Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/936da2b7-89d6-3d24-91ff-26d01f70eff7.roa
File:                     936da2b7-89d6-3d24-91ff-26d01f70eff7.roa (raw, json)
Hash identifier:          FpuXx4wV0zZtMjn6oeuM7oRJGR1tSWnoTBI+lshw01g=
Subject key identifier:   F5:09:85:76:18:6B:93:2A:24:55:E2:88:A9:9C:B0:4F:58:31:6C:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB6342140BAC2FC9AB2260
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/936da2b7-89d6-3d24-91ff-26d01f70eff7.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        76.142.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:63:42:14:0b:ac:2f:c9:ab:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=367e59c5-985a-4ce7-8a6d-1d576a64bc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:c3:01:49:8d:af:02:f6:c1:3d:63:7a:a4:
                    c0:20:eb:27:a6:08:17:8d:c9:e3:8e:ec:4e:1d:4b:
                    e7:33:fa:c6:c3:cb:3b:3a:8c:6d:67:5e:bd:94:de:
                    29:e6:e3:06:18:eb:04:20:87:ef:dd:a1:d6:03:df:
                    e7:36:8b:84:97:3b:0a:1c:88:e1:9a:63:87:70:a4:
                    1e:a3:37:79:ce:b2:23:85:58:29:27:65:c8:6a:3d:
                    ed:d2:fd:9d:d1:52:f3:6e:00:d2:3f:5d:dc:27:ed:
                    67:38:41:f2:e0:50:ef:78:66:ee:37:dc:90:11:10:
                    2e:8e:5a:3e:b9:f8:bd:81:d3:12:58:f5:eb:05:57:
                    50:3a:1c:dc:ce:57:3a:c3:80:d0:0a:9d:bb:4c:31:
                    01:ce:e0:ea:89:3b:74:02:95:c6:b9:c5:54:1e:fa:
                    dd:23:e5:93:2e:e3:f0:25:c7:9e:3f:18:27:4c:85:
                    39:78:86:64:2a:a9:26:a8:5f:88:bb:dd:f0:aa:22:
                    23:69:1c:80:3a:b0:3d:7b:02:d5:25:e5:17:23:3b:
                    3a:a3:2a:ae:dd:c1:28:06:2f:72:06:12:e1:da:e4:
                    de:94:1e:de:a4:b4:4b:ec:e5:0d:1c:13:3a:70:3b:
                    7f:27:59:1d:f2:7d:8d:ba:d0:e7:a6:0f:b4:27:10:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:85:76:18:6B:93:2A:24:55:E2:88:A9:9C:B0:4F:58:31:6C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/936da2b7-89d6-3d24-91ff-26d01f70eff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.142.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:b7:38:e7:60:4f:02:5f:6b:15:51:e6:98:0c:ab:a7:41:
         e6:9d:87:99:32:5f:79:f7:fd:68:39:e4:fb:c6:db:cb:96:dd:
         27:34:ab:d2:08:8b:6e:8b:ef:07:c5:81:0d:0b:3d:57:f5:ae:
         19:53:62:4c:07:7d:29:89:6c:d8:95:f0:6a:ab:04:58:ae:76:
         23:0d:b1:ad:3b:ce:a2:a0:f6:5a:95:b4:a6:9b:ea:50:41:49:
         b1:d0:81:1f:af:05:18:1e:38:79:1f:62:ae:c3:fd:fe:41:fd:
         90:2a:ba:a4:08:b4:6d:f1:80:5d:17:cf:1b:de:8a:86:8f:af:
         2b:38:05:8c:2c:ab:34:ee:c4:83:b9:75:5a:14:9c:9b:e0:c9:
         38:a5:fc:be:4d:78:7e:87:55:68:9a:ab:0f:ca:68:b7:3b:c6:
         48:57:7a:48:86:a2:82:1b:c1:c7:68:37:4f:16:0c:ef:7d:d4:
         b2:b2:6f:d2:7d:d1:a1:00:72:00:7a:87:eb:0b:31:00:7c:a0:
         6d:43:71:23:cf:c4:33:bf:9b:22:3c:73:ae:63:cb:9a:fb:41:
         21:ab:da:4d:32:d6:ac:3a:61:08:a4:81:4e:f2:4b:55:70:03:
         4b:48:7c:d8:63:c2:b9:05:04:72:eb:cb:cc:cc:0d:17:ba:22:
         cd:3c:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:04 2026 by rpki-client