Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82fe0ce-211d-3c49-8c26-377a83c31ab6.roa
File:                     a82fe0ce-211d-3c49-8c26-377a83c31ab6.roa (raw, json)
Hash identifier:          CqGmhmltjEoFo0VnDdya7yNlUAShf6ZvPnMUg6FMfyM=
Subject key identifier:   87:E1:E7:8D:19:F6:C2:9E:02:B5:FF:4E:9E:C4:F7:5A:9D:0E:E3:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC979F63648905DB4EFD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82fe0ce-211d-3c49-8c26-377a83c31ab6.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        76.31.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:97:9f:63:64:89:05:db:4e:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=7ab87408-0ae7-4d65-87dc-9e893532509e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:7b:a7:9b:d9:26:44:c3:2c:04:02:fd:19:
                    28:24:9d:27:cc:0c:51:7b:95:c2:0a:da:b6:3a:3d:
                    aa:00:40:94:cf:de:81:db:34:c9:8c:c9:1c:f6:6b:
                    73:0e:15:7d:63:92:8e:db:7a:58:0c:f3:7a:11:7b:
                    c0:19:a3:79:be:08:6f:9f:e5:de:df:dc:d7:64:1e:
                    2e:3c:f6:d8:b7:51:4b:07:d5:03:25:7b:27:78:79:
                    1d:b9:be:94:28:97:e8:3b:66:08:cc:08:50:c0:16:
                    7b:95:0a:4e:93:e6:50:76:31:65:51:1f:55:42:89:
                    bc:6c:9e:2d:83:de:be:bd:6c:1b:2f:f5:6d:8a:65:
                    7d:39:8c:97:fd:75:bd:a7:19:93:02:77:47:4f:69:
                    3b:56:47:bc:37:84:1f:ff:5f:54:d2:6c:01:64:95:
                    75:26:a5:0c:a8:10:f5:a9:47:3f:45:ae:b6:be:52:
                    c7:af:3a:92:59:af:3d:e6:8f:ee:f6:48:25:68:99:
                    e2:39:12:4f:d2:84:ef:82:09:ac:a2:96:cf:8f:e8:
                    e3:b8:4f:43:a3:01:64:66:e5:de:25:af:43:28:c3:
                    c2:58:45:cd:da:1a:cc:b9:21:64:62:4d:63:b8:19:
                    de:6e:ed:a6:0d:4c:c0:3c:5c:90:a4:06:84:a0:b8:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E1:E7:8D:19:F6:C2:9E:02:B5:FF:4E:9E:C4:F7:5A:9D:0E:E3:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a82fe0ce-211d-3c49-8c26-377a83c31ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:01:39:62:1a:20:14:fd:08:83:3f:8f:a0:ed:f7:e2:62:fd:
         84:d3:70:51:9e:65:3c:e8:bd:87:ac:82:ca:89:cb:6d:49:28:
         b0:d4:b6:de:c9:a8:eb:10:96:5d:f7:ec:00:d9:71:0e:b7:6c:
         ee:29:21:3b:09:67:53:7e:90:c7:cd:6c:8f:be:8c:ab:8f:1d:
         f2:29:5e:8a:e6:27:4d:de:46:35:4a:85:92:79:ea:c4:22:d8:
         f3:70:2b:30:b8:4c:2d:89:7d:b0:d2:d7:40:47:a5:96:84:a7:
         42:03:bc:1e:48:b9:fd:08:44:0f:5a:bc:80:f9:44:82:a0:8d:
         20:a2:bc:1d:24:2c:21:dd:03:31:41:45:2a:25:38:78:71:5f:
         5b:4a:f5:b2:3b:22:09:b7:b5:6e:ca:d2:81:18:51:26:ad:31:
         84:a4:68:c4:30:46:58:bb:cf:a2:34:66:64:dd:b8:ac:b7:34:
         3a:83:4d:f7:a7:a5:90:77:a2:bf:ee:77:96:5d:fc:88:70:68:
         c8:84:40:86:cd:1b:37:ab:9d:51:8a:3c:67:12:69:0c:29:a4:
         d7:da:3f:d1:f0:da:0e:49:6f:3b:da:f1:2b:2e:72:bd:6c:e6:
         60:4a:c6:bd:c6:30:8a:e8:84:e7:b2:40:bd:c2:34:f8:26:20:
         11:7c:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:00 2026 by rpki-client