Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d932733-d260-3f96-890c-c36f3b17c24d.roa
File:                     4d932733-d260-3f96-890c-c36f3b17c24d.roa (raw, json)
Hash identifier:          wEXEtGYRCTKn7wV/50AJFufQz6m0FO0hqn2m2PjIWDk=
Subject key identifier:   16:74:75:C1:D2:62:22:7E:4C:B4:06:17:FA:B5:A2:37:93:84:CF:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA1BE0706A01AD4966F8A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d932733-d260-3f96-890c-c36f3b17c24d.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        66.41.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:1b:e0:70:6a:01:ad:49:66:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=b40fb02a-0785-4de9-ac17-e3854d89ea42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:fe:c8:10:b9:ed:9b:7c:32:eb:51:01:f4:
                    5b:93:06:f4:1f:13:e7:fc:65:91:11:04:68:c2:ad:
                    17:70:61:4d:c1:8f:76:a4:58:ef:ef:b9:a8:6d:36:
                    0d:d0:72:5b:66:69:48:85:b1:e4:06:68:2a:81:63:
                    4d:22:ae:2a:2b:be:3b:ff:15:03:29:47:f1:20:31:
                    c4:ff:aa:3e:81:d2:66:74:cb:38:6f:3f:44:8d:2a:
                    e1:4a:41:63:c7:7d:8c:b8:21:3b:66:4e:40:0f:74:
                    ec:44:10:1b:d9:c5:bf:21:e4:46:5c:1c:17:d2:f4:
                    d0:17:80:56:07:3b:ef:82:07:44:0b:c7:b6:87:9d:
                    cb:b5:33:02:97:4a:c7:83:c4:48:76:b8:93:ea:29:
                    c4:7c:cf:c1:46:32:ca:df:5a:ac:e9:0f:68:5f:db:
                    9e:22:4e:2b:a8:85:fe:4f:b3:ed:99:66:c9:dc:5b:
                    cf:58:fa:f6:26:53:ea:53:d6:e7:50:62:7a:50:a6:
                    fe:09:54:64:3f:e7:ac:c0:5a:35:6a:05:65:16:66:
                    ff:54:c2:1b:a1:cc:90:8c:ad:b7:76:b8:a8:ad:99:
                    f0:f4:40:fe:a0:86:b5:4d:e3:fb:64:de:37:e0:66:
                    6d:82:62:93:83:9b:98:4a:36:d3:dd:ec:d7:a0:58:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:75:C1:D2:62:22:7E:4C:B4:06:17:FA:B5:A2:37:93:84:CF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d932733-d260-3f96-890c-c36f3b17c24d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:4d:1d:5d:29:1d:72:6e:48:7f:d5:81:68:06:a5:c0:ec:
         bb:50:4f:51:cb:d7:6d:16:43:40:e8:75:45:bb:f8:ba:bb:00:
         6c:83:c1:d8:b0:b3:06:be:fb:8e:7b:98:73:17:a0:1e:7d:0a:
         5b:b5:d8:bc:ac:1d:c4:84:25:df:62:a1:b6:72:d5:30:d4:23:
         ba:f2:20:07:2e:73:40:fd:c1:d0:93:ca:b4:25:ca:d8:60:77:
         0e:df:03:ae:f1:d1:01:6b:6f:67:6a:94:1c:48:40:63:df:44:
         16:c8:09:c7:f0:ea:15:c3:fe:68:29:99:91:f2:2e:f9:2d:c4:
         f7:70:bd:20:31:03:83:72:a7:33:db:9d:2b:19:46:d8:d7:eb:
         7c:ba:0e:a5:51:dd:4a:52:3f:ce:19:d8:6b:6c:a5:5e:05:ee:
         29:30:46:35:55:59:9a:eb:79:c9:75:38:0d:f9:7f:d2:5f:7d:
         b1:1d:b3:a2:95:d2:38:19:b0:18:48:61:ec:62:58:19:6c:56:
         68:26:16:13:f5:29:0a:9e:1f:0d:3f:52:8e:3c:a8:44:3d:f5:
         56:57:f5:e0:56:1c:ae:1b:a8:92:cc:bd:6d:66:ee:ae:0b:f1:
         ce:a9:a0:e1:5a:a3:ac:47:35:cd:93:ce:c3:fa:03:17:55:27:
         11:82:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:19 2026 by rpki-client