Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3ea74c-8633-3c84-b5f9-3864ea389a3b.roa
File:                     8c3ea74c-8633-3c84-b5f9-3864ea389a3b.roa (raw, json)
Hash identifier:          OkXe+03PBe7fl4BrApIC+AqgvrDa7Czb/SAINp4NqCk=
Subject key identifier:   51:99:E3:ED:CC:85:8E:1F:4D:3D:7E:AB:85:94:4E:A2:8A:2D:D0:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA34F0BEED9BA71F1F1E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3ea74c-8633-3c84-b5f9-3864ea389a3b.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     13367
IP address blocks:        76.17.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:34:f0:be:ed:9b:a7:1f:1f:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=b8a8b901-43ac-421b-878b-4e8a556890bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:5b:22:de:f4:f4:60:57:92:ab:ed:1b:f6:
                    0f:06:54:5e:dd:61:0f:c9:b8:4f:38:f1:4e:95:5f:
                    b3:9f:a4:dd:56:75:d9:67:c9:04:ea:09:01:f2:ba:
                    57:6d:46:e4:6d:da:fe:94:b1:c1:f0:1d:9d:c4:f7:
                    f2:ff:17:72:67:56:03:2b:32:2f:7d:ab:f4:6c:8c:
                    b2:ad:b5:24:e9:f0:3c:43:86:b6:a8:6f:0e:e7:6e:
                    74:e3:42:f5:1d:6e:03:12:16:ff:ad:b3:27:4a:5d:
                    4d:60:67:08:c5:04:1f:e8:7c:18:36:0a:0a:33:d9:
                    e3:7a:ed:a3:1b:24:99:9c:62:37:2f:6c:27:13:08:
                    b1:78:53:a9:cb:43:62:dd:63:e6:05:c4:e7:08:cd:
                    b0:f3:1f:84:fc:38:5a:03:81:b9:35:32:8f:c3:86:
                    89:a7:6e:74:bf:ab:12:2f:4a:c7:dc:92:c4:5c:98:
                    b9:ac:a5:51:2d:30:89:5d:00:30:7b:8a:4a:d8:9b:
                    28:19:80:93:71:5d:55:03:51:b4:37:3a:9c:8b:e0:
                    6a:d4:e8:12:09:f5:01:c0:8c:f7:c8:44:79:f6:02:
                    13:0f:f7:b8:50:ad:3f:65:e7:05:83:e4:ef:4a:6e:
                    63:16:2c:38:12:86:83:f6:c0:2c:93:d8:0f:d1:0b:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:E3:ED:CC:85:8E:1F:4D:3D:7E:AB:85:94:4E:A2:8A:2D:D0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3ea74c-8633-3c84-b5f9-3864ea389a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.17.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:9a:00:00:71:00:4c:8e:2b:ce:54:ea:05:04:f0:cf:39:
         4f:d1:6f:1d:cc:15:71:9b:1d:f5:ef:d7:f4:f4:a9:8b:f4:6c:
         f7:bc:0e:13:9d:b1:64:70:48:1e:44:5a:4a:4f:8a:ca:58:5c:
         74:fd:6a:83:73:5c:e7:1c:5c:74:9f:73:1e:50:24:ef:42:a5:
         3e:97:b7:eb:e0:87:da:e4:a7:16:a5:e9:ea:9f:2f:43:5a:df:
         77:67:75:b4:97:8f:b5:3b:11:f6:1c:f9:02:cd:97:e1:ea:fe:
         79:a6:c4:42:a9:31:7a:08:19:52:16:32:a9:e3:4b:76:a0:34:
         b1:43:7a:aa:16:2e:19:6e:3b:01:96:ca:87:b2:f3:e3:ac:05:
         7a:b7:0a:3c:97:3c:f4:c8:5d:63:87:91:67:d9:ca:5d:a0:83:
         55:2e:da:38:91:69:9a:ea:20:84:97:8b:2b:c2:46:25:c1:ec:
         23:3e:5c:e3:78:3a:81:7f:80:12:68:ed:27:fb:3c:a9:5a:73:
         72:ac:3a:cc:57:c7:c0:05:7e:89:0c:99:a2:30:3d:47:ee:4c:
         10:41:6e:d6:c5:0a:9e:c1:01:c2:cd:69:c6:64:9f:80:24:99:
         a8:e9:be:3f:81:08:df:70:9f:2b:aa:0e:94:43:06:6d:97:26:
         a9:19:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:50 2026 by rpki-client