Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6adf98ef-d93b-3f19-90e9-6dbca8dcadc5.roa
File:                     6adf98ef-d93b-3f19-90e9-6dbca8dcadc5.roa (raw, json)
Hash identifier:          W/WWF3X0E0b7lT2O5/GXGfIYTcJoGUdCffK1PpUcVVI=
Subject key identifier:   CD:72:E9:8F:33:4F:4D:DA:65:D9:5D:80:39:EE:89:90:7B:B1:DF:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58FCEFD184C46E0E656300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6adf98ef-d93b-3f19-90e9-6dbca8dcadc5.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        76.102.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:fc:ef:d1:84:c4:6e:0e:65:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=f4c8f740-e7f7-4cdb-a2e0-c9df8e61304f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:a7:90:a7:5b:7f:1b:56:19:93:c0:66:e1:
                    af:9f:67:fc:c3:16:8e:32:65:ac:46:7f:97:cb:95:
                    48:8b:d9:39:0d:af:50:a3:8d:ae:ae:3c:ba:86:e3:
                    23:a2:ac:11:f1:f2:2d:d9:6b:ed:35:4a:48:5c:c6:
                    9b:1a:7d:ce:79:8a:ef:d4:cf:9d:a5:3c:4d:f5:0f:
                    5c:fd:ef:e2:71:5a:99:8a:5b:5f:9c:5b:ad:e6:ee:
                    5f:b9:16:5d:49:36:7e:a1:64:58:3e:cb:ae:b9:f9:
                    7f:13:54:1f:9e:04:55:6d:90:f4:0a:1a:ae:7c:4e:
                    00:59:fa:e0:ec:3d:18:22:20:f6:02:16:13:8c:71:
                    8b:cb:54:3c:b9:3d:54:3a:08:ba:96:b0:3c:7c:24:
                    d0:95:c9:f5:c2:36:dc:90:76:cf:84:9e:3e:08:d8:
                    8b:67:f8:e7:63:b0:98:98:c4:8a:8a:f7:6e:ec:7b:
                    22:d8:7b:97:40:98:e1:06:b1:b0:bd:4c:ba:9e:ce:
                    e5:1f:eb:47:5f:c6:26:f4:84:c6:c8:00:94:70:0d:
                    32:95:0c:46:4e:1b:61:58:8d:f9:7f:31:be:17:ef:
                    e2:e4:33:79:de:df:ef:42:90:f9:51:31:ef:a8:88:
                    6a:69:bb:bb:7d:55:1d:c9:70:7b:60:56:e4:37:52:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:72:E9:8F:33:4F:4D:DA:65:D9:5D:80:39:EE:89:90:7B:B1:DF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6adf98ef-d93b-3f19-90e9-6dbca8dcadc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ec:5f:69:97:67:3a:54:d2:65:02:f4:b9:40:31:a8:b1:55:
         24:d7:82:f7:36:b5:e4:e4:cc:91:8f:7c:00:f1:e7:21:38:08:
         25:d6:6c:53:b7:7c:e4:79:09:cc:ef:44:f3:75:ab:d4:8e:03:
         2e:04:1e:c5:22:74:24:05:e5:eb:03:45:69:00:84:2a:00:77:
         5a:35:7c:f0:ff:3a:9b:12:5e:7d:0f:68:73:45:4a:96:a0:8e:
         ef:d2:6d:8e:c2:92:f2:43:2d:f0:eb:f2:fc:50:c9:b0:0e:b2:
         6b:e7:b5:81:65:e8:06:42:0f:69:12:c9:96:a3:65:a9:3d:92:
         c0:bb:20:6a:b8:f1:2f:7b:69:17:fe:50:40:ba:1e:f4:e3:b8:
         28:53:ef:1d:ec:00:5b:74:dc:50:70:f7:da:c6:3b:6b:72:e3:
         a2:f6:8a:e8:88:52:b7:c3:cf:d5:ba:09:d9:eb:cf:3b:5b:ea:
         99:89:01:e6:67:6d:d4:31:ed:cb:93:43:db:e0:9b:92:5c:66:
         ce:1b:28:d9:54:ec:dc:8a:a0:16:ee:31:0f:1d:4b:96:a7:d2:
         da:e4:bc:fc:46:2b:db:42:77:d8:fe:a7:af:dd:67:13:00:c0:
         6d:5a:4e:4d:7b:0a:f4:09:df:02:04:57:7e:2c:29:25:cd:3e:
         ea:d7:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:31:29 2026 by rpki-client