Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b455349f-29ab-3daa-a329-a40da18e0e82.roa
File:                     b455349f-29ab-3daa-a329-a40da18e0e82.roa (raw, json)
Hash identifier:          LW8QmA1LPf48t+7yt1gQcLLMTj8Zhk8nJ1w29LV0q/A=
Subject key identifier:   CD:37:85:19:5E:0F:58:F1:D3:2E:DC:41:CE:F2:98:7F:AA:99:9A:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85EA51C62D9860969B9740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b455349f-29ab-3daa-a329-a40da18e0e82.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        76.122.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:ea:51:c6:2d:98:60:96:9b:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=3f8df159-c911-4594-a63c-aa6cae025f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:02:d4:2e:47:3f:32:c3:27:2b:9e:a7:16:
                    01:2e:d2:e9:1b:ba:2f:72:26:61:bd:35:67:4d:8a:
                    6e:7b:cc:54:c6:be:2a:5e:da:01:e1:ea:b8:f6:1f:
                    53:a3:e8:cc:f0:59:a3:e9:64:6c:75:29:90:9a:ce:
                    06:39:05:cb:4b:a6:04:14:51:97:0a:02:b4:4d:13:
                    83:1a:62:a2:2b:d2:0c:b4:f5:e2:a3:76:9f:a7:c6:
                    dd:2f:5b:ae:b1:67:a9:7f:17:5d:a5:34:68:cc:ef:
                    7e:88:40:67:45:06:b3:32:25:fa:ad:27:56:7e:2d:
                    60:da:d4:ab:02:9c:72:3c:1f:24:3e:d0:b7:80:8f:
                    23:21:89:30:28:ed:c2:7c:49:ca:73:fe:1e:10:37:
                    e6:b4:1e:3f:06:86:9f:6c:83:90:9c:0e:8c:81:25:
                    00:3f:4c:0d:ed:84:fd:80:15:09:29:d1:0d:c8:ce:
                    8d:d6:da:52:ae:17:93:e5:39:19:13:62:60:b0:58:
                    1a:38:b4:c9:5d:df:ce:cf:95:9c:29:11:7a:dd:33:
                    f6:37:08:10:a8:2a:3a:df:21:c4:99:e2:22:08:f0:
                    77:da:f0:c6:d7:b1:fc:65:88:c2:ff:96:fe:47:b9:
                    27:26:4b:24:77:b9:37:06:72:a3:df:dc:08:f9:70:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:37:85:19:5E:0F:58:F1:D3:2E:DC:41:CE:F2:98:7F:AA:99:9A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b455349f-29ab-3daa-a329-a40da18e0e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.122.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:c7:ce:44:d7:99:03:24:25:2d:85:50:fa:d3:f9:b0:78:1e:
         be:6a:99:dc:1c:10:b5:2b:03:ab:0a:09:9f:b8:35:13:8d:6a:
         9c:15:26:bb:18:12:9f:05:6c:aa:20:d1:4b:06:64:28:18:02:
         75:96:bf:f4:d2:85:1c:f0:bb:46:eb:34:2d:ff:b5:5b:cc:3a:
         f9:76:26:85:9d:4c:f3:7c:57:ce:47:2b:6f:38:df:78:98:af:
         5a:67:79:d1:fb:99:ec:7c:09:b9:b7:b8:0d:8b:79:e6:c9:91:
         95:7b:6d:56:d7:eb:f1:5c:96:c2:3a:26:2b:e3:5b:78:f4:cc:
         a5:75:df:32:17:5d:39:99:81:e3:a5:a8:f0:d2:b1:6a:a0:89:
         1d:bd:be:e9:52:a1:d1:c0:73:a4:13:88:a1:31:a3:e5:1b:44:
         5f:8d:d9:5f:47:12:16:48:9e:f1:d9:6a:8b:10:5e:78:ae:e4:
         77:a9:d3:2b:cf:77:7d:82:75:53:3c:18:19:ce:46:51:c8:41:
         de:24:0e:d7:c3:af:2a:4b:aa:75:66:fb:7f:e1:8e:53:1f:81:
         9b:02:65:87:58:72:09:a0:64:93:7c:16:fb:f9:b9:0f:f4:96:
         7c:ac:9e:6e:a1:ec:14:22:80:f9:f5:a1:79:3f:3b:8a:97:d6:
         20:d4:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:44:41 2026 by rpki-client