Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a18a6b73-26fb-32b9-ac68-ad783b713249.roa
File:                     a18a6b73-26fb-32b9-ac68-ad783b713249.roa (raw, json)
Hash identifier:          2QAAxeugclBi4YdjA0YlMjFeB+MzSsH+pILg+VZlUfY=
Subject key identifier:   DA:93:2A:1E:EE:87:4C:C9:92:D8:4D:CC:CE:D3:59:4A:47:F6:A4:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE95A771B8871810AD44980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a18a6b73-26fb-32b9-ac68-ad783b713249.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        76.18.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:5a:77:1b:88:71:81:0a:d4:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=b4b9788e-8cf4-40a0-82ed-c0c3957ddaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:dd:f2:59:9c:ed:53:9b:d7:7a:0f:e1:5b:9c:
                    d9:27:6a:ea:5b:1c:9b:0d:af:1d:50:41:72:01:b4:
                    5e:4e:8a:a4:72:ad:cb:94:9e:c9:5b:b7:1c:4e:41:
                    7c:15:59:bb:d1:aa:ce:27:a4:9c:1b:68:cd:90:2f:
                    d0:e4:7d:c5:14:7b:91:8d:94:66:0f:6e:13:31:47:
                    84:6a:cd:d3:c7:f3:5c:80:92:05:b1:7a:83:1a:0e:
                    59:02:59:cd:23:53:62:81:e1:d9:35:6d:df:c9:06:
                    a8:d9:a2:ed:3b:19:fe:d4:9c:64:fe:48:00:f3:ce:
                    d2:f7:fe:5e:cf:45:77:c2:c6:f2:e7:c4:b7:7c:6f:
                    6c:68:f4:c5:ad:13:cd:3f:0a:69:6c:aa:d0:96:b3:
                    c1:64:c7:2e:fa:a5:5d:6c:81:fc:ba:60:5f:28:2e:
                    00:a4:d8:67:2a:e0:4b:5a:be:9d:3e:a2:78:96:20:
                    52:e1:bf:4f:c8:38:2a:88:26:cf:0c:85:b8:ac:d6:
                    52:24:71:f5:b1:e6:02:f4:af:a2:5b:20:4d:9a:59:
                    97:56:11:56:f2:65:f5:d6:46:fe:48:fc:1a:cd:c0:
                    62:23:d6:db:13:2d:e0:05:e1:6d:0c:a3:4b:b5:35:
                    e4:46:ba:49:69:8e:f8:58:fb:5d:76:e2:d9:e3:78:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:93:2A:1E:EE:87:4C:C9:92:D8:4D:CC:CE:D3:59:4A:47:F6:A4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a18a6b73-26fb-32b9-ac68-ad783b713249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.18.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b8:71:07:1c:62:6f:15:4b:32:79:59:cf:94:0e:91:78:5c:
         c8:42:40:73:86:52:8c:2a:40:b1:b9:77:ec:1a:73:e9:76:15:
         79:56:0f:06:68:b5:a6:69:1e:55:ab:08:6d:04:20:4d:2e:66:
         61:8c:07:7c:f5:fb:a0:33:65:8e:b1:be:df:a8:d2:67:59:19:
         d3:3f:e3:07:db:f2:12:07:1e:fb:1d:45:2c:d9:d4:ab:5d:1c:
         ab:32:c3:c9:38:36:be:43:5a:81:8b:fb:e8:0a:73:98:48:f4:
         82:4c:dd:03:fd:92:09:50:60:89:a1:e2:14:8d:b3:d5:24:bf:
         ea:45:2a:1e:80:f8:19:cd:67:b4:99:df:a9:0c:24:c4:86:fa:
         fa:0d:a5:01:89:bb:c0:cb:b0:ac:0f:aa:bf:b4:0e:d0:cf:7a:
         4c:4e:83:a6:77:ed:86:cb:8c:94:fe:a9:18:32:bf:f7:cc:e9:
         d6:3a:30:cc:df:46:be:ac:8b:35:aa:fd:43:a9:a9:98:b4:b0:
         9e:aa:a6:a9:a9:54:db:e3:91:dc:dc:2d:cf:88:86:20:d0:e7:
         7e:57:a2:18:6a:51:fe:d5:4d:36:08:8d:4c:60:27:12:6a:fe:
         8d:37:e9:14:ff:a7:1e:e8:40:c0:d7:80:51:58:72:39:68:58:
         2f:d9:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:49:15 2026 by rpki-client