Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e31e0894-924a-31e4-8e77-0ab09d23a39d.roa
File:                     e31e0894-924a-31e4-8e77-0ab09d23a39d.roa (raw, json)
Hash identifier:          zP8Ywnvjt++rKutVB/TF8+V9mRZe4c2XcamVBk5KeOU=
Subject key identifier:   A5:99:5F:BC:92:73:D4:3E:2B:E3:F7:F4:F8:7F:DA:5F:2C:94:C5:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BAEE8273514D866CDFA700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e31e0894-924a-31e4-8e77-0ab09d23a39d.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        76.127.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:ee:82:73:51:4d:86:6c:df:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=994a2796-8955-46eb-9186-2ad7fd5730e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:6f:f3:49:1b:8b:4a:91:7c:c4:fd:3e:2a:
                    03:35:86:0e:17:5a:f2:e4:a0:0c:5c:81:59:36:57:
                    69:30:26:09:f1:d8:73:8d:7e:c8:b9:2c:01:a4:3a:
                    58:1f:cc:73:f1:ac:15:84:41:9b:37:80:d5:0d:5d:
                    db:dc:b8:ab:75:5f:ce:69:0f:c6:6b:74:1d:65:83:
                    9c:88:4f:16:a9:79:92:2b:76:38:7d:df:15:55:78:
                    de:7f:fd:59:94:66:ff:48:e6:d6:17:75:24:ae:96:
                    78:2a:f5:2c:28:02:58:98:4b:f7:cb:e2:1d:ae:0b:
                    ba:12:f6:f0:c6:33:55:6b:fc:f9:0c:8d:83:c3:83:
                    5f:4c:8e:38:b6:23:75:e6:76:f0:dc:0a:4b:6c:0d:
                    9a:c8:22:91:5c:59:86:cd:5c:e9:bc:6c:e0:9d:91:
                    1a:21:c4:62:40:cf:03:64:d9:82:37:74:35:63:9b:
                    59:fe:a1:c9:9f:76:fe:ff:df:fc:b1:fb:80:82:39:
                    39:be:a0:8b:26:31:ac:ea:63:c6:98:c3:20:7e:38:
                    48:a5:ba:a2:45:66:db:d8:14:ff:9c:36:fc:90:bf:
                    d1:b4:a9:19:0a:bd:e3:9e:8c:10:21:49:b9:fe:fb:
                    63:a3:60:d7:c8:c1:17:d9:43:d8:51:07:54:e6:83:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:5F:BC:92:73:D4:3E:2B:E3:F7:F4:F8:7F:DA:5F:2C:94:C5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e31e0894-924a-31e4-8e77-0ab09d23a39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.127.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:a7:25:ce:2b:5d:3e:c1:58:6b:8c:c7:fd:9e:b9:10:f6:
         b3:99:65:90:ad:6e:f8:3f:dc:09:7f:1f:51:ee:a3:7f:49:7f:
         9d:a7:6e:6d:30:76:44:82:49:ae:0b:5c:36:b7:8a:7e:d6:ee:
         b6:3c:9d:f9:cf:ce:e2:9d:9a:e3:24:51:a2:2a:ac:51:62:ec:
         a8:ce:96:11:74:41:5b:ea:82:74:a8:66:23:22:df:b4:33:84:
         27:7e:23:4c:bb:eb:cc:d5:1c:ad:1c:86:60:f4:f4:20:db:47:
         d2:e1:3d:4f:1b:33:02:9c:e9:09:30:03:af:e3:9b:3e:d4:59:
         92:a9:42:04:3c:e4:b0:ed:42:b9:85:94:79:4d:d5:d5:14:e2:
         d9:77:d2:36:8d:f8:fc:bd:f8:e3:85:41:f1:40:67:39:ef:d0:
         0d:0e:97:41:84:b6:da:6e:d9:0d:b3:54:f4:ad:33:72:c5:9f:
         9c:72:64:fd:94:fe:4d:22:ee:2d:23:04:79:48:4a:a3:9b:89:
         a3:c7:4d:e1:d2:a3:99:34:f7:82:86:ee:3a:6e:24:e5:d0:e5:
         ba:f9:d1:a9:d3:2e:ac:c0:09:9c:a8:3f:3f:4e:b8:dc:07:44:
         67:cb:6f:ad:f0:2c:ab:7b:4b:01:4f:e0:7a:c7:6f:9f:93:3c:
         68:4b:9a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:11 2026 by rpki-client