Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6743c11a-ed5f-322d-8425-e2953b9f8954.roa
File:                     6743c11a-ed5f-322d-8425-e2953b9f8954.roa (raw, json)
Hash identifier:          m81w4Ts+oDHF2u8P+zlFqnFRNtj/M1ohEeM8HATaZDA=
Subject key identifier:   FC:EC:44:5D:14:62:92:72:B2:D3:56:68:50:21:60:BF:AB:23:9F:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8F323D74E9B1F687AB800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6743c11a-ed5f-322d-8425-e2953b9f8954.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33657
IP address blocks:        76.114.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:f3:23:d7:4e:9b:1f:68:7a:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=6161dd72-ae42-48f8-879c-b5d6822f19e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:f4:7e:84:11:35:93:af:87:f4:d1:8c:22:
                    a2:27:e5:a8:a7:86:81:ca:eb:45:82:cc:86:d1:57:
                    13:c1:3d:e0:d5:db:2d:95:b3:80:58:8b:d2:2c:fc:
                    04:fb:89:3a:38:cc:26:7d:e1:76:15:cb:4d:46:b9:
                    28:0b:e8:15:4b:4e:4b:9e:69:7e:51:c5:bc:a6:e4:
                    36:d5:40:44:3f:84:99:4c:cb:b0:63:b7:05:11:55:
                    a8:07:c1:ea:66:a3:f9:6d:22:38:88:66:ff:83:8e:
                    18:59:26:33:96:fa:46:b0:b8:de:b4:8d:89:0d:90:
                    a1:4a:e7:dc:70:d3:f8:bc:c3:c0:80:5f:ca:f2:4c:
                    3c:40:b1:3c:cf:29:f5:07:99:7b:f8:4b:e5:33:25:
                    69:93:57:f0:3e:a7:6b:d4:11:d0:70:a2:3c:7e:99:
                    80:80:09:c7:27:28:22:16:dd:c3:47:e4:3b:7b:4e:
                    cf:7c:8d:63:29:86:92:e4:bf:6e:7f:b5:8c:d6:a7:
                    ae:88:c3:a4:71:44:8f:f8:86:b9:05:c1:41:2b:76:
                    a3:61:a4:ec:c6:e3:02:7d:64:0e:cc:43:c5:e0:73:
                    0f:b1:1f:e4:b3:e4:5d:fd:76:3f:fd:d7:b7:c1:17:
                    b5:93:35:b2:43:54:29:87:6b:be:32:f4:ef:31:1f:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:44:5D:14:62:92:72:B2:D3:56:68:50:21:60:BF:AB:23:9F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6743c11a-ed5f-322d-8425-e2953b9f8954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.114.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:c2:91:e2:9e:2a:9e:fa:74:ac:fd:d4:73:1d:63:c7:64:
         eb:eb:1f:dc:67:bd:bd:4e:bb:5c:7b:cb:0b:07:75:5f:07:84:
         83:9b:11:76:6f:0f:df:c0:da:3c:53:7e:05:37:85:ac:13:09:
         53:0f:02:f9:40:55:eb:fd:fd:5f:ca:df:6d:9b:01:31:f1:b9:
         87:7a:48:9a:98:25:13:60:c7:3b:7d:c6:52:41:db:49:2f:ca:
         3b:e9:2d:d9:56:22:18:ea:96:24:c0:5f:56:d8:a5:bd:fc:fd:
         25:2f:cb:7a:a8:41:22:98:c3:f8:8b:2b:7c:53:fe:87:1f:ac:
         96:8d:f4:33:c6:4a:19:53:f8:cf:d5:3e:71:f4:31:4e:e5:09:
         3c:9b:b4:5e:99:6d:a6:a6:31:a7:7c:e8:33:8a:64:54:2e:14:
         17:97:4a:f3:91:58:a4:b7:8c:4d:97:50:89:67:91:2b:48:5f:
         3a:36:e8:85:f6:58:ad:7d:7f:16:19:48:ea:41:32:4d:83:da:
         3e:77:32:58:8d:63:24:ce:39:0a:6b:26:a8:32:19:23:e8:86:
         ff:3f:1e:96:a7:05:82:c4:60:68:31:30:80:f5:89:67:15:db:
         67:11:13:36:7e:68:3d:b3:5c:d5:0e:7b:d9:c9:a9:40:ec:c2:
         fe:c3:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:37:17 2026 by rpki-client