Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfbc6a1-a877-3be0-899f-e5b2c098a858.roa
File:                     ebfbc6a1-a877-3be0-899f-e5b2c098a858.roa (raw, json)
Hash identifier:          AtwgMzS4XaRQVywuw6MQmoWzji7RzzVQEWKRSNLQ2+8=
Subject key identifier:   B1:D9:56:13:D2:9E:E0:0E:EC:B1:2C:9D:A6:66:96:A5:D8:3A:27:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EBCB11A155B05E861FA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfbc6a1-a877-3be0-899f-e5b2c098a858.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        76.117.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:bc:b1:1a:15:5b:05:e8:61:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=b0ce62ea-11f0-45e7-9002-97552378735a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:5e:39:7e:5d:62:21:ed:a0:e3:d4:21:1e:
                    b6:c9:b6:22:f4:57:a5:69:ab:3b:9a:f2:27:b9:5e:
                    74:6f:e3:f3:00:8e:66:67:cc:5e:a1:1b:aa:f0:20:
                    26:3c:91:7f:ea:8c:8e:8b:db:6b:1e:dc:ba:e3:79:
                    86:b8:c7:61:e0:c0:34:12:b8:11:56:a6:86:bc:e9:
                    ff:bf:f9:f2:9f:4d:47:ce:0f:eb:c7:47:0c:cc:73:
                    3d:df:0f:4a:0e:6d:70:53:e5:f1:88:d8:4e:c2:ad:
                    e5:c5:fa:fc:9a:90:3e:e4:76:06:7c:6a:db:b5:00:
                    d6:33:b6:e4:47:79:42:09:f6:e3:19:85:cd:53:b2:
                    ed:e1:5b:61:e1:f8:da:d8:7d:a5:8a:95:ac:37:65:
                    0d:0d:27:06:d8:bf:d5:26:7e:48:43:9a:ff:75:84:
                    03:46:db:6a:9c:40:9c:b5:d9:a3:05:3e:0e:32:7e:
                    99:09:db:4b:76:52:dc:ab:47:63:c9:5a:70:8f:d2:
                    5e:2d:81:e6:a7:d0:58:f5:54:5f:eb:29:8d:be:b3:
                    2c:95:77:83:0c:c5:b9:4c:c6:64:ff:ba:03:c6:e0:
                    37:cb:40:53:42:bc:98:12:e6:b3:b3:75:7e:95:e2:
                    b6:10:15:98:1c:fb:a9:cc:ef:a9:d2:31:26:20:fd:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D9:56:13:D2:9E:E0:0E:EC:B1:2C:9D:A6:66:96:A5:D8:3A:27:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfbc6a1-a877-3be0-899f-e5b2c098a858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.117.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:11:86:5f:ae:36:80:2c:c9:36:ee:4f:cb:7f:08:39:47:
         c6:f6:66:81:d3:e4:c5:56:45:e4:f1:06:2d:95:f2:b3:6b:31:
         f2:f1:c9:99:78:14:40:0f:1c:ad:30:4d:89:f6:3d:94:13:42:
         69:51:6c:f0:af:01:29:0a:55:9b:4f:8e:df:c5:52:a8:10:84:
         f5:bd:f2:67:a1:41:bb:1d:fc:3e:fb:d3:fe:2b:af:17:7b:a2:
         62:43:71:3d:70:22:e1:3a:7c:e0:4a:27:40:eb:fa:75:71:9f:
         a9:19:82:dd:ec:f4:89:e7:5b:b9:1d:ae:ae:6f:24:d8:f3:76:
         75:71:b9:2e:26:29:d8:b3:38:d9:48:ee:bd:fe:ec:b9:14:32:
         77:48:b6:03:fa:89:5d:05:72:28:71:36:11:58:ac:9b:ce:36:
         52:c1:90:82:08:97:d9:da:f1:d7:02:17:f2:76:7f:db:e6:d8:
         03:c4:e0:8b:51:0c:81:be:93:52:3b:85:b2:fe:71:6a:1f:42:
         a6:ac:b4:67:f0:9c:69:09:56:7a:53:77:7a:a8:e6:75:ac:93:
         18:67:8c:b2:61:0f:93:f9:74:31:ad:b4:80:02:70:16:fb:35:
         a0:25:1e:30:a4:3c:f5:b8:85:89:18:7a:c4:7d:be:ba:12:8d:
         43:0c:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:35:36 2026 by rpki-client