Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd35b590-f148-3166-8c3f-2cee0a06dfed.roa
File:                     dd35b590-f148-3166-8c3f-2cee0a06dfed.roa (raw, json)
Hash identifier:          oF+YJ7bQDmHGmUT2GQu7HbBuIr2Q4JElloqYL4SQOCs=
Subject key identifier:   EC:FA:7B:0A:13:FD:19:F8:D2:06:96:7F:50:2D:EC:A9:23:24:09:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52437B1418092D2D2C0DCD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd35b590-f148-3166-8c3f-2cee0a06dfed.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        75.64.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:7b:14:18:09:2d:2d:2c:0d:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=a3fdc53d-7d81-48d5-a958-eb86adc3fd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:19:ba:4a:a8:b1:15:05:f7:09:8e:88:33:
                    26:86:e8:a1:a3:8d:fc:5b:b9:0d:c8:35:39:4f:bc:
                    99:0d:14:1c:9c:8f:8d:81:8c:6e:22:cb:f2:00:71:
                    aa:dc:d3:68:fe:ba:48:0a:81:22:d1:24:b9:ce:78:
                    89:ac:91:dd:be:0c:13:0d:59:17:f9:dd:77:57:96:
                    7c:6b:e7:d5:54:ad:f4:8a:32:2c:d4:88:a2:71:b5:
                    9e:65:7b:3b:88:cf:7d:e5:b3:18:65:a8:4e:a1:c7:
                    a1:f1:7f:bf:93:2f:5a:e1:43:b3:b6:4a:d9:8e:25:
                    42:a3:51:e4:df:e3:db:34:b9:a0:81:7d:bc:62:b9:
                    94:52:af:fa:31:d5:15:ef:69:82:76:9f:6c:9e:51:
                    7c:2c:c7:89:6f:22:d5:8d:2e:0c:ee:6e:43:3a:e7:
                    f2:a4:d7:27:58:0d:d8:05:55:40:36:11:af:ff:b9:
                    14:8a:0d:63:af:36:a6:fd:0d:69:49:66:06:b5:b8:
                    c0:c8:8f:4c:21:9a:3e:31:b0:52:79:2c:a3:8d:3d:
                    1e:fe:b9:5b:98:7b:ce:91:96:c1:bd:bf:0e:7d:2e:
                    cd:ee:fc:5c:fd:cb:37:c1:f8:f5:5c:6f:ae:f1:3f:
                    a6:5a:c7:83:f0:df:bd:5e:ff:ff:31:a9:9c:8f:20:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FA:7B:0A:13:FD:19:F8:D2:06:96:7F:50:2D:EC:A9:23:24:09:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd35b590-f148-3166-8c3f-2cee0a06dfed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f6:0a:fb:ce:06:cc:73:3e:f3:94:c4:18:c9:57:cd:24:0d:
         9c:3c:9a:cc:9b:d1:8d:98:de:fb:8d:45:6d:3d:bf:04:f7:4e:
         d9:26:b5:de:86:bb:ba:7c:de:eb:4d:8a:21:13:4a:ef:0e:3b:
         35:52:69:8e:72:e6:bb:a4:4f:74:66:84:40:58:c0:31:78:62:
         fc:e1:0c:0d:5b:56:97:a1:79:e4:f5:47:67:7a:4f:71:07:89:
         44:b8:74:90:b9:26:db:70:c2:b9:af:ed:7a:59:4a:72:44:1e:
         8d:c6:ae:1c:21:91:8b:67:99:dd:55:31:3b:f2:b1:bf:2f:c2:
         f9:54:e6:5b:b1:dd:d4:73:6c:7e:dd:c7:fd:a9:1b:48:bc:cd:
         df:4e:13:dc:8d:cc:ca:a4:67:0a:79:55:aa:45:c8:74:df:f5:
         ab:4f:55:dc:3a:bc:b9:16:7f:13:f9:f7:e5:e2:5c:61:3c:bb:
         df:d3:c2:65:d3:bf:27:7a:bd:99:30:c7:e1:af:14:32:4c:9c:
         f8:97:b6:92:01:ba:5f:4e:80:3f:bd:66:aa:e1:3b:87:f0:39:
         f9:19:60:b3:1d:9e:b6:e4:d7:dd:ef:49:37:9a:29:46:61:01:
         77:8f:71:e6:2a:ca:17:2c:6a:01:d9:5e:45:7c:8e:99:07:26:
         45:a2:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:11 2026 by rpki-client