Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9006fa-85cb-3bf6-9e03-4c94f96b985c.roa
File:                     cf9006fa-85cb-3bf6-9e03-4c94f96b985c.roa (raw, json)
Hash identifier:          WI/K25u4cMOL2AomqM3KCwlzjNCcq7voLus3MbbhOIQ=
Subject key identifier:   27:CA:DC:F2:F1:EB:A0:7D:3F:32:22:A6:9D:D0:8E:A1:36:02:05:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85E083E16BF747E5E47B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9006fa-85cb-3bf6-9e03-4c94f96b985c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22909
IP address blocks:        71.228.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:e0:83:e1:6b:f7:47:e5:e4:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=839a6b2a-ffae-4017-9fca-a9a653e55290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:60:88:cd:a9:de:10:4a:71:f8:e8:f0:9d:
                    91:70:4a:ba:d1:15:ee:4d:9a:91:f3:d3:cc:b6:3b:
                    cb:a7:7b:87:a1:ea:27:9f:39:68:a4:9d:0f:6f:c6:
                    97:6a:e4:03:ec:aa:c0:6d:df:51:4d:89:c5:07:d8:
                    93:e7:d7:47:bb:d5:fe:dd:b6:8a:5d:5a:bc:ab:c1:
                    4c:18:8f:63:f2:71:ca:8d:d1:3e:fd:ff:2c:c9:e3:
                    fd:81:6c:95:ab:1f:36:13:2a:fd:25:40:46:d5:19:
                    9d:16:fb:1f:9c:27:19:bd:e0:85:ee:fc:66:cb:44:
                    b0:86:db:73:cc:5e:c2:7b:00:6f:eb:a0:1d:cb:64:
                    da:4c:d0:80:80:30:13:da:85:ce:a0:04:7e:c4:e2:
                    7d:b4:3b:72:1d:2b:b9:60:cc:f3:f0:2a:7b:41:cc:
                    ce:e0:1b:e9:35:54:70:66:b3:ef:68:48:2c:e1:c7:
                    c9:31:71:3c:9d:d4:c1:17:06:8a:fe:6d:e9:81:ce:
                    24:54:9d:59:33:f2:f9:93:42:42:84:5f:55:95:a9:
                    07:80:86:97:46:05:d8:e7:f1:87:7a:9a:1d:57:97:
                    28:4d:3e:b0:9e:3e:c2:ac:48:96:43:f5:02:c9:49:
                    d1:86:ff:50:03:04:91:a8:ee:2a:79:41:53:b9:48:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:DC:F2:F1:EB:A0:7D:3F:32:22:A6:9D:D0:8E:A1:36:02:05:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9006fa-85cb-3bf6-9e03-4c94f96b985c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:29:1a:02:49:69:5f:7d:6f:b5:f2:4a:e5:40:7d:3f:8e:
         ce:42:ec:c2:ac:4b:d2:d2:ab:92:f8:3b:c6:cc:a1:35:1c:9c:
         3d:88:2c:9a:88:82:20:52:c5:d5:36:df:d5:67:60:75:84:02:
         05:20:24:a2:b9:90:78:02:d9:07:83:da:4b:79:92:76:be:79:
         e4:06:56:10:14:d3:28:33:38:07:56:98:77:88:de:6d:24:89:
         4a:1e:66:15:00:d1:3f:95:e8:f8:d0:67:b2:99:98:c8:2f:df:
         bc:6a:6c:d4:99:7d:ce:8e:71:ff:79:f6:1b:4f:84:67:ac:1f:
         c6:e6:9e:bf:43:17:c8:7a:5a:68:12:92:3e:1e:86:61:7e:04:
         ad:94:e1:ea:c5:51:7a:16:91:11:21:37:a6:5f:aa:bb:8c:4d:
         b8:17:27:4a:16:df:8a:56:2a:54:41:e9:a0:01:9c:66:ab:86:
         d5:67:00:12:69:af:b4:88:b1:fb:be:24:a6:c6:53:8c:4d:d1:
         85:e3:24:74:cd:e6:9e:12:b3:41:e9:f2:c5:1a:44:b5:2d:ae:
         84:6b:26:2c:ca:51:71:85:0a:02:8f:2a:07:dd:23:0b:c5:9b:
         6b:87:7a:a9:a7:fa:a7:e4:71:8a:f5:62:96:1d:44:ae:3c:66:
         4b:a6:fb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:29 2026 by rpki-client