Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2e5722-96fa-3139-bfe9-e108e33ab115.roa
File:                     7d2e5722-96fa-3139-bfe9-e108e33ab115.roa (raw, json)
Hash identifier:          hRQbJLjVhdI3nLmHas14auId5sNgU+osckl33DlgtaU=
Subject key identifier:   37:70:A2:33:07:61:76:EE:E8:23:71:6D:EA:EC:01:34:1A:03:0E:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8623E240F096EFBF36E540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2e5722-96fa-3139-bfe9-e108e33ab115.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22258
IP address blocks:        96.84.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:23:e2:40:f0:96:ef:bf:36:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=f7fcda2e-baa1-4526-bd74-80ec47c769d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:24:2b:19:85:fa:ca:14:0f:45:1f:d2:5b:
                    d3:9f:a5:57:d7:a2:1e:1a:87:a3:3b:1e:cc:91:f9:
                    c0:63:19:81:3e:11:53:d5:3f:f5:09:bb:cd:41:5b:
                    1c:86:e8:b9:6f:00:c3:7f:c8:00:bb:97:ee:81:ae:
                    a2:98:25:b7:37:64:17:58:c9:cd:31:17:ae:62:a3:
                    37:9d:8d:d7:d0:d1:ee:f0:32:17:f6:b1:c6:ba:74:
                    6d:bb:ee:0a:cc:59:5a:90:fe:ca:0b:c4:bd:7e:c7:
                    3d:e9:89:c4:6e:e4:1d:80:96:61:25:f1:a1:4f:ec:
                    11:ae:dc:bb:d4:8d:b3:3f:d1:80:2c:80:59:81:94:
                    1a:06:1f:68:00:31:26:b4:49:0c:aa:62:3f:b9:05:
                    90:83:7f:b3:2d:ee:48:39:9d:58:4a:35:4a:40:4b:
                    c7:75:82:9e:e2:b3:f9:ab:c0:24:93:2c:fc:27:3f:
                    0c:ee:93:03:f8:55:ca:f4:e8:32:fe:b9:f2:21:3a:
                    7a:ee:a2:67:fa:49:71:16:ee:c5:e7:3d:83:73:bd:
                    00:b6:3f:33:67:84:a1:cf:03:92:5c:1e:4a:11:e0:
                    e6:43:ce:b7:77:a7:67:d3:d0:37:f2:8a:84:47:bf:
                    24:d0:cf:f6:af:4b:f9:da:21:a1:9e:53:ca:4b:01:
                    aa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:A2:33:07:61:76:EE:E8:23:71:6D:EA:EC:01:34:1A:03:0E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2e5722-96fa-3139-bfe9-e108e33ab115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.84.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:54:6a:46:bd:ed:ea:bf:c8:7f:35:8d:28:a5:a7:91:c4:dd:
         96:ec:31:1c:83:78:2c:6a:1f:5f:ea:02:1a:56:04:f6:9b:81:
         9f:6f:c6:3d:1d:49:11:84:31:b5:78:fc:08:a6:d9:3c:d6:8a:
         5d:72:dd:d2:31:06:18:d4:da:6f:83:96:b5:d3:36:77:88:7d:
         c4:33:6b:7b:15:67:13:07:fa:b6:54:a1:ff:ae:90:58:ef:7c:
         85:73:c5:3a:ad:e1:b9:de:ac:a2:bd:0b:e9:ad:c7:d3:e4:55:
         3c:de:db:62:f5:bc:3b:81:98:e9:f1:aa:07:ea:40:42:d7:e3:
         3c:52:65:a7:a0:4c:9a:6c:cf:54:5d:33:78:bc:3b:22:ec:35:
         b9:0d:00:4e:e5:2c:2c:68:97:11:94:8a:d6:a6:af:bf:10:6b:
         53:44:07:f1:10:ed:93:2b:f6:04:ab:30:58:8a:b5:6b:58:b0:
         32:f9:39:2a:a3:f7:b7:b8:ae:93:dd:20:f1:4e:65:ca:1a:26:
         6a:1d:53:c3:a0:1f:fd:9a:d0:6d:00:cb:cc:32:e3:60:e5:44:
         21:b4:b5:67:5b:47:98:51:22:6a:15:c6:37:9f:6f:a9:1d:dd:
         ab:f4:b8:19:9a:64:0c:97:4f:a9:39:73:a1:cb:e1:6a:99:ab:
         ca:26:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:50 2026 by rpki-client