Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4596f71-721f-31d8-af1e-9da99e45910e.roa
File:                     d4596f71-721f-31d8-af1e-9da99e45910e.roa (raw, json)
Hash identifier:          UicFPzMpLXeRoeUidAoCI+uaSqwWb+K1HqPcKWQFKzA=
Subject key identifier:   4C:FF:63:56:D5:D0:5E:7E:0A:DA:92:9B:79:4D:BD:8A:64:BD:7C:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58C008F5D0565715D74360
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4596f71-721f-31d8-af1e-9da99e45910e.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        67.164.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:c0:08:f5:d0:56:57:15:d7:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=944518c9-8234-499c-931a-6a2195822717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:4f:b0:8e:e4:5a:7f:58:0a:a9:56:3d:32:
                    05:a5:f9:e4:95:df:ad:42:c1:30:ac:fd:d9:68:8c:
                    b6:f5:6f:ca:44:e5:7e:d6:8a:ec:f1:a6:54:15:72:
                    23:fe:3d:d2:82:a4:bf:4b:f5:6d:c4:ef:73:92:6a:
                    35:4f:47:e1:cd:b1:79:f3:60:3e:bf:21:70:cf:d0:
                    5f:ff:3f:91:7d:db:4c:da:b7:14:b4:1f:79:8a:00:
                    89:f8:b0:c3:18:37:d0:40:c8:ff:a8:77:4c:4c:8d:
                    00:6c:f8:87:9a:de:a1:e8:33:e9:dc:76:dd:c3:92:
                    9a:fb:46:85:8b:0c:d4:fe:30:e0:f5:b1:ad:00:df:
                    34:3d:8e:1d:24:7d:f5:46:e3:d7:bb:a1:3e:e6:5a:
                    d4:64:4f:28:da:0c:e0:90:56:29:a4:30:c8:11:91:
                    81:1a:db:13:85:0c:eb:29:fe:cd:af:c3:3e:1a:bb:
                    c8:30:6c:6c:95:b2:31:36:cb:95:5b:1a:f0:15:e5:
                    7f:a9:2b:d8:19:78:00:ec:08:b4:bf:6b:24:9a:cb:
                    b2:4a:d8:94:36:c3:7c:16:f8:39:cf:f8:f9:45:a1:
                    1a:97:67:c5:8c:c6:d7:d3:d0:b0:72:18:7f:4d:55:
                    d3:f0:02:8b:d6:aa:ca:12:51:68:ad:b6:c6:01:6c:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FF:63:56:D5:D0:5E:7E:0A:DA:92:9B:79:4D:BD:8A:64:BD:7C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4596f71-721f-31d8-af1e-9da99e45910e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.164.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2f:1a:55:77:8d:5b:16:d3:83:3f:2f:fe:f5:c2:61:32:b1:
         4e:63:e6:9d:84:97:fb:9f:99:98:e6:5d:bc:dd:2b:aa:29:41:
         66:6a:d7:e9:d4:c1:b6:98:ad:d7:39:cb:56:e7:71:6a:55:d3:
         36:ad:b1:21:07:d7:07:37:77:d7:de:bf:d9:b0:6c:88:b8:fc:
         b3:09:dd:3e:9b:f5:91:5e:6e:10:06:24:f6:96:2a:fe:3c:b4:
         0d:aa:c2:d1:44:27:a9:49:24:47:99:fb:17:27:b7:85:75:4d:
         cb:02:25:69:c0:6c:0a:f7:24:5e:1b:55:34:a6:d3:74:19:13:
         b1:81:08:e9:e7:fb:3f:32:99:94:d1:b9:4c:32:b9:8e:84:62:
         37:15:13:18:a0:ae:c0:c8:1b:65:00:66:be:be:18:d3:5f:73:
         57:bb:9b:e8:9a:d6:1b:1c:d6:f0:6a:2d:d9:8a:97:3d:7b:d4:
         15:2d:bb:08:3e:3f:e1:fa:53:db:98:b4:f9:68:c1:38:5a:4f:
         a3:11:c9:3f:eb:66:84:af:7d:4c:84:ff:39:10:39:9f:d5:72:
         ae:6b:da:f9:b7:4d:0a:68:34:73:6f:f2:f9:e6:91:d4:a7:d5:
         21:cc:d8:e0:c8:00:ed:22:4b:58:39:aa:37:fd:e1:f7:ef:7b:
         8b:49:f6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:39:37 2026 by rpki-client