Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e93324e-95cb-3794-a5fc-7c9bdfbb6596.roa
File:                     8e93324e-95cb-3794-a5fc-7c9bdfbb6596.roa (raw, json)
Hash identifier:          KxO03EQtGdOASWpuh7xE5CcsG8/KWorwugisC9mUDfM=
Subject key identifier:   C0:90:01:1D:EC:34:04:B0:E7:D6:18:39:C6:C4:C1:81:FB:49:FD:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E61590530C51EF0D2AB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e93324e-95cb-3794-a5fc-7c9bdfbb6596.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        76.102.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:61:59:05:30:c5:1e:f0:d2:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=491d5d8d-5c19-4d79-90ff-a28c064721d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:ee:26:18:0d:b3:3a:e3:d0:5a:e3:c9:a3:
                    e9:e1:ea:65:f5:dd:bb:2e:d9:fc:17:f5:2d:0f:fa:
                    cc:70:ec:b2:1a:af:c5:af:7a:ae:4d:3d:cd:09:d6:
                    82:96:97:e4:46:a5:a4:a9:dc:ea:4f:c1:89:eb:4b:
                    3d:ae:1f:7e:76:70:b2:f5:e2:6b:e8:5f:c3:97:b0:
                    89:9c:28:c9:19:f4:90:c4:16:48:a1:1a:e4:88:e6:
                    ff:a4:2a:15:50:0a:b3:3a:6e:d1:91:3a:9d:ce:69:
                    8b:61:e1:3c:d6:e3:34:4e:1d:15:ff:6a:2f:f4:ed:
                    63:5d:44:7c:26:cf:8d:47:7b:0c:20:c3:ce:63:25:
                    f3:0d:c5:c3:a5:8a:77:2f:b8:f9:b5:bf:5d:26:a6:
                    a0:7d:6c:b6:eb:d3:79:a5:95:53:d2:35:89:28:b2:
                    0c:14:54:2e:e7:ec:8d:a1:85:21:5e:33:7f:53:84:
                    58:31:6e:a6:2b:69:ab:14:c3:fd:4e:b0:bf:b7:2a:
                    69:83:a5:f4:c7:86:78:40:bd:1c:8c:a0:e4:9f:a4:
                    0b:40:3f:92:54:ff:d0:ac:c6:35:50:c7:c0:a9:e0:
                    08:0c:66:21:b3:db:99:f0:a9:7f:ff:a6:5b:a9:80:
                    62:05:24:8f:d8:94:94:27:5d:3b:c8:e6:c8:55:cf:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:90:01:1D:EC:34:04:B0:E7:D6:18:39:C6:C4:C1:81:FB:49:FD:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e93324e-95cb-3794-a5fc-7c9bdfbb6596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:22:39:72:dc:82:95:7b:78:ba:da:e2:e3:a5:7f:dd:fc:ca:
         f2:98:e4:34:1a:d4:b4:5c:05:2d:14:9d:c3:67:c1:4c:85:3f:
         85:51:d7:74:b6:86:c8:6a:d7:59:9b:f8:de:0e:8f:dc:4b:17:
         23:f4:d6:54:cc:94:0d:29:a5:01:1e:b0:17:0c:14:7b:61:ac:
         e3:a5:c2:2b:c4:d0:fa:54:8e:18:2f:0d:a3:c8:ec:b4:8f:54:
         bb:5e:ab:58:65:f2:36:16:e6:f6:a0:ad:a5:b5:83:d6:a3:d3:
         4b:5b:fb:c8:84:87:f0:d5:61:2d:44:85:c5:5b:48:56:fd:b7:
         ed:76:80:be:e9:62:d9:3f:da:f9:95:7c:93:c8:c3:27:d1:f1:
         11:c7:62:01:35:e7:57:ec:f0:e4:15:9b:75:5e:b2:46:10:fb:
         20:c5:6d:74:78:be:30:65:ae:b4:c4:8e:4b:d9:95:49:0f:73:
         40:3a:be:b7:54:70:b4:29:c9:51:41:0f:de:dd:0b:ae:29:e9:
         2b:a0:75:58:6b:a1:ad:f2:86:c5:9e:c9:d7:9d:f9:9f:fd:ae:
         fa:cd:40:a5:ba:64:fd:80:98:85:7a:74:f0:6a:62:17:ed:6e:
         a1:d5:b3:66:9c:1d:74:6c:f0:d6:59:30:5c:fb:7f:6b:d3:10:
         19:28:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:30:09 2026 by rpki-client