Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96b26a62-e13f-3a1f-96ba-588222e94dc8.roa
File:                     96b26a62-e13f-3a1f-96ba-588222e94dc8.roa (raw, json)
Hash identifier:          uoKn8/HPamR57WUWWIxpvYEGaRTtmT8rtv65RGflELc=
Subject key identifier:   6E:24:26:1F:2C:B0:75:20:A7:56:9D:6C:F8:7E:C1:B1:2A:56:01:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA5B53B799B119DE0A5400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96b26a62-e13f-3a1f-96ba-588222e94dc8.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        71.237.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:5b:53:b7:99:b1:19:de:0a:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=e57432e8-61a2-4e0a-a7da-b1f26a3d38e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:9a:81:24:26:cd:96:4c:c2:78:30:3e:a6:
                    a8:c5:c9:64:6e:3b:91:26:23:88:0a:19:cc:33:a0:
                    70:39:a4:89:81:84:02:64:52:9a:ed:4c:4b:a3:f5:
                    af:e5:28:55:6e:30:d0:08:76:0a:9d:bb:ad:71:d2:
                    33:e5:11:df:1b:6f:a1:6a:82:6f:3d:fd:5b:11:b6:
                    0d:32:6f:d5:ee:f2:bc:da:9a:4f:09:0c:19:c6:29:
                    d2:f2:a7:ac:3b:95:82:e9:f2:85:f2:11:41:b1:97:
                    f6:06:33:e3:86:5b:c7:2a:3f:bb:3a:5e:a2:79:24:
                    19:85:89:0c:5e:d3:cd:b6:37:f8:b0:6a:5e:51:ca:
                    0a:5a:2a:e2:b2:51:67:2c:ff:1b:8c:11:a1:80:0e:
                    43:96:1c:ee:98:dc:15:af:1f:35:ed:8b:01:ae:bf:
                    06:d3:b2:a4:cb:16:7c:3e:8b:8b:83:14:30:13:e3:
                    f9:49:ba:4e:65:f2:aa:9e:ad:64:c4:88:9c:da:43:
                    4d:87:af:57:b1:52:0b:a0:35:b9:3a:a8:d6:f9:94:
                    03:63:ea:40:9e:37:1b:df:53:6e:7e:96:9b:a4:12:
                    92:c6:38:c2:5f:62:d2:2a:27:73:cf:5c:6f:bf:28:
                    c9:8b:17:83:ca:2d:14:e7:9a:6b:d9:00:a0:e3:eb:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:26:1F:2C:B0:75:20:A7:56:9D:6C:F8:7E:C1:B1:2A:56:01:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96b26a62-e13f-3a1f-96ba-588222e94dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.237.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:da:62:15:0b:91:2d:ca:2c:da:89:6f:bb:9f:50:79:13:
         dc:64:9a:21:43:f0:e1:bc:d0:dd:08:2d:bb:8f:a5:1c:4e:e6:
         4d:0b:d2:54:65:69:c8:9d:ad:03:3d:6d:b5:53:c5:28:f4:4a:
         9b:e3:0f:62:0c:34:86:e7:0b:57:90:9b:a2:24:77:4e:1f:e1:
         05:d5:c5:53:c6:cf:39:82:bd:86:8d:6b:8f:59:bf:14:cb:6e:
         51:17:07:43:8c:05:ff:2a:16:3c:d3:67:ac:f4:df:b0:79:42:
         14:1c:fd:fc:29:8b:ed:2a:e4:10:b8:53:7c:59:1e:12:bc:97:
         80:5a:a5:8f:e0:54:53:1d:a0:8d:ce:4d:51:05:3c:15:31:2e:
         b6:a5:9a:d0:bf:fa:22:ec:75:15:28:a4:08:7a:bc:06:ea:7a:
         8c:d2:8c:86:fb:1b:7c:47:ef:92:08:e3:1c:57:8e:17:0a:4b:
         64:9a:68:18:0d:81:90:37:4e:6a:6e:f6:fc:d5:24:b8:0f:60:
         92:3f:30:7f:03:a1:89:5c:23:3e:56:d8:22:0a:46:86:8d:85:
         10:e7:af:3b:a6:4a:16:4e:47:97:ca:d2:81:68:ad:98:39:39:
         5e:f3:ad:00:8a:22:30:d7:d3:6c:88:b1:48:4b:5b:02:39:fc:
         87:13:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:40 2026 by rpki-client