Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa
File:                     721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa (raw, json)
Hash identifier:          J18xV0aayuvrdTfPGH0t8NAZG85QRfPyWdX+jWc+JJI=
Subject key identifier:   E3:A6:0E:FD:05:A4:C0:3D:D4:CE:FD:F9:A2:7B:63:25:D0:13:36:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5D639EA87573E55638D000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        71.204.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:63:9e:a8:75:73:e5:56:38:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c760cc63-cea7-447a-9ef6-54458af974e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:9f:db:45:de:e9:96:45:fc:d0:78:cb:35:
                    d9:87:74:78:8f:25:18:01:3b:90:c7:d3:16:21:4b:
                    e2:6b:c5:f6:b6:bb:6a:07:11:e0:e6:c9:a2:9e:07:
                    6e:1c:89:56:b2:5c:75:0b:48:bd:68:d3:4e:3b:e6:
                    e3:6f:0f:b5:1b:b4:6e:2d:5a:d3:70:13:1e:39:ef:
                    21:27:cb:5d:a1:06:51:63:01:09:94:dc:61:cb:c1:
                    f9:e4:80:71:d0:c6:a1:eb:60:f6:c1:9d:d8:67:4e:
                    ca:c3:f6:ac:b2:b3:a1:c5:47:db:af:6e:46:41:2f:
                    92:c2:61:d0:07:f9:56:ca:47:58:52:a5:10:93:fc:
                    76:bd:76:4e:7e:c6:fb:81:79:2b:81:43:5e:bc:ad:
                    c4:d6:e2:e8:35:14:9d:ab:c9:5f:d8:73:da:0e:69:
                    11:e4:6c:df:78:40:e4:2b:e1:3c:11:71:c1:16:dd:
                    11:49:24:10:26:93:28:49:b5:d0:a7:92:51:16:dc:
                    47:ed:85:f8:81:e0:67:ad:57:ae:98:7d:76:2a:3f:
                    89:7a:61:63:dc:8a:c9:c7:c2:44:f9:cb:13:9a:0d:
                    97:94:7a:05:49:35:9e:c4:2b:ca:95:d3:63:f3:21:
                    6b:d1:bf:02:14:a7:0a:3d:1e:83:db:bd:4f:f1:db:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:0E:FD:05:A4:C0:3D:D4:CE:FD:F9:A2:7B:63:25:D0:13:36:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.204.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:90:3d:47:37:c4:8e:aa:97:56:b8:b8:51:df:42:40:19:98:
         25:e9:91:e3:6e:0f:c8:64:b0:38:7a:ca:bb:75:d7:c4:e4:a7:
         de:1d:ce:88:f5:e4:24:14:60:66:96:83:9c:0f:ac:3f:0a:4d:
         7f:71:59:69:c6:a4:65:9e:5d:a9:7b:75:4f:15:7a:75:86:fc:
         ba:f2:5c:c9:1e:94:f0:33:bd:ab:de:59:23:46:ed:23:92:7b:
         c5:b3:e5:f5:19:25:19:a8:76:3c:9f:6b:4e:08:1c:e8:fe:cb:
         79:4a:03:bf:e1:d8:5b:66:42:20:0e:1f:98:fa:10:e0:9c:56:
         3a:0e:bd:f7:3d:67:6e:06:64:62:fa:92:03:25:60:cf:c7:16:
         a8:cb:4d:61:96:0c:26:fb:7f:7f:16:4d:bd:99:93:f7:15:d3:
         24:3f:04:9d:2b:fc:43:cc:71:a4:c5:4f:9a:eb:ba:d9:c9:0e:
         e1:c6:3a:32:b7:6e:7a:80:50:14:11:e0:cc:8d:2c:ec:26:68:
         a8:8c:45:5d:77:03:c2:b1:cf:3e:57:b3:4c:82:d9:d1:57:26:
         da:3a:0c:e2:0e:87:6f:45:a9:7a:a2:f0:69:7f:4f:bd:91:f4:
         e0:9a:ac:bd:b7:9c:da:9c:05:c5:25:52:ba:23:e4:ca:b1:8e:
         7b:f6:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:05 2026 by rpki-client