Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e1c359-da7d-33f0-922c-cb07a3214662.roa
File:                     a4e1c359-da7d-33f0-922c-cb07a3214662.roa (raw, json)
Hash identifier:          hQ/oJhwbTwkfyDzEgfbRd0RBU72w70Q7SKSCBLvgLNw=
Subject key identifier:   A9:87:36:5A:C1:4C:E4:50:C4:84:56:A7:C0:34:65:E9:FE:0A:0D:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119FA9767F6DC34BBA16E580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e1c359-da7d-33f0-922c-cb07a3214662.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        76.150.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:a9:76:7f:6d:c3:4b:ba:16:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=86efbcb4-e953-4d9a-97bd-664397294f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:c2:7d:29:30:0f:53:53:47:36:64:16:2b:
                    bc:cb:7a:9c:ea:c0:1f:68:19:8d:63:07:16:7b:ff:
                    f0:38:d2:67:3d:c3:f9:e3:42:c6:bd:cf:60:82:57:
                    7f:df:4f:11:21:2f:9d:11:59:29:3f:1d:4f:f9:2f:
                    6f:a7:ed:29:43:5e:af:27:c9:05:1a:3a:81:dd:5a:
                    d4:c2:f9:f6:d6:b6:cc:8e:f0:d6:60:7b:16:fb:1a:
                    45:94:19:37:4e:ca:7d:7d:b1:d3:03:7b:de:fe:65:
                    22:43:3f:e5:ae:b6:ac:c8:9e:79:75:23:0e:d8:27:
                    4e:36:27:1c:13:47:71:59:64:af:c8:25:83:e8:ac:
                    f2:8f:14:0f:51:79:69:a9:48:01:12:a3:7c:0b:d1:
                    45:6d:bb:c4:bd:a5:1e:23:37:9c:a3:9e:ae:5f:f9:
                    1d:7a:13:33:b9:43:ab:d2:c5:cc:8e:6c:73:2b:f3:
                    4c:58:49:34:c6:4c:e9:ab:8b:78:8f:aa:b9:37:e8:
                    56:86:46:12:9c:20:44:1c:75:ca:a8:06:9e:d0:06:
                    ef:63:53:e2:ce:2e:26:83:ab:3d:fd:24:d1:b8:54:
                    03:0f:a7:d4:57:5c:05:6c:2d:16:cf:19:47:bf:35:
                    41:ee:e1:82:85:7b:6c:66:7b:2d:f8:80:ce:8a:c0:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:36:5A:C1:4C:E4:50:C4:84:56:A7:C0:34:65:E9:FE:0A:0D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4e1c359-da7d-33f0-922c-cb07a3214662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.150.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:04:a0:37:56:b4:70:19:bd:b3:8a:48:99:d4:5f:3b:4c:60:
         0c:cc:d5:57:2b:fd:89:75:12:a2:70:83:2b:ea:76:bb:42:cd:
         ca:0f:d1:91:6d:40:e9:01:39:ff:b2:88:cb:31:93:a9:ee:08:
         1e:ec:91:6f:62:2e:3f:07:a3:30:ec:1a:d9:e2:35:2c:a9:bf:
         1d:b0:6a:ea:53:05:2e:82:0b:42:f4:89:3c:7b:1f:4e:80:39:
         a2:af:9e:ce:fa:08:40:49:af:3d:2b:93:82:52:b0:4e:ee:98:
         76:4a:de:67:89:a0:6b:41:aa:89:16:13:e9:1f:14:61:d8:88:
         08:d8:b8:d7:c8:e8:d0:bd:e5:91:40:df:eb:f2:3f:07:d2:fa:
         58:0b:3d:ea:99:bf:a2:92:f8:3d:cc:bc:eb:76:12:1c:08:20:
         43:6b:d0:6e:40:67:6c:17:78:72:a1:88:d6:04:f2:00:ba:30:
         0c:f1:a0:77:a6:f4:ce:99:59:09:73:01:a9:ef:26:25:d8:bd:
         12:08:3e:57:9c:64:ec:f3:91:4e:7b:ac:47:0d:0b:5c:c0:ea:
         7c:c1:56:fa:da:62:05:5e:5d:38:3d:66:54:80:f5:14:bc:e7:
         08:82:05:41:86:fc:ea:a1:4f:0c:1b:d9:7a:5a:fc:a8:2d:f3:
         d4:74:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:15 2026 by rpki-client