Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399a8628-dd72-3521-8904-bbadec450fbe.roa
File:                     399a8628-dd72-3521-8904-bbadec450fbe.roa (raw, json)
Hash identifier:          rdxNiD2QsPS1Un+gEvmrvoCxWld3FrkGs8TH66aL2LY=
Subject key identifier:   D8:37:EB:2A:76:F4:82:DF:0D:40:B4:BF:1A:56:25:A0:23:FA:5B:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100358486B9E8F2AA512300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399a8628-dd72-3521-8904-bbadec450fbe.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        76.145.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:35:84:86:b9:e8:f2:aa:51:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=6612efc9-372a-47ad-bd07-b310614f7645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5c:f5:37:71:3f:a2:56:ba:3e:fe:e8:45:10:
                    6c:b0:e2:2e:b5:9d:f3:12:ad:db:ac:19:74:34:83:
                    1a:b7:67:81:8d:75:7c:85:b0:82:8f:0a:14:b1:32:
                    8b:cd:90:2b:33:aa:e2:5c:96:b0:22:52:68:69:33:
                    18:72:58:35:c0:7f:7c:18:06:7f:55:5a:be:70:21:
                    1d:2b:2c:bf:56:26:94:a2:91:5c:37:84:77:0a:af:
                    38:6a:aa:e9:ab:82:dc:9b:aa:5c:a9:95:f1:c6:7e:
                    75:98:30:15:c0:83:df:75:03:e2:19:1c:cc:94:6a:
                    d5:c8:21:5a:cb:44:75:2a:28:61:91:5b:cc:7a:9b:
                    54:3f:af:04:33:8f:b1:f6:81:5a:80:71:5c:e4:de:
                    10:c2:bb:54:4a:47:76:90:2e:f6:ff:1f:11:10:e8:
                    72:bd:fb:a3:d7:af:3f:4e:66:c7:46:4e:92:fd:20:
                    5d:eb:94:66:5e:b0:e5:53:58:3f:cd:64:17:3d:d7:
                    8b:e7:31:20:5d:13:7e:b2:0c:f0:29:fc:81:cd:ba:
                    43:48:0c:17:ce:fd:8c:08:05:94:2a:50:c2:c8:35:
                    1b:4b:8b:ea:da:92:f4:43:87:d9:e7:21:20:cd:ea:
                    69:cb:cd:78:f1:a6:5d:66:ae:ff:a4:3b:bf:1d:52:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:37:EB:2A:76:F4:82:DF:0D:40:B4:BF:1A:56:25:A0:23:FA:5B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399a8628-dd72-3521-8904-bbadec450fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.145.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ab:a0:a9:11:c5:b2:1d:06:83:2a:83:ec:47:fa:05:92:51:
         ee:9e:57:94:ac:c4:41:dc:e6:59:78:9a:8e:b4:f2:55:4b:ce:
         38:d6:a1:29:e8:42:71:ff:7b:ca:c2:e6:c3:9b:c3:c3:61:0e:
         26:d1:f4:66:ac:d7:72:2a:49:30:93:9e:4e:40:ee:73:4d:cc:
         56:6c:1b:8c:90:20:e5:cb:e7:ce:e3:98:cd:d0:0f:4d:4a:34:
         64:cc:d6:3f:63:f1:f9:3b:be:44:08:7f:15:20:b1:78:36:fd:
         8e:b4:3b:a9:cc:cb:4d:99:a3:fd:ab:ea:36:1a:6a:1a:c6:3e:
         a1:5f:22:c5:cc:19:02:05:17:77:22:a1:92:78:4e:8f:25:b4:
         20:49:15:ba:2b:10:e5:2f:9c:d4:61:3f:f7:03:c4:69:6e:fb:
         9a:10:c6:db:8d:04:d8:49:39:7b:3d:96:f8:d6:87:46:d3:fc:
         53:bb:0f:ad:9a:e6:42:d0:72:62:cf:71:61:7d:dc:e1:6d:bc:
         47:33:55:c7:c8:1c:0d:3f:d3:e7:5c:fe:81:94:f9:d7:7a:e6:
         56:0c:25:ec:c9:5a:39:2b:e4:12:6b:34:e6:68:0d:52:b2:01:
         06:00:42:f0:f9:a7:c7:56:fe:bb:15:26:10:35:cb:8b:2b:ea:
         4a:e7:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:36 2026 by rpki-client