Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fcff73f-f080-3f66-8625-6903429fbbd4.roa
File:                     6fcff73f-f080-3f66-8625-6903429fbbd4.roa (raw, json)
Hash identifier:          zIyVwFCl4CGqoaM6+6ekmJqHG9cwnMOLh4QhXre6T4M=
Subject key identifier:   26:A8:1F:AA:DA:7C:11:F3:05:9E:35:5A:E4:BD:1A:BF:C7:24:D9:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81008E61381650391838BBF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fcff73f-f080-3f66-8625-6903429fbbd4.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        76.97.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:8e:61:38:16:50:39:18:38:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=ef1a4ee5-b49d-4f38-b369-04e752890bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:e9:8a:8d:4a:42:18:fb:24:80:f0:0f:a7:
                    ec:13:80:a3:93:5e:50:78:d1:ad:b8:a2:aa:c5:ac:
                    86:db:f6:f7:0c:00:1a:54:b4:ac:b8:95:0f:9a:e8:
                    ef:19:8c:42:e8:94:17:ad:ae:4c:38:3b:22:bb:ad:
                    1b:37:1a:49:95:b7:2f:a6:83:b8:78:96:28:3c:14:
                    2e:59:4b:04:c5:7c:9f:4f:de:1a:3f:dc:ab:1d:bc:
                    8c:91:65:c9:81:8c:ef:2d:4e:07:55:94:be:fa:16:
                    b8:7f:8c:6a:a9:49:ee:53:b4:83:b3:9a:01:a7:26:
                    3c:2c:d7:88:21:a0:9d:2c:31:3f:19:6b:80:04:09:
                    07:11:a3:10:a9:34:8e:b0:10:05:54:af:5e:70:ff:
                    06:0d:d9:80:5f:6d:ce:8d:6d:a7:5d:79:b9:ba:c5:
                    b7:76:e2:4a:70:52:bd:e4:a2:f8:1f:58:a6:49:75:
                    2b:f6:e1:fa:4a:c4:7b:08:34:f9:6b:fc:3e:95:77:
                    ec:6d:7e:28:26:88:80:6d:6d:cd:8f:43:ef:0b:05:
                    5c:7f:37:aa:f4:f5:91:d4:74:d6:98:24:a1:07:bf:
                    1a:53:63:71:77:70:06:48:bf:02:9b:40:e1:c0:19:
                    46:5e:ce:27:8f:1a:0d:bd:00:f8:15:e8:36:b1:50:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A8:1F:AA:DA:7C:11:F3:05:9E:35:5A:E4:BD:1A:BF:C7:24:D9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fcff73f-f080-3f66-8625-6903429fbbd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:e1:a0:3f:d8:ba:4b:7e:95:72:a8:5e:39:83:9e:fa:6c:aa:
         e8:a0:ae:bd:de:3a:4c:3e:60:35:e2:5b:1a:b4:1b:58:39:47:
         37:b1:b5:e0:f8:91:d0:7b:6f:3d:07:0a:b3:47:ab:de:fc:02:
         8a:5f:89:00:d6:3a:b9:f0:e9:7a:61:af:77:74:8f:c2:69:c1:
         71:33:99:41:3b:b1:1f:bf:f2:1f:7b:36:94:a1:d4:cc:48:b7:
         5f:49:f8:52:05:44:19:69:c4:2a:88:63:39:f7:dd:7f:c7:90:
         85:7f:b3:8b:d1:22:d9:8d:b9:06:df:65:8e:65:07:ba:ef:f5:
         dc:51:89:cc:08:71:69:1b:af:90:67:c0:25:27:91:2b:98:b6:
         10:66:5e:81:99:1f:d7:60:47:b2:22:6f:6b:78:79:83:77:16:
         53:a4:2b:97:e4:61:9f:12:f6:aa:69:94:17:84:89:8d:cc:42:
         60:af:5b:80:80:d3:c1:c3:1b:fe:65:60:20:27:39:ad:2a:01:
         65:d6:c7:a9:f7:72:1c:1c:ed:06:90:41:bd:43:92:6f:92:bb:
         b3:6b:12:0a:cd:e7:99:66:a0:f2:33:bb:b1:88:e1:39:44:1c:
         64:60:47:f1:f9:7c:ba:03:52:3f:b7:08:fa:66:ef:9c:5a:45:
         d5:30:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:44 2026 by rpki-client