Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb4b508-abd1-30c7-87aa-510ec1dcb1ca.roa
File:                     4eb4b508-abd1-30c7-87aa-510ec1dcb1ca.roa (raw, json)
Hash identifier:          f5D1fF6eSINk2HiNiFiD6uzFJRh4AXt0haLNbBIQTXY=
Subject key identifier:   AE:AB:D1:C0:93:23:88:B0:EE:92:25:89:5D:B0:BD:49:58:21:6A:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D630ED5D9E563AD2CC380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb4b508-abd1-30c7-87aa-510ec1dcb1ca.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        76.117.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:63:0e:d5:d9:e5:63:ad:2c:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c1994e93-4987-471e-b658-285ab0089aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9b:50:bf:b2:02:c1:5a:ab:fc:ec:b3:22:28:
                    21:4b:bd:47:41:8e:18:80:ac:2d:17:4a:8b:7e:e6:
                    e3:f1:da:5a:08:22:53:69:d9:49:09:78:43:d8:80:
                    5d:58:0a:9d:4b:38:ad:60:1c:5f:9d:23:08:99:93:
                    39:ed:bc:4e:40:0b:9e:45:3e:d5:a4:76:a2:d3:5c:
                    4a:c2:25:41:51:73:3a:08:59:27:1c:ef:65:32:9e:
                    7f:6e:cc:b6:43:a3:1d:c4:ca:a7:c2:b2:75:47:5a:
                    a1:0d:93:ec:3f:98:96:be:8f:dd:f0:04:d7:c4:a2:
                    6b:b4:f4:62:22:e9:40:41:c6:0b:f9:c9:94:a4:7b:
                    70:99:d5:d5:f8:71:42:48:01:00:1e:51:33:4c:58:
                    ca:26:e6:54:80:f5:fe:5a:48:81:8b:9a:d7:34:eb:
                    b6:15:66:d9:0e:1f:59:16:09:44:1a:2b:44:fd:c8:
                    22:84:34:f0:a6:49:be:4f:b8:58:86:c7:86:43:c5:
                    c4:8a:5b:3f:8f:47:03:72:af:fd:40:78:5f:3f:01:
                    0f:e3:8c:9f:c8:27:af:9f:df:29:1c:22:d5:42:a7:
                    8d:fa:fc:e5:fd:83:56:dc:b0:94:99:88:6c:07:83:
                    d1:1f:c6:4b:f6:8c:2b:c1:07:60:e5:a6:cb:52:d0:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AB:D1:C0:93:23:88:B0:EE:92:25:89:5D:B0:BD:49:58:21:6A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb4b508-abd1-30c7-87aa-510ec1dcb1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.117.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:49:f4:67:79:57:e8:32:67:65:94:2e:5e:19:65:e5:01:
         fe:24:35:bb:97:ad:54:02:ba:26:01:a5:fa:d2:f9:5d:39:72:
         9b:32:c8:c5:db:8d:de:1c:23:03:a9:ed:f5:ab:4c:d0:e1:30:
         0d:d1:b1:ac:89:a6:5f:2d:90:c1:92:24:78:11:6a:28:f0:98:
         7c:ad:c0:45:81:d9:02:ed:ef:81:e3:3b:cc:86:79:0d:26:6d:
         cb:89:56:52:9c:96:2e:86:40:3e:b5:e8:ca:06:a6:1a:48:84:
         65:0d:fe:71:32:8a:53:68:e6:ba:0f:ac:2d:53:7d:26:45:07:
         9a:bd:82:8f:fc:05:c7:61:6a:0a:f1:63:39:18:c8:ce:69:62:
         c8:5f:3e:7a:5f:94:0f:72:50:88:89:aa:35:45:3c:7f:b0:b0:
         b0:39:23:2f:24:cc:a4:9e:17:4d:49:58:f7:8c:4f:71:b1:f0:
         de:48:0d:0c:5a:4f:08:b2:92:9a:89:6f:e6:98:2a:86:3f:81:
         d7:2c:0e:75:58:66:77:c4:1a:29:dd:24:2c:8a:03:5a:7f:ee:
         84:04:5a:1d:2b:6f:9f:81:c4:fc:35:4f:29:45:e6:55:89:d0:
         d4:0a:f0:da:ce:89:c1:8a:91:a8:22:0c:ed:9e:df:dc:0e:6c:
         76:f5:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:41:18 2026 by rpki-client