Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb78ef0-eaa5-3375-b23c-ca229154a110.roa
File:                     dcb78ef0-eaa5-3375-b23c-ca229154a110.roa (raw, json)
Hash identifier:          PxjSrLL8Xxg92y5PugkhNGNg99eg9woGKMpog86ybH4=
Subject key identifier:   88:3A:88:9C:5D:0A:C6:C3:F9:37:22:84:FF:25:5D:F7:7D:1C:99:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5900E2D2999BFAFBEB2E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb78ef0-eaa5-3375-b23c-ca229154a110.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        76.126.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:00:e2:d2:99:9b:fa:fb:eb:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=76623419-a8ba-41b9-b6d8-ca805cf9c98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:50:5c:e1:f8:0d:65:39:0c:91:5f:0d:0f:
                    ca:bd:0f:f1:f6:ff:ad:b6:1d:c1:b3:fe:8e:89:7e:
                    64:0e:7c:99:4f:3c:a2:9b:ff:a1:99:fc:e8:06:be:
                    46:a6:74:bf:1e:46:9e:85:bf:1d:ab:61:de:64:0e:
                    73:cd:22:a0:42:3a:38:49:64:75:2e:c1:68:74:6b:
                    0e:5c:09:43:b1:dc:b6:1b:7d:1c:68:de:37:ea:c4:
                    8d:0e:03:7b:1f:a5:ef:98:89:9c:ad:c7:e2:7d:6d:
                    07:63:50:5a:c9:07:e0:af:f4:3e:45:64:ad:a5:1a:
                    e8:9e:18:70:43:09:f5:90:d4:e0:55:9a:50:c7:87:
                    df:7c:25:88:d4:ba:f2:cd:94:d2:94:f8:a3:5a:90:
                    45:c3:5e:55:2f:7a:2b:3c:a1:93:ab:3c:5e:ab:1e:
                    27:81:1d:45:1b:4d:16:cd:7d:6f:21:4f:9c:d8:84:
                    42:87:25:b7:21:17:6a:5d:d1:84:c3:cd:14:c2:bb:
                    7f:9c:11:4c:e9:6f:52:43:3e:52:9c:4a:bf:45:fe:
                    2d:47:10:af:a4:b8:46:56:86:cd:33:59:ae:02:23:
                    ba:5e:3c:72:1c:9e:1b:ba:34:ae:f8:f9:9b:e8:94:
                    9d:55:5b:15:db:2c:c3:9d:fa:a0:dc:76:1e:66:1e:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:88:9C:5D:0A:C6:C3:F9:37:22:84:FF:25:5D:F7:7D:1C:99:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb78ef0-eaa5-3375-b23c-ca229154a110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.126.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:92:c1:9e:70:8f:7a:68:98:5d:ff:e1:f9:d4:3f:23:2c:2c:
         26:79:b2:d7:42:c6:1d:78:45:1a:c5:d1:d7:b5:74:44:18:97:
         3a:84:27:97:c7:4c:92:25:d3:30:3e:af:79:23:5f:3e:bd:69:
         06:e6:37:eb:8d:93:aa:a5:ce:d7:83:f6:ac:53:ff:f0:c2:7a:
         49:ef:b1:3b:47:c2:bb:12:88:79:56:70:8b:5a:00:46:ee:21:
         6d:7c:f8:67:91:1a:ce:2f:bc:07:2c:4b:e2:e8:ff:ae:73:f3:
         ef:2b:bf:7f:f2:a2:57:86:ae:de:fb:b9:42:fe:a1:7d:96:7d:
         28:23:a9:92:8f:1d:71:aa:79:a4:5d:88:61:94:74:2a:69:0b:
         b7:b2:2b:cf:2c:8b:e9:02:cc:06:0b:46:19:29:7a:51:10:be:
         9e:72:6d:3d:82:d6:0e:b3:a5:cc:b5:4c:91:06:39:bb:89:ce:
         5d:e8:cf:0c:d7:fc:bc:fd:da:26:09:e8:96:b8:4e:27:fe:b2:
         61:ff:3b:8e:0f:51:e8:65:7f:9c:4f:1a:e1:4f:eb:7c:65:83:
         a6:b0:fc:5b:b3:c2:ce:03:c9:53:61:d4:69:07:9b:31:c4:4d:
         10:04:8e:db:91:9f:4e:22:a7:fa:c2:16:28:1a:fc:ba:9f:79:
         9b:68:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:50 2026 by rpki-client