Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7125f0f7-f4bd-3c20-8ffe-b41f65606836.roa
File:                     7125f0f7-f4bd-3c20-8ffe-b41f65606836.roa (raw, json)
Hash identifier:          nchPCX3jsb4E9cXhM/saWRjQlTzAexb3Ao0dAE/Kh6Y=
Subject key identifier:   1F:AE:8B:2B:D1:48:94:D9:02:F5:E7:A9:0E:63:1E:36:59:E2:F7:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9FA351183C1FF230CE380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7125f0f7-f4bd-3c20-8ffe-b41f65606836.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        96.78.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:fa:35:11:83:c1:ff:23:0c:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=88fef4d5-545b-4f8d-a77b-091c05387c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:7c:6a:f6:34:bb:cb:f1:38:ec:a3:31:c8:
                    a3:31:ff:21:62:b4:2f:14:a1:38:78:f4:de:6d:6d:
                    b3:61:1f:ac:8b:44:db:15:35:e7:57:03:4c:c7:9e:
                    ee:c0:e1:62:b2:26:2d:15:ca:46:23:5d:01:b0:a0:
                    30:c1:b5:5f:6c:db:31:f9:b3:9f:be:00:67:d5:03:
                    c6:8d:56:05:af:0d:87:4d:e5:75:19:3f:83:48:8e:
                    9e:9e:5b:08:e2:a6:ff:c1:7c:6c:4f:04:04:06:29:
                    31:30:ea:83:17:30:64:12:ae:f5:5d:14:f0:db:6c:
                    d7:0d:5a:06:07:d8:8c:f0:9d:1f:78:38:a3:d4:64:
                    cf:75:f9:ed:cb:2d:fd:45:5e:4a:a8:32:fc:2f:29:
                    14:b4:4a:e0:8d:a3:d6:be:1a:32:ea:ed:74:b6:a1:
                    7b:b2:85:8b:a5:65:61:20:11:51:f6:92:73:6f:19:
                    df:94:e1:2b:92:68:ab:23:b8:c9:d5:7f:d2:12:58:
                    c8:18:2f:f0:48:78:c7:47:8a:a0:99:51:b6:5e:90:
                    d7:45:0e:0b:22:1c:80:b4:26:d8:1a:94:66:49:9a:
                    bd:2b:62:2e:8f:cf:3a:44:b0:b4:7d:31:b4:0e:25:
                    aa:fc:30:04:00:03:52:71:ad:a8:94:ba:01:8b:97:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AE:8B:2B:D1:48:94:D9:02:F5:E7:A9:0E:63:1E:36:59:E2:F7:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7125f0f7-f4bd-3c20-8ffe-b41f65606836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.78.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ad:1e:62:4c:8b:6b:40:f9:5b:69:71:2d:a6:a0:ea:6b:f1:
         4f:2d:e7:27:d3:7b:ae:a5:e9:e7:d6:a1:ba:06:67:d4:08:1c:
         89:e0:c7:9f:d0:e4:91:c8:e2:2c:e3:44:76:b8:c3:fb:0b:4e:
         3d:22:d6:56:f8:c8:19:3d:3d:15:ad:6c:9a:f4:8a:f5:b5:9b:
         0f:fd:61:66:2c:45:56:02:30:d1:c4:0e:89:7c:c6:67:ec:26:
         da:4d:4b:7a:65:7e:82:bc:3e:04:23:2d:be:77:f9:14:7e:f9:
         2f:76:79:74:f9:12:cb:13:7c:59:71:39:46:0f:34:c5:f9:ea:
         4a:9c:0f:9c:0c:27:ac:b0:db:f7:25:ac:c9:03:b3:2c:4b:7c:
         b2:8e:db:18:b6:84:8e:d7:85:b5:4c:c1:d0:82:eb:01:81:a7:
         e9:37:7f:34:23:1b:b9:43:89:9c:ac:11:3c:6e:ec:fa:e9:6f:
         d9:6a:49:d0:ac:38:48:d6:f9:f2:69:ed:ca:57:bf:05:01:04:
         f7:50:fb:4e:06:a1:f1:20:92:d4:46:2e:ae:06:ac:b3:82:d1:
         bb:5c:84:58:dc:10:a7:30:68:2f:3b:49:f1:19:23:6d:2a:da:
         48:79:b8:4e:11:2d:c9:0a:ee:34:79:d0:2c:b6:d5:a6:44:a7:
         6a:c8:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:12:46 2026 by rpki-client