Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11354e9-9865-34a9-83c3-7c9bb68b1480.roa
File:                     b11354e9-9865-34a9-83c3-7c9bb68b1480.roa (raw, json)
Hash identifier:          GlVFVeYs3HxhG9Hl1C+go6cNGKmbdEZWCc5pRps0k40=
Subject key identifier:   E6:7F:17:DC:5E:C1:76:C0:D2:29:0D:55:4C:DB:7C:5B:9E:DD:F7:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAA2204B82116536952CE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11354e9-9865-34a9-83c3-7c9bb68b1480.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        71.234.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:a2:20:4b:82:11:65:36:95:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=cbe8d4c0-7739-48c7-86f3-71c871c6455e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:a5:52:21:a1:f0:32:d7:ee:9f:d8:95:27:
                    1f:1f:da:49:b6:ef:f5:c8:1b:f4:25:97:9a:32:34:
                    d5:b7:98:f5:7a:5e:2c:96:91:6c:be:70:55:c7:0a:
                    1c:4c:2b:47:39:f8:e1:84:c5:95:ab:e0:c5:56:f6:
                    bb:9b:aa:30:8e:5a:73:ee:b8:50:68:f0:80:e6:16:
                    66:4c:a1:46:ef:56:7e:d9:0d:84:c3:04:5f:f3:b6:
                    8b:e4:60:f7:0c:ed:df:7d:03:9a:7a:c5:4b:d5:21:
                    10:f2:81:3c:81:32:f2:49:75:88:5f:76:18:38:57:
                    a0:da:05:b9:b0:fc:73:80:ce:60:3f:44:ef:1a:5f:
                    b9:8b:5d:40:7c:4b:37:51:fa:57:e0:72:f3:0d:03:
                    2b:dd:10:3a:47:4b:b8:d8:92:a4:83:95:be:a3:da:
                    4c:40:17:a1:46:9c:b7:e0:be:f8:a7:ce:ad:4f:8f:
                    ce:b2:e4:78:0c:7f:dd:5e:66:f3:dc:1e:98:e1:2c:
                    e9:06:2e:c3:d7:90:4f:90:f7:93:52:85:71:dc:d6:
                    89:e5:6f:42:c4:78:04:a4:0d:50:0e:ca:a2:dd:35:
                    c6:ef:72:eb:9f:32:ba:0e:19:0b:3c:5a:97:b0:3f:
                    b1:22:00:3a:42:42:65:7c:3e:84:aa:fb:36:00:e0:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7F:17:DC:5E:C1:76:C0:D2:29:0D:55:4C:DB:7C:5B:9E:DD:F7:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b11354e9-9865-34a9-83c3-7c9bb68b1480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.234.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:cc:8d:8d:3a:36:8d:c2:aa:58:8f:8a:ec:43:a7:39:b1:
         71:1a:03:45:6a:13:a4:d5:74:a7:5f:1c:4b:d8:3a:19:26:83:
         2c:65:94:74:bc:e3:cd:14:2f:e2:68:ab:0e:b8:6e:ae:63:63:
         04:a2:32:e5:cd:7e:2a:a1:a4:18:7c:56:7d:2a:91:b0:6c:56:
         38:d4:f3:3b:2e:95:8f:58:7e:b2:26:36:04:a8:e8:df:e8:71:
         d6:34:a5:9c:85:d8:7e:3e:cd:82:98:50:64:f7:d2:2f:84:00:
         dd:07:87:7a:55:df:cc:00:ef:00:7d:b2:9d:dc:27:13:57:f7:
         f4:44:2f:62:83:5c:a9:65:28:e8:06:7a:68:36:65:a6:17:ba:
         7a:f6:f0:ec:c6:ea:e3:63:99:d7:a4:fa:42:e4:a0:ff:af:ee:
         88:ce:b1:73:b8:38:f3:0b:c4:92:78:f0:4c:cb:b9:26:a7:22:
         0c:10:d8:3a:90:11:7a:b6:8a:f5:fe:1c:eb:ab:b9:40:11:4c:
         6b:84:de:01:2a:53:6f:a4:ac:78:67:44:27:66:a9:26:39:50:
         d8:31:5d:48:86:ad:68:f2:82:e0:02:7d:e8:b9:6a:64:ff:6c:
         66:16:78:07:b7:91:da:f3:c2:6a:69:76:ef:5d:02:c0:96:49:
         c9:87:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:32 2026 by rpki-client