Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f084b8e6-f2ec-35b2-bf8c-7f2c3a9305bf.roa
File:                     f084b8e6-f2ec-35b2-bf8c-7f2c3a9305bf.roa (raw, json)
Hash identifier:          68qNQxaZPw/OH4OLgtyfRQT1ysB0fUmxeFatYsL3YG0=
Subject key identifier:   E3:AA:FD:6C:73:4B:9A:09:F9:16:8A:BE:4B:29:DC:A9:3A:22:8D:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D83CAB980D931A4BCE2E71480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f084b8e6-f2ec-35b2-bf8c-7f2c3a9305bf.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     21508
IP address blocks:        174.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b9:80:d9:31:a4:bc:e2:e7:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=04a1ca1d-4199-4694-a47b-f71370578ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:18:61:d0:a5:03:c6:21:55:fb:37:d8:5b:
                    a9:e2:d6:a5:c0:d0:d6:6b:3a:23:0e:03:99:03:90:
                    35:39:27:f9:0c:f3:35:04:76:53:f3:cb:ab:2c:55:
                    59:ea:2a:49:0c:b8:b8:84:c3:8d:ca:25:f7:df:9a:
                    9e:8d:f3:fa:78:2e:8e:e5:fa:a8:a6:76:a1:a9:d6:
                    42:05:15:4e:7a:62:76:f7:9a:bb:65:19:80:2d:06:
                    87:8c:8a:71:8d:2a:02:3a:ed:7c:e9:fc:0c:97:23:
                    87:98:60:22:09:7e:63:cf:27:35:a8:4e:64:02:7f:
                    41:95:24:9e:47:92:13:35:a0:d8:d1:0e:f3:3c:28:
                    eb:76:90:a6:99:a1:78:ad:3b:9b:64:55:8b:f1:23:
                    d8:31:f1:62:13:2b:92:01:85:f0:59:62:ca:72:8a:
                    68:c9:c5:8f:9c:a1:b6:39:2a:ab:f2:66:f0:31:a4:
                    bc:98:e9:a0:42:0f:87:44:cb:8d:70:d7:5e:68:9f:
                    21:8b:be:77:2f:66:0c:15:5f:3c:52:61:0c:18:e0:
                    db:1f:7b:f7:94:1b:e2:5e:40:c8:1d:9f:06:2a:ce:
                    56:58:15:c3:11:84:8a:88:99:47:c2:a0:fb:4d:36:
                    c4:82:48:23:c3:aa:e0:12:23:58:1b:1a:4a:b4:66:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AA:FD:6C:73:4B:9A:09:F9:16:8A:BE:4B:29:DC:A9:3A:22:8D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f084b8e6-f2ec-35b2-bf8c-7f2c3a9305bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:db:e0:9b:00:a2:da:e5:b1:83:f5:5c:31:50:4d:0f:be:
         35:5e:d6:99:5c:2c:00:c1:e8:52:de:2e:1c:7d:9b:65:89:af:
         77:ac:c0:e5:8c:27:c5:da:1b:44:be:5b:df:63:df:34:61:92:
         77:24:3f:6f:d2:94:ac:21:7c:f8:fb:00:69:2d:26:1b:41:9b:
         2b:b4:d3:87:5c:76:34:8f:53:8b:33:02:e7:07:cf:c7:84:94:
         9d:bb:45:fc:f2:f2:4c:44:30:33:21:07:bf:ac:a1:9d:8f:1f:
         52:5e:30:3a:36:f0:93:4c:50:bd:45:a8:1d:49:20:ac:6c:21:
         56:f0:b2:a1:37:83:bf:ac:5b:4c:b2:dd:2d:7d:fa:5f:bf:84:
         db:32:74:6a:96:da:e5:88:09:c3:33:0d:64:bd:66:51:65:c5:
         77:ad:ee:ed:29:f2:12:ac:38:bf:6a:de:1a:89:85:f9:ad:06:
         55:aa:e6:80:81:8e:65:ad:95:68:72:ae:4b:3c:e9:b2:38:ed:
         cc:3c:18:4f:b1:6d:89:4d:aa:5a:61:34:c6:60:59:fc:4d:43:
         ad:d0:54:45:2d:a8:d0:6c:07:a1:c3:11:c9:1b:c3:ac:42:64:
         44:ba:bc:4c:c9:bd:f9:71:cb:9e:a8:0a:db:89:f9:55:76:39:
         2c:4e:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:26 2026 by rpki-client