Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99372042-296b-37b2-af1d-5907f882fc75.roa
File:                     99372042-296b-37b2-af1d-5907f882fc75.roa (raw, json)
Hash identifier:          xKwRDKnIkguPt0ifdmcCOEN4DA3WOp6cnWylepaZwPU=
Subject key identifier:   B8:D7:2F:21:24:7B:A3:C0:37:81:81:0C:94:B6:B2:95:4D:EC:8D:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA9A707AF8ED5425867900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99372042-296b-37b2-af1d-5907f882fc75.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        66.30.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:9a:70:7a:f8:ed:54:25:86:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=b35e1758-1751-4289-8614-bd8df48f101e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:03:6d:1f:11:8c:31:0b:2b:44:48:3f:36:
                    25:c7:ff:6b:ab:6e:96:19:7a:55:16:ed:2f:09:89:
                    37:ac:a9:1c:cf:4f:5a:3d:04:7c:8c:18:84:0e:1b:
                    7e:bf:b3:fd:7c:59:cf:bc:63:e2:1c:de:e9:67:90:
                    5c:a0:ba:1e:1a:5f:68:bc:15:80:40:3e:53:fe:b5:
                    e8:d9:fd:86:f3:d8:d9:39:ee:76:cb:a4:21:be:7a:
                    21:9f:63:8d:c7:6c:3c:34:31:d4:dc:3e:eb:0c:37:
                    5f:9d:b8:21:44:2d:2f:f3:7a:89:68:47:6d:ed:8d:
                    da:6e:21:a2:e8:fe:bd:9b:38:82:68:a0:b1:0e:e1:
                    1b:28:97:da:a0:5a:d3:76:7b:20:05:22:53:ac:f0:
                    ce:10:7b:78:cc:d0:bc:45:ec:cd:db:1e:a4:98:cb:
                    8f:ab:59:31:e8:60:67:9c:32:30:9a:d9:c7:34:67:
                    07:15:78:a0:c1:08:97:7e:a0:c7:1b:77:f1:e6:64:
                    1c:52:c9:75:b2:df:44:1f:7a:04:5b:4e:45:25:71:
                    0f:96:de:dc:52:aa:ce:b2:c0:36:d9:02:5d:51:8a:
                    f6:33:85:d9:4e:23:e4:8b:81:40:cb:d7:5b:8a:ba:
                    e1:98:6f:d9:92:3a:1d:66:47:90:b8:d4:d3:6f:e2:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:2F:21:24:7B:A3:C0:37:81:81:0C:94:B6:B2:95:4D:EC:8D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99372042-296b-37b2-af1d-5907f882fc75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.30.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:28:2d:c3:ba:b7:24:a0:50:b1:4f:01:60:dd:45:f4:c7:
         d7:fe:4c:c6:28:2a:d8:4f:d0:c8:5e:6a:8d:91:23:30:04:78:
         50:fe:21:7f:f4:fe:b6:2d:7b:c0:99:5b:5c:e1:f8:5f:6d:c9:
         73:55:73:3f:e1:69:b2:24:65:fe:a2:23:4d:5a:9b:d2:bf:4d:
         66:fb:56:11:ec:18:09:11:e4:78:f0:ce:3c:b3:db:3e:4e:82:
         8f:22:3b:34:b3:c6:e6:91:87:10:dd:e9:ca:e0:7d:50:5b:c4:
         d5:57:fb:3a:69:9a:96:3a:62:bb:be:cb:a7:d5:45:9a:af:11:
         c0:8e:e6:12:2e:c6:e5:ec:6d:30:59:4c:7d:79:85:29:44:d9:
         e6:e4:22:5f:81:fb:7d:94:9a:9f:60:1d:d8:f7:86:ed:c8:1b:
         ea:a1:ae:7f:5f:b1:9b:c6:3e:04:4d:7d:e7:a0:75:dd:bb:4a:
         55:c1:2e:bd:0b:b9:34:58:e1:52:98:6c:1d:1b:0a:a0:f8:fe:
         2d:66:72:a3:a4:2a:66:f7:d8:fd:1e:4d:27:06:31:8c:07:80:
         87:eb:e0:8f:4c:5a:e2:e9:81:10:0a:21:58:94:93:6d:93:b4:
         16:3d:11:6e:75:b2:e7:fd:6f:bf:f4:c6:54:af:27:ad:dd:f7:
         7b:79:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:20 2026 by rpki-client