Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439c78a9-d46e-3763-9015-de203a8aa6a2.roa
File:                     439c78a9-d46e-3763-9015-de203a8aa6a2.roa (raw, json)
Hash identifier:          8xgNmJmDOEAYY8kzu09x5furwzE6Trpw8R8kXhizIgY=
Subject key identifier:   80:88:E4:D5:5A:05:A6:65:45:1F:E7:D3:8C:49:B0:C9:09:0E:FB:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE95D5748E6C62EE2A6AFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439c78a9-d46e-3763-9015-de203a8aa6a2.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        76.114.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:5d:57:48:e6:c6:2e:e2:a6:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=1f52d32d-f2d2-4190-8c01-6f285f0db1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:2c:5a:f0:a7:14:3a:87:b7:f8:6b:17:e5:
                    f5:56:f7:e0:0d:d1:1f:90:f8:64:78:c2:9b:e5:61:
                    80:44:2d:6a:9c:d3:6e:03:9e:16:f7:e7:ce:82:2e:
                    5d:9f:45:7b:7f:c3:51:50:53:3a:61:80:b7:fb:a3:
                    79:ef:a8:79:0c:c3:55:99:7a:a3:fd:90:ea:9e:e5:
                    a2:83:a0:a1:14:46:d2:9b:8b:36:7c:f5:c4:61:b5:
                    45:9d:9a:2e:43:93:e3:3b:cf:d0:98:d6:be:41:6c:
                    53:58:52:1e:a4:d0:2c:b2:ae:43:c1:b1:93:a5:8d:
                    86:fa:5b:1c:10:60:56:dd:9d:5a:1f:11:9f:1e:7d:
                    f5:b4:12:df:6d:c7:17:a1:26:14:39:ef:ad:19:c9:
                    25:3f:40:e4:87:9b:86:20:dd:8a:43:5e:23:cd:f3:
                    ec:22:5d:2a:36:3b:32:ad:83:ec:ba:43:c9:5f:e8:
                    58:54:f3:1c:05:94:20:eb:9c:01:06:61:63:a1:ac:
                    5c:32:4c:68:c6:8d:24:09:72:aa:2d:00:ef:f0:bb:
                    72:51:f1:b8:87:25:5a:0b:08:ad:68:19:e7:c7:37:
                    46:54:bb:da:d8:07:3c:43:aa:c9:89:4a:67:eb:dd:
                    64:ad:3c:15:17:bc:c8:9a:df:41:8b:28:3b:f9:97:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:88:E4:D5:5A:05:A6:65:45:1F:E7:D3:8C:49:B0:C9:09:0E:FB:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439c78a9-d46e-3763-9015-de203a8aa6a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.114.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:69:43:10:b9:16:74:b0:ef:a3:02:3c:e7:a9:a0:75:f6:
         0a:90:b3:c7:87:c6:ec:5b:84:07:65:9c:38:2b:3c:fb:09:b7:
         39:42:7c:03:ae:cc:32:af:78:a9:41:b7:2c:43:bf:a0:1d:a2:
         04:93:64:b1:a1:30:e3:95:03:b5:f0:1e:49:76:bd:64:d9:13:
         fe:02:1f:6f:da:74:52:39:aa:ea:4b:ad:a9:e5:00:1c:b0:3a:
         cb:df:66:e5:c5:92:1f:23:a0:b1:21:8a:79:80:0c:9c:3a:7a:
         61:93:09:7d:40:6e:7d:dd:fa:94:e2:74:39:17:37:82:22:f3:
         c2:1b:a0:e6:e8:dd:56:7d:10:b2:b3:90:23:28:bb:a6:c3:11:
         34:5a:57:d6:ca:f6:16:d7:56:8b:c6:e7:06:de:cb:06:d5:fc:
         8b:ea:b1:05:71:6f:bb:83:56:b4:48:d0:92:58:f1:87:18:74:
         7d:33:a7:3c:93:af:61:95:72:2f:d0:4e:d8:b2:8a:14:20:5c:
         81:0a:71:cc:24:fc:00:4a:d7:c7:29:60:8a:ca:da:8a:ec:46:
         de:18:4f:83:bf:59:e8:4c:a3:0a:97:56:94:69:75:3d:10:c1:
         14:78:f6:3d:f5:97:0c:fa:ad:21:e5:82:b0:27:2c:e6:6e:30:
         12:53:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:08 2026 by rpki-client