Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa
File:                     372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa (raw, json)
Hash identifier:          3lVK14RITj9jCFw7S9U6+8eGnJa/t8aRCNwIPo8GqyI=
Subject key identifier:   E6:9C:4F:22:D4:C3:F8:EA:2F:E8:45:47:63:A6:E5:63:DD:30:DB:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243B9BD679FCC5F655BA680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        76.138.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:b9:bd:67:9f:cc:5f:65:5b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=bb869c5d-8a09-4263-909f-620c295f5552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:d5:96:5a:03:32:70:c1:05:8b:07:31:53:
                    1d:c2:f0:6a:c0:99:c2:ee:73:ce:b2:7c:41:7a:59:
                    66:07:a1:20:8f:06:97:1f:e5:0a:f7:cf:57:5d:e6:
                    7a:1b:b3:df:02:09:04:33:ae:98:a6:04:44:f7:25:
                    42:10:83:91:aa:69:7e:35:b2:46:b2:ae:4c:d5:ae:
                    e5:fd:2d:78:70:5d:1c:30:51:01:de:4d:9e:5c:48:
                    7e:02:d8:b6:ef:92:f2:be:c2:f6:8f:6f:fe:5d:c3:
                    5a:4d:9d:b5:87:a0:f3:e5:50:35:8f:02:6d:6f:71:
                    e2:fa:3e:d8:6b:94:94:ca:81:81:dc:5c:7d:13:da:
                    3d:e8:43:38:89:9f:4e:e6:e9:bc:ed:8b:63:c4:a8:
                    52:68:e9:36:b1:c8:29:ac:7d:54:d8:3e:b8:3d:71:
                    b3:ec:30:2c:00:6c:b3:0c:76:87:2a:b2:00:26:25:
                    23:36:1e:01:d4:64:e7:a8:3a:6e:b1:ee:ec:35:b7:
                    47:7b:55:c7:1d:ec:85:40:d4:5b:1b:4d:0d:f8:8b:
                    12:c2:5f:57:93:ce:98:24:df:36:0d:60:2c:e7:84:
                    94:8b:98:cf:6e:99:e3:6c:61:27:68:92:6c:88:93:
                    0e:27:b0:70:1a:2c:87:09:88:79:39:b1:59:03:12:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9C:4F:22:D4:C3:F8:EA:2F:E8:45:47:63:A6:E5:63:DD:30:DB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:70:ba:fe:cc:00:d0:b1:b1:c7:c2:0b:96:16:e4:31:37:
         1d:70:67:f9:7e:02:ab:16:04:b9:e3:64:f7:2f:b8:08:8a:07:
         c2:a6:53:f7:ce:c1:65:e0:0f:e6:90:b3:36:54:af:22:c3:a4:
         df:fc:a9:07:87:ef:56:1e:9f:f9:bb:f3:a9:f5:ff:43:2b:cd:
         57:d1:fb:95:6d:df:b6:84:44:50:05:7d:cc:79:d3:09:c5:e1:
         5e:e6:45:ce:04:aa:c5:fe:0c:13:dc:2c:18:56:1a:52:7d:b7:
         80:11:24:07:e6:94:7b:41:f0:38:a6:46:07:30:bc:0a:1d:f5:
         3f:a1:a5:d5:ab:3a:95:cc:2a:4b:a7:6b:8c:2d:dd:a1:2f:50:
         f8:7c:fd:f9:eb:3d:1b:ed:70:05:a1:72:f5:f7:77:7a:57:95:
         64:61:f4:23:24:e1:af:00:b5:bb:d6:fb:85:9d:69:2f:ce:11:
         97:f1:77:81:c9:64:2d:1f:37:19:18:35:24:b7:d2:4a:1d:db:
         03:9b:dd:73:d5:07:00:68:07:c8:50:fb:52:3b:19:cf:28:e0:
         6c:b9:d8:e9:24:75:02:1b:a4:48:a3:38:09:54:a1:51:1e:ab:
         b1:2d:86:1c:d2:ff:90:df:08:a7:10:08:58:47:c8:0b:d7:52:
         33:c8:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:37 2026 by rpki-client