b4:e4:81:61:78:d6:10:fb:8b:52:
                    18:25:4d:c6:0b:4f:b1:ee:41:63:99:30:e3:8e:96:
                    b3:df:42:7f:b2:b6:6b:67:e9:db:16:f4:50:19:f7:
                    52:45:b6:00:a3:1c:e8:dd:09:fc:ea:39:5b:f6:de:
                    00:5b:fb:22:e1:ee:01:62:f6:5e:03:33:d0:3b:82:
                    e5:02:8c:8f:e8:cd:8b:42:7a:5d:ef:3e:30:a4:9a:
                    07:d2:d3:7d:4b:f9:18:2b:28:10:4f:50:d0:54:92:
                    87:5f:1e:05:31:98:7c:83:1c:75:36:46:2a:6c:5b:
                    b5:0d:15:c6:64:45:9d:83:70:67:3e:38:78:b0:5d:
                    1b:8b:af:f2:fa:3d:d0:b3:b6:76:47:95:c9:0d:39:
                    9e:c2:bd:65:48:76:f5:5b:b1:d8:cf:7c:7a:a6:76:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:61:6D:59:88:A1:43:46:0F:74:CB:BC:73:FD:42:BF:9B:32:07:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f01548c-582d-372e-8065-1edb01a524fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.112.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:a8:9c:b6:bd:e8:f3:a1:e4:a4:b5:f7:29:0e:2b:c4:ca:
         13:55:9a:4b:9f:37:42:56:4d:98:00:30:55:a6:2b:1b:80:c8:
         a2:6e:bc:16:c1:02:d8:3c:6e:69:28:f0:6e:84:d7:3a:99:96:
         28:a9:6f:b0:54:02:18:85:00:f1:0a:6e:9b:ba:74:c6:6a:c6:
         ba:48:e6:6c:6d:c2:cd:a4:a1:24:34:80:7d:9c:a7:03:af:cd:
         d4:1a:0d:a9:0b:21:40:9a:29:7b:49:17:0e:a5:dc:92:2a:c2:
         b1:a8:f0:d2:37:d5:39:f2:79:42:d8:a2:de:b6:f3:d9:60:1f:
         b3:18:73:af:d9:b1:d6:13:0c:c9:f0:d0:e4:4b:e1:25:b4:32:
         10:19:62:a5:47:cd:67:90:6e:7d:8b:70:4e:02:e4:f9:32:05:
         d3:b5:b7:03:ed:54:4e:d6:41:ac:4f:72:4e:48:24:3c:d2:35:
         15:a2:a8:92:76:ef:43:c3:bf:2d:d8:65:eb:f8:be:53:98:6f:
         81:d0:01:55:cc:1b:ea:68:0f:68:40:e4:d9:70:65:42:83:4d:
         96:5b:a4:cb:9a:11:1b:af:df:a3:36:92:f2:bd:63:39:c2:e8:
         29:8e:7a:cd:19:36:79:09:e0:64:3d:16:ae:32:db:1e:3e:f8:
         1c:fc:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:20:55 2026 by rpki-client