Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa
File:                     dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa (raw, json)
Hash identifier:          tvGXUBYuO/c5bpnJ57Z5a0tW0hsoqjX2rn8hGPVN76w=
Subject key identifier:   FD:8C:35:D2:39:8C:A1:DD:6E:9C:6A:08:28:9D:B4:50:4D:CC:2E:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE861A1226DDC2B319E1C560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     20214
IP address blocks:        76.137.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:1a:12:26:dd:c2:b3:19:e1:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=bb417eb6-da9c-4e0d-94bf-c4eb3e73fc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:93:ce:63:da:da:ae:72:56:7b:23:b5:22:
                    c7:c9:b4:de:e3:07:7b:bf:96:2b:87:27:3c:b8:34:
                    38:9e:88:f5:aa:24:ae:5e:8e:11:13:bd:de:3a:24:
                    f4:8b:57:3e:4b:59:2c:ce:31:2f:3f:49:c7:9e:79:
                    ec:54:0d:6d:0a:2a:1e:87:b2:5d:52:07:5a:d6:e8:
                    56:b7:81:00:fb:24:32:f6:7b:8a:01:b4:1b:6d:42:
                    c6:4c:97:0e:f9:1c:ab:78:52:43:c3:e5:c3:50:c1:
                    a4:0b:81:f1:81:5d:4b:dc:b3:2b:fb:a8:73:50:35:
                    47:36:87:47:60:2e:e8:a4:67:15:90:1d:6c:b2:ce:
                    67:81:74:1a:64:e3:ef:1f:e0:15:2a:28:67:9e:72:
                    f4:ed:05:7f:fc:37:1b:f3:4a:b2:c3:10:12:c0:d1:
                    86:91:0b:ef:86:93:0b:d4:3c:8c:43:28:44:23:36:
                    6b:05:eb:2f:35:a7:cc:e1:a6:71:f7:9c:d1:f6:46:
                    35:ad:63:cb:0a:e3:9b:da:8d:e3:48:00:87:16:e6:
                    84:1c:7f:2c:97:be:94:69:2a:b3:03:b7:6c:b9:27:
                    1b:99:ae:04:9d:4a:57:91:28:fb:5c:d8:c6:f4:fa:
                    07:b5:1c:47:23:43:c6:93:d4:88:5d:b9:f9:b2:cc:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8C:35:D2:39:8C:A1:DD:6E:9C:6A:08:28:9D:B4:50:4D:CC:2E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8a6cbb-5431-3b81-adb4-5b606f3ed38e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.137.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a1:8d:c3:ac:d1:26:72:1d:c6:82:2f:cd:93:25:d5:91:2a:
         36:be:b7:fb:f8:10:03:b0:8c:a1:8d:1a:ba:aa:97:ee:0b:a4:
         73:22:9b:c7:b8:5a:c1:86:2a:3e:9e:1b:be:2a:6b:b5:36:c3:
         e3:55:59:4a:46:e0:5e:81:d2:85:c6:7b:f8:44:eb:2f:73:31:
         26:04:d6:8d:18:00:a7:da:57:ed:c1:29:e2:e0:10:78:18:20:
         6a:3d:08:39:76:c1:06:d7:5e:10:e5:bf:43:43:f6:18:61:48:
         b8:c1:7d:b0:c7:2b:35:7b:02:3f:f2:c7:af:40:2e:9d:3b:7c:
         70:40:50:90:3e:6a:cd:b5:e8:42:cf:82:2c:ae:46:1f:20:a7:
         01:7a:b3:f2:8e:c9:bf:aa:a1:fd:f8:12:71:c4:53:e5:30:f5:
         3a:bc:3f:c8:7b:f5:a3:dc:1f:0b:a0:c0:d4:ed:79:ea:f1:6b:
         1a:63:d1:99:b9:47:b7:b8:59:62:da:4e:78:88:8e:95:dd:f9:
         12:fc:74:62:27:44:2b:34:bd:7c:5c:49:e4:04:b1:21:cc:dd:
         88:20:7a:6a:f5:c3:32:23:f0:8a:49:80:6d:35:76:9d:8d:e4:
         7c:b9:83:64:ae:e3:93:c3:ad:0c:d4:ec:60:a3:23:15:c8:45:
         52:9c:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:16 2026 by rpki-client