Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bb9928-60c9-35fd-93f7-7691a014b08c.roa
File:                     b2bb9928-60c9-35fd-93f7-7691a014b08c.roa (raw, json)
Hash identifier:          A5dVKHp86kHK+1vXC2KzhfnlPGO6FAf2ZSqMSEaN+sw=
Subject key identifier:   5A:34:64:45:47:25:94:6C:31:CE:BA:19:C2:51:CD:8F:39:92:BA:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BC24C23A25E1DB0E9D8700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bb9928-60c9-35fd-93f7-7691a014b08c.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        76.23.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:24:c2:3a:25:e1:db:0e:9d:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=62224804-ff58-4ef7-8db7-09b34e5ede61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:c2:b3:1b:b9:f5:f3:a5:d2:f7:d8:ed:81:
                    b0:a2:a5:dc:d0:d8:60:ba:46:96:0c:20:f0:82:5c:
                    ad:e0:7d:50:12:eb:63:3d:5b:52:30:31:99:3a:62:
                    c6:de:cb:30:20:39:ef:bd:dd:4a:c0:1d:97:bc:46:
                    6f:0a:1c:f5:75:46:36:a4:ff:19:40:1d:33:d1:43:
                    f5:63:af:44:76:54:d3:c7:49:2a:0e:2e:80:23:70:
                    52:b8:3c:dc:bd:96:c7:a0:64:82:7d:88:02:14:80:
                    45:c5:81:70:67:8d:3f:ce:cc:72:ac:9c:ae:7d:31:
                    fa:72:db:63:28:9a:48:4d:30:f2:53:07:48:ac:e6:
                    67:42:2e:5e:9c:48:f4:b9:bf:87:14:00:2e:9f:fe:
                    f6:9d:84:33:16:35:8a:c5:55:08:b5:70:33:ff:60:
                    86:15:ac:72:0e:b0:7d:43:dc:74:5e:3e:b4:8c:0d:
                    b2:90:b6:ee:2f:50:d1:1a:7d:0c:1f:63:e8:5c:4e:
                    14:21:88:4a:e4:39:f1:70:03:6c:b6:27:59:b8:d4:
                    a1:a3:5d:0d:de:93:44:79:16:83:34:37:30:b1:fa:
                    ff:16:88:1a:ac:3d:a1:98:c7:94:0d:2f:e3:9e:f1:
                    9b:f1:11:3f:62:85:0e:38:1c:86:39:e6:72:42:d9:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:34:64:45:47:25:94:6C:31:CE:BA:19:C2:51:CD:8F:39:92:BA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bb9928-60c9-35fd-93f7-7691a014b08c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:d5:07:20:ca:1d:9e:78:e7:bc:52:1f:2c:5b:40:ed:c1:ae:
         ea:c6:01:f0:bf:6c:43:a2:87:2d:d9:8f:f4:02:4e:44:c3:43:
         f2:6a:e4:34:40:45:b6:1c:f1:f7:79:5a:49:15:0e:a4:e0:e4:
         e7:af:d6:91:ed:6f:4c:ad:36:f1:6a:9f:21:43:20:74:4c:1a:
         4f:b6:26:80:e4:8a:8e:f5:d4:53:44:53:fe:be:35:67:be:b6:
         f8:3a:6d:bb:f7:9a:fb:ad:a9:75:07:c8:e8:6f:06:25:ec:31:
         85:69:cc:7f:76:01:73:ef:38:5c:77:40:26:3b:40:7a:2d:64:
         3b:a2:5e:03:68:79:d6:e5:2a:7b:61:8a:da:49:4f:84:ce:2f:
         54:8c:72:bf:df:af:c6:d9:ef:fe:37:52:d1:07:17:0a:99:59:
         dc:d4:63:be:28:b1:f2:54:71:bb:b5:e8:95:2f:e6:3c:69:f6:
         26:04:ad:5d:ce:68:8c:91:b6:32:c3:20:37:91:6f:fe:a7:99:
         4c:6d:76:d2:c3:3d:39:8d:d0:c6:20:9d:7b:44:de:02:9e:a2:
         85:43:9a:5b:c9:e0:0c:15:62:24:55:8b:08:a6:f9:e6:2b:3e:
         c7:3f:2c:b7:91:2f:2f:6d:b9:f7:07:db:d0:57:7e:d3:fb:ca:
         8f:0a:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:47:59 2026 by rpki-client