Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/921242e4-b36f-3a22-8479-2aac47a44407.roa
File:                     921242e4-b36f-3a22-8479-2aac47a44407.roa (raw, json)
Hash identifier:          CYG6g+MruGILnSqaCWf5Bl7r/Uczpbtewv87uovVXHY=
Subject key identifier:   D1:7D:F5:85:FC:DC:80:DD:3B:5A:7B:03:12:97:D5:7B:64:73:FD:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9ACFCCBF3CF0AABB9B180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/921242e4-b36f-3a22-8479-2aac47a44407.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33489
IP address blocks:        96.83.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:ac:fc:cb:f3:cf:0a:ab:b9:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=f8b1b617-1771-4740-be15-09e9ba7d247e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:45:f3:80:f8:7d:f3:b9:e6:4b:dd:eb:fb:
                    88:15:d3:51:d2:b7:3e:49:6f:ae:9b:6f:ed:80:ab:
                    65:ed:0f:0e:e3:11:34:56:63:b2:4e:17:09:09:e1:
                    40:b0:22:59:f9:34:2d:e3:a4:74:42:6f:53:e5:05:
                    e3:40:92:ba:5a:04:92:cc:83:20:fd:b2:04:0d:24:
                    38:76:4f:b0:36:2a:a6:6d:2a:e0:6d:fa:f0:df:c4:
                    8a:56:be:69:b8:5a:83:67:61:7f:f5:45:4f:4d:4e:
                    b4:e1:ea:6e:f4:77:90:e7:9f:ff:35:ba:6c:c3:4f:
                    61:59:95:e3:fb:13:d2:c6:25:71:ca:24:f8:0d:c4:
                    64:d5:d1:cc:01:29:18:53:ae:2b:66:ca:33:16:56:
                    ad:45:97:81:db:3f:8f:8a:a9:29:ca:ec:c4:8a:13:
                    3f:fc:e3:b4:94:6e:af:7d:05:61:b2:0b:34:70:2d:
                    47:e1:d8:f1:2a:c0:75:f6:a0:cf:ef:9e:e9:c3:6e:
                    f5:e4:e2:86:a6:90:a9:22:03:eb:ac:ce:50:08:52:
                    46:1d:6f:7f:1a:ca:04:14:ce:2c:77:b5:23:4c:88:
                    8b:da:f8:e7:a7:7b:0b:d4:40:2f:f2:60:0d:18:d7:
                    1b:ff:5d:4a:57:e4:c8:87:50:ec:9a:b0:2f:d0:08:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:F5:85:FC:DC:80:DD:3B:5A:7B:03:12:97:D5:7B:64:73:FD:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/921242e4-b36f-3a22-8479-2aac47a44407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.83.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:64:af:17:8d:fd:23:0c:c2:8b:42:41:9a:38:83:a4:39:2f:
         1f:a1:9b:cc:b1:44:4b:25:b7:01:b1:9c:b2:1b:35:4e:e3:a0:
         11:15:5e:29:e3:ed:17:6c:ed:cd:62:4b:2f:35:6b:cb:ba:4e:
         05:59:7f:81:c1:f1:7f:f5:3e:cf:53:9a:e9:39:07:95:df:6b:
         9d:97:78:16:1a:77:ce:76:14:a3:91:11:2f:4d:78:36:3a:84:
         57:1e:3a:ad:3e:b7:5c:6c:00:5c:aa:39:13:fd:27:5d:a6:6f:
         bc:07:8c:3b:69:b5:38:88:ef:a9:8b:e3:27:26:fa:bd:43:3e:
         06:2c:fe:00:9a:4f:00:c8:02:48:0d:b4:b8:1c:6a:d6:f2:7c:
         e5:fd:24:52:8f:23:81:67:13:b2:40:d3:4f:c3:9d:53:ac:7d:
         1f:37:e4:10:17:01:8a:20:69:a4:04:bc:7b:dc:73:fc:7c:53:
         f3:24:1e:c5:d4:b9:54:0f:e3:40:91:7c:cd:54:8a:17:65:6d:
         d8:fb:e4:ac:1a:a3:cc:3b:31:0b:17:f8:b9:9a:44:fb:79:72:
         22:50:2e:fa:4b:9b:3d:6c:fa:18:b9:f7:12:b4:6f:4d:3c:b1:
         62:05:f6:bc:d3:c1:49:1c:61:cb:c6:04:e2:72:36:4f:bc:28:
         84:6e:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:43:22 2026 by rpki-client