Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa
File:                     8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa (raw, json)
Hash identifier:          L2LPabi60A+Z3utr1TDZpdv/Qq5oX35fa+WLo3IgHIY=
Subject key identifier:   9E:CD:23:2D:88:E2:19:10:60:1D:B2:C4:AD:4F:44:D2:17:C9:E5:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78E054F5A86651BA158C940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13367
IP address blocks:        76.156.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8e:05:4f:5a:86:65:1b:a1:58:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=510c8d07-f820-46a5-87d0-a020618c8d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:d9:34:aa:b1:c9:1a:a7:9e:5c:06:21:79:
                    2c:37:bd:29:59:a3:9c:35:9d:25:f3:20:5d:58:b2:
                    79:34:4d:b7:73:93:f0:9c:1c:b3:6b:b9:ff:f2:0a:
                    c6:8d:e9:60:33:06:56:84:d6:dd:21:31:15:1b:ef:
                    8f:8e:b7:de:fd:97:b5:0d:b0:3e:25:2b:11:b5:85:
                    9c:82:46:c5:8c:a5:bb:3c:54:a0:ea:a9:77:9f:de:
                    1f:72:5c:e7:1c:ed:bc:1b:8e:ca:8d:79:94:e7:42:
                    64:67:c7:cc:54:1b:fa:0f:e2:e0:ed:77:d5:56:52:
                    1d:99:68:e0:45:6c:c8:c7:d1:4b:08:a8:d7:67:77:
                    4b:1b:d5:5c:d1:65:32:a3:70:c7:6b:77:b8:9d:60:
                    51:8c:66:39:42:b6:99:26:bd:28:ec:38:32:97:62:
                    c2:bb:90:6e:1c:66:8b:da:b2:96:eb:2a:7d:0c:b0:
                    bc:34:f6:e9:97:c7:a1:b8:59:7c:06:d5:d7:64:c4:
                    02:9e:83:3c:78:05:9e:a6:4f:d8:7e:60:56:a5:8b:
                    07:58:57:36:c9:15:67:e7:37:a2:24:18:0b:35:fd:
                    75:a5:23:65:4a:27:18:f1:0e:ef:1b:75:8c:ca:c5:
                    05:75:d6:b6:d1:c7:ee:a4:36:cf:07:85:02:c0:75:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:23:2D:88:E2:19:10:60:1D:B2:C4:AD:4F:44:D2:17:C9:E5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c8ef7a7-b437-3fbd-b34d-5b08719d98cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:64:98:bd:d5:ee:55:69:09:10:aa:15:47:b7:38:f9:4e:
         c7:91:11:13:98:ce:db:3f:45:79:5c:5c:11:3c:ad:38:3d:ee:
         e5:fa:e3:1a:e3:7f:0d:81:32:09:d0:65:79:1c:02:31:e7:44:
         bc:91:ec:bd:94:a1:fc:71:4b:9b:d7:23:17:38:96:cd:16:60:
         03:89:23:ac:09:27:9a:43:14:95:f0:6e:64:2f:24:f9:33:09:
         32:38:df:75:fa:58:8f:4a:d9:d3:52:ba:3a:e5:00:fb:62:8a:
         76:fd:93:f9:3a:93:fa:21:c7:90:49:2a:f1:75:ec:2e:ab:d2:
         7f:b9:70:8f:65:82:1e:7e:f9:6b:40:ec:d3:3a:a8:70:2c:5b:
         1a:fb:4c:53:12:19:9c:c2:12:d2:18:71:0f:a8:c9:87:d6:8a:
         98:b5:a7:a9:98:69:7e:5e:49:b6:cd:ca:00:32:0a:92:3c:13:
         06:aa:1d:08:20:18:51:6a:bc:c9:95:48:17:0a:08:dc:a5:a2:
         c8:a5:37:b0:92:07:c4:bb:6f:da:17:2a:59:f4:06:ad:f5:54:
         1a:00:bf:13:ad:40:f7:ca:8e:09:f7:e6:02:2d:0a:b3:9c:ab:
         cd:d4:73:4d:fb:f4:10:a5:23:be:3b:f7:7b:e4:55:5c:fa:de:
         eb:7f:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:25:19 2026 by rpki-client