Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32f9676-06c8-3d12-8a3c-b4c42dbb6ee3.roa
File:                     d32f9676-06c8-3d12-8a3c-b4c42dbb6ee3.roa (raw, json)
Hash identifier:          GefOfgOxDLM+aNAz5lhbssqeFVgSSMLRKfBCHcSQs44=
Subject key identifier:   26:95:F0:51:A5:FA:9C:04:50:DB:92:59:E2:5E:1E:E3:FD:0F:2C:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5DEA698A3C57DB7D22EFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32f9676-06c8-3d12-8a3c-b4c42dbb6ee3.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        76.102.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5d:ea:69:8a:3c:57:db:7d:22:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=b6e28fd2-f8c9-4d74-bd12-5a9268fbae8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:79:8b:52:44:67:56:c1:ff:1a:7a:53:c4:
                    00:d9:a2:10:76:3a:52:a8:8d:ba:e7:f7:4d:7c:d1:
                    59:2e:2e:35:bc:6b:9f:48:5b:0f:3b:d4:54:82:40:
                    97:8f:68:b4:dd:79:a2:be:26:ac:b6:91:22:98:a2:
                    8b:7b:45:52:9e:a2:38:aa:1a:ea:80:f8:94:f3:33:
                    5f:89:d7:83:f5:43:e1:49:8e:8b:01:5a:d5:b3:cc:
                    89:6a:25:b7:fd:ab:b9:e5:74:e0:26:06:d4:5a:33:
                    e0:dc:8c:d5:31:94:d8:69:96:52:b2:72:65:70:d8:
                    99:e1:6d:b5:70:55:c6:1f:a3:47:09:94:c6:fb:59:
                    28:d1:01:3a:8a:bd:4c:27:65:df:92:46:13:fd:ed:
                    33:91:0e:85:86:8a:57:df:9c:0d:35:77:52:17:e9:
                    b5:56:64:90:21:6c:46:0a:8d:f2:7a:1b:2c:da:ed:
                    c5:99:c2:23:ae:1f:39:87:ab:bc:78:cf:36:ce:96:
                    85:bb:4f:ad:52:88:44:43:76:7e:6d:ae:62:e3:f5:
                    68:e1:5b:63:67:10:fd:c8:0e:4b:1a:0f:ac:6f:40:
                    b2:b6:be:c5:b9:19:38:2f:2a:5b:d6:5b:a5:73:21:
                    df:66:b2:ea:eb:46:86:77:32:2e:14:f0:bc:1e:d1:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:F0:51:A5:FA:9C:04:50:DB:92:59:E2:5E:1E:E3:FD:0F:2C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32f9676-06c8-3d12-8a3c-b4c42dbb6ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.102.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:4f:b0:04:70:bf:19:7b:b0:5b:8e:79:8d:0f:48:08:23:
         f6:4e:93:0b:e5:94:eb:b0:15:5a:0a:ad:62:db:54:75:0a:89:
         a4:9b:d6:9a:a7:85:09:bb:60:e1:76:e6:a8:77:a8:04:dd:9b:
         a1:40:16:52:a3:85:a6:da:76:6d:37:91:a5:5d:97:3b:39:a7:
         ff:c1:ad:64:38:9d:5b:28:ea:6c:aa:50:69:44:fb:ea:d9:01:
         77:35:01:21:c4:8b:c0:b2:64:e4:e9:0c:39:33:ef:0a:15:f8:
         26:ab:72:b4:44:2d:d6:74:cc:45:4b:c1:ed:aa:3f:79:98:11:
         be:44:da:26:00:eb:89:66:0b:44:01:82:76:21:3f:22:44:a8:
         b7:f4:2d:18:0f:ce:74:ad:08:b5:02:88:d1:8c:48:f6:e5:27:
         5b:50:11:60:a0:67:bb:70:43:7f:fc:74:2e:2b:38:5d:db:0e:
         01:33:b4:2d:72:a8:37:e4:f4:d3:30:97:2a:0a:58:92:00:55:
         eb:ae:1b:21:58:c5:57:cd:c2:0e:38:67:ca:2f:48:e4:ff:e9:
         10:d1:49:29:90:5a:b7:a7:f3:8e:cc:73:c6:9c:7e:8f:a0:7f:
         b4:64:7d:66:de:5d:3a:28:31:3d:b0:0f:f1:3d:1f:04:cc:0f:
         a0:a4:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:27:33 2026 by rpki-client