Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c05f84df-d5b4-305e-9b5f-faf3e31deda2.roa
File:                     c05f84df-d5b4-305e-9b5f-faf3e31deda2.roa (raw, json)
Hash identifier:          csRDXOKJIDSWmnJXwFFN7Rf62OmcpUJVu7Zz5bVJLrk=
Subject key identifier:   DB:4D:AE:A0:42:12:3C:BC:6D:0C:40:16:65:1E:05:1A:2C:F3:6C:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81009DA39CC26DC3AF4BC440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c05f84df-d5b4-305e-9b5f-faf3e31deda2.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     33659
IP address blocks:        71.58.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:9d:a3:9c:c2:6d:c3:af:4b:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=d23af430-0ba3-4387-99dd-41476aedcff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:e0:f1:68:00:e1:b9:ff:8d:9d:f5:3e:d7:0c:
                    36:2a:1d:9e:a2:a1:78:72:f9:d3:4b:6b:b5:b2:05:
                    e8:3b:4c:13:2f:8b:e6:51:92:24:ed:27:52:5b:4b:
                    2d:97:35:d2:8f:a5:bf:83:36:f7:6c:64:59:9d:fd:
                    6a:45:6c:fb:65:ac:d6:28:49:38:9d:bb:b5:dd:b4:
                    65:35:35:64:67:c3:13:cb:ac:33:f6:b6:6c:d4:07:
                    64:71:58:6f:ea:37:b2:39:f9:a1:40:2a:3e:6a:42:
                    dd:44:db:47:9c:ec:c4:91:eb:31:c2:df:71:bd:9f:
                    c7:bf:9d:ad:7d:96:db:b5:9d:57:be:a8:cc:12:5f:
                    b7:34:ee:20:38:26:e5:61:61:29:00:1e:b5:80:23:
                    05:61:a9:ba:6d:b9:68:88:a7:70:9d:e5:72:9d:89:
                    33:e9:6a:a2:03:f5:7f:82:7a:03:34:f3:82:1c:bc:
                    5f:a4:9a:e3:98:6a:98:2b:01:3a:14:3b:49:fd:f8:
                    1f:52:d4:01:f6:97:e4:89:66:ac:76:99:7f:d7:a0:
                    a3:fc:93:f0:91:fd:5b:9a:59:47:7c:69:14:99:2c:
                    98:00:16:14:bf:9f:52:4a:c5:76:c0:96:58:11:9d:
                    b7:34:3f:50:bc:5e:d2:2b:07:c2:1a:5f:6b:75:35:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:AE:A0:42:12:3C:BC:6D:0C:40:16:65:1E:05:1A:2C:F3:6C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c05f84df-d5b4-305e-9b5f-faf3e31deda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.58.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ee:eb:58:f5:2b:e8:1b:c1:21:37:ce:ab:aa:b4:1a:ae:54:
         de:0f:9a:22:33:66:0c:71:c4:96:56:ca:5c:70:24:d8:0c:9e:
         d2:fb:59:5e:e4:84:05:13:fd:51:a9:45:2e:87:17:33:68:91:
         05:ca:04:9f:21:2e:c7:14:87:06:80:52:a0:b3:e4:5c:97:5d:
         77:71:e2:2c:69:5e:ba:fb:f4:fc:39:1d:93:c6:77:74:52:b2:
         e2:20:0e:fc:10:d1:42:46:36:fb:94:65:cc:81:be:8d:4d:55:
         be:df:47:79:ab:9c:12:f1:3a:60:df:e9:54:7f:85:08:a6:e4:
         b4:b2:92:92:c8:58:21:a3:fd:fa:d6:2f:4f:e9:0b:ba:01:3c:
         bb:14:c8:9c:a5:bb:2e:e0:03:49:39:ea:a6:75:90:3d:ee:d9:
         fd:f5:92:85:a8:1d:66:56:66:5c:dd:25:49:14:d8:ef:d7:26:
         0d:d0:9d:6d:ea:11:10:ee:60:7b:8d:8c:5c:4b:cf:4f:2c:c6:
         73:c0:43:0b:89:f6:73:60:c7:88:c1:75:37:46:bf:85:ef:64:
         5e:7f:d0:64:66:d4:b2:4f:84:81:9b:48:bf:d2:fd:6f:d5:62:
         72:cb:ae:88:4f:f4:46:15:42:64:cb:e1:3b:7e:77:9a:c0:8c:
         24:34:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:28:08 2026 by rpki-client