Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4f45a1-1e1e-3f3b-a181-79697aa385eb.roa
File:                     df4f45a1-1e1e-3f3b-a181-79697aa385eb.roa (raw, json)
Hash identifier:          XKInlfI2cxKzaO1q3ZEB9JLWsOf9IyKdDFfKbyendys=
Subject key identifier:   0C:39:E6:83:78:7F:29:00:8E:0A:67:65:CA:90:92:FA:01:25:BC:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8100397E02C394EE69414EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4f45a1-1e1e-3f3b-a181-79697aa385eb.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        76.97.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:39:7e:02:c3:94:ee:69:41:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=c21535ca-441a-4daa-b4bf-8446f9445751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:33:cc:d7:7f:68:79:f6:13:aa:7c:c2:be:
                    fa:40:0d:94:6c:84:25:e5:58:b0:20:04:1c:b4:ce:
                    05:75:d5:8d:02:69:8c:7c:e4:1a:cc:d7:3e:a8:11:
                    ad:04:79:31:da:a5:b4:3d:9f:e6:2f:7f:70:c1:24:
                    34:05:be:67:39:47:22:54:45:80:6f:7e:1f:75:26:
                    6e:80:5a:dc:9d:bb:02:71:32:9e:4f:df:06:3f:64:
                    d0:93:5f:88:b2:1e:c2:a9:81:0f:b3:eb:f8:9b:bc:
                    29:90:a1:61:f1:6e:56:97:16:25:de:27:13:98:90:
                    7e:c2:90:60:b0:96:f9:66:48:c8:4f:19:a9:e5:b0:
                    92:36:e1:60:a5:66:17:34:30:b7:db:3d:db:0f:78:
                    58:a0:ff:6d:0c:93:c8:8d:6c:42:b0:8b:40:98:75:
                    e0:7f:be:94:3c:44:62:35:41:5e:da:62:93:ab:a9:
                    06:3e:29:1e:57:99:1f:92:11:bc:b9:a1:59:d4:52:
                    4f:24:cc:01:14:19:cc:11:38:cf:7a:c4:58:f7:c2:
                    48:11:04:71:59:cf:7c:bf:01:ea:13:bd:71:4c:cd:
                    c3:b9:a9:a2:9b:42:51:bc:14:f3:77:96:c4:08:98:
                    9a:e2:10:13:16:83:b0:3b:4c:ae:9e:6f:c7:8c:ae:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:E6:83:78:7F:29:00:8E:0A:67:65:CA:90:92:FA:01:25:BC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df4f45a1-1e1e-3f3b-a181-79697aa385eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.97.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:78:17:cb:e0:85:20:89:74:cb:1f:18:33:5b:6a:1d:96:8d:
         3a:92:1b:33:fd:f5:e8:25:1b:b0:42:7f:6f:b6:e1:5b:af:54:
         26:c2:fb:a7:f2:36:22:45:ac:5d:71:e9:03:46:7e:8c:53:70:
         ec:ed:ed:14:46:00:c1:72:52:a2:8f:91:30:5d:5d:5e:9e:8a:
         31:68:ad:8e:9b:74:54:d3:24:b2:32:12:37:48:e5:b5:3e:22:
         7a:df:b4:cf:dd:cd:d9:e0:e6:7c:16:b7:19:e6:98:0b:ee:f7:
         de:ba:c8:a3:08:79:09:29:67:09:38:77:3b:62:4c:0a:c8:07:
         48:8c:67:f6:81:b5:30:12:69:f4:01:3d:f2:aa:7c:3a:ee:7b:
         57:c4:d3:d7:61:73:1b:e3:53:7a:8f:7d:c3:c1:0d:e7:30:3b:
         51:d5:59:d3:f0:e9:30:46:df:4f:98:96:85:9d:4e:bd:ac:a4:
         c9:59:b7:2c:67:70:ab:6b:e9:ec:bb:54:7d:4d:92:5f:58:d9:
         66:37:f2:4b:f2:cf:99:04:bc:68:02:b4:d8:09:6b:88:0d:99:
         1f:09:a0:20:c8:a8:20:13:cf:b6:62:96:36:e6:a0:09:4f:08:
         b4:35:c2:dc:5d:66:dc:70:f6:f2:5e:70:a1:e4:83:30:c9:31:
         b0:5b:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:20 2026 by rpki-client