Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de99c600-bd39-3474-867e-c5f7d78d0707.roa
File:                     de99c600-bd39-3474-867e-c5f7d78d0707.roa (raw, json)
Hash identifier:          ldGyP94ZFJ+zW2oxpyMGGr/aBRZR+ug+sjSTpPeKDA8=
Subject key identifier:   47:1C:E6:52:DA:CE:CA:33:7D:E5:63:2A:9E:D0:D8:26:2D:38:59:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81009C5EE641D50843E9F600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de99c600-bd39-3474-867e-c5f7d78d0707.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     33287
IP address blocks:        69.249.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:9c:5e:e6:41:d5:08:43:e9:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=8e2e7378-9cba-48a7-a49e-67db56baebe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:e0:11:45:b8:b7:43:e8:47:9c:2d:40:74:
                    13:b3:8f:e4:c4:b5:b1:ca:ab:53:f8:cd:db:09:49:
                    f7:0d:3b:b6:73:40:ad:2a:5e:40:e7:dd:d2:65:bd:
                    2b:cd:7c:d2:7d:f6:ac:8c:40:01:28:74:ab:88:08:
                    95:38:66:d3:5a:36:12:d4:59:07:c0:e4:29:ad:fb:
                    1d:e0:f5:d8:b0:06:7d:d4:ee:a1:a3:f8:b0:8a:82:
                    fb:c4:fe:71:bc:66:b4:bc:f9:c2:82:ae:86:c7:ca:
                    5c:da:01:21:bb:85:66:49:b1:f5:f4:6c:c3:5a:5d:
                    4e:42:13:27:ba:4e:24:84:e3:bf:8b:c0:a5:08:cd:
                    6f:b9:ef:de:7c:fb:6c:69:10:cd:a0:05:a4:16:96:
                    b9:78:c2:f0:25:0f:53:36:19:ac:5b:0f:f8:f8:ec:
                    91:05:5c:9d:59:75:10:7e:81:92:19:d9:b7:b6:81:
                    28:05:e4:01:55:f4:db:f9:cd:cc:d8:7f:d2:00:86:
                    1f:cf:9d:16:4f:ba:e0:72:01:31:5f:ae:97:49:64:
                    5e:5f:18:e4:29:59:60:db:bc:82:9f:f3:b5:3e:fa:
                    6c:37:df:95:bd:8c:43:36:ec:92:72:ad:f0:cd:31:
                    d9:d1:cc:4b:75:45:df:2d:a2:29:36:26:b2:89:1b:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1C:E6:52:DA:CE:CA:33:7D:E5:63:2A:9E:D0:D8:26:2D:38:59:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de99c600-bd39-3474-867e-c5f7d78d0707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:99:9d:60:65:f5:b0:d0:93:7a:a4:d2:55:20:bd:f5:6c:b0:
         e2:57:ad:64:96:96:a2:6b:52:a8:60:0c:39:03:73:ae:5f:d4:
         a6:fe:7c:cb:69:72:67:c4:cf:39:0d:4f:f1:39:bf:78:b1:d0:
         c3:02:ee:b0:3b:b3:a1:e9:0b:35:3e:8b:15:e4:7e:b9:c4:80:
         58:9c:9c:21:32:3f:fd:b2:84:c4:0c:38:64:84:6c:75:d5:95:
         c5:13:36:53:32:41:2c:97:85:33:46:f3:76:d1:70:b5:23:45:
         09:ba:d0:58:6b:db:0e:43:32:13:25:cc:82:05:c5:d3:82:41:
         8e:00:9c:9e:8f:a0:a9:cb:6f:59:0d:cf:6d:93:78:82:33:45:
         4e:45:7e:40:00:5c:47:f2:d3:4f:53:2b:12:09:4f:4b:2f:d8:
         4c:0b:55:45:6d:4b:ba:39:4a:9a:3b:ab:4d:69:eb:98:1d:3c:
         1c:7f:cf:20:4f:ec:d7:12:ab:f0:8a:89:d6:f9:e4:66:69:95:
         de:a3:ae:0e:82:1b:d7:20:d5:fc:1c:f7:38:48:d2:45:17:66:
         f3:dc:1f:c4:40:a6:ed:8f:fd:05:92:a7:e0:9a:b2:d1:60:8b:
         84:a8:7d:fb:58:58:8b:5c:b7:c5:0d:38:f4:14:e9:f7:0a:81:
         22:a9:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:47 2026 by rpki-client