Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f107c783-383c-3aaf-b145-dc854b79de27.roa
File:                     f107c783-383c-3aaf-b145-dc854b79de27.roa (raw, json)
Hash identifier:          jNZ9A8Dz0s5UY8xgDQFrjgUPQSWBEJj/WIsdqaZRJ1c=
Subject key identifier:   12:3F:38:FE:B9:09:0C:EE:3E:3F:2E:54:67:28:FF:63:A3:FF:47:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DEF45E992B62A558A2EC24080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f107c783-383c-3aaf-b145-dc854b79de27.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     33661
IP address blocks:        76.29.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:e9:92:b6:2a:55:8a:2e:c2:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=641c8d43-d52c-41cd-84f3-ede370b648c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:71:77:73:8d:c3:0e:42:5e:f0:04:2a:37:
                    4f:c7:a0:10:76:75:3c:dd:ac:60:33:fb:3b:63:e2:
                    00:58:59:d5:50:f7:56:46:eb:2a:fc:8c:ed:39:5d:
                    e1:80:74:8a:d4:da:e9:4a:dd:0c:c2:46:59:39:e7:
                    29:ab:61:77:07:48:ea:89:b6:10:6d:01:f5:63:27:
                    5f:0a:63:fd:2e:e4:f5:95:e2:50:27:f6:a9:66:ce:
                    af:ef:00:eb:ba:1e:3a:b9:e3:84:eb:2e:00:2c:fb:
                    d3:6f:b9:89:5a:fd:e6:84:77:4d:ca:0b:00:0a:4a:
                    d4:d6:de:b3:78:22:73:ec:16:71:34:0f:60:ba:dc:
                    d1:cb:cf:20:09:3e:e2:9d:e0:0d:90:f4:46:47:3e:
                    f6:19:77:dc:41:1c:17:05:2b:9d:bc:21:06:fd:22:
                    5f:5b:b5:c7:4b:99:d6:16:21:53:1b:70:e1:05:6a:
                    29:44:15:97:d1:42:b3:75:f4:f1:a5:20:e9:2d:fe:
                    ae:64:f8:5c:0b:52:23:e2:84:93:8e:df:3d:37:be:
                    b1:1e:1d:02:5b:90:b2:3d:9c:af:cc:3d:4b:1c:ac:
                    f2:50:c7:cc:16:ad:bf:41:c0:74:b3:94:28:12:c4:
                    2e:81:32:1e:3c:41:94:4f:4a:03:b1:e5:0e:59:a1:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:38:FE:B9:09:0C:EE:3E:3F:2E:54:67:28:FF:63:A3:FF:47:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f107c783-383c-3aaf-b145-dc854b79de27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.29.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:7f:c5:b8:bc:ac:de:cf:ce:c0:4d:e0:4d:a5:d2:a1:33:cb:
         71:60:89:1a:3c:95:d1:a2:75:16:ee:15:7e:f9:81:6d:16:bd:
         28:69:df:09:d6:85:3f:9e:7c:95:69:e5:f2:89:4b:18:b0:cc:
         81:10:b8:db:07:e0:50:ef:aa:9c:6f:38:29:4c:7f:f2:ae:f5:
         5a:19:31:30:9a:34:57:3a:d4:aa:45:5c:bf:2c:31:a7:2f:59:
         6c:8f:61:df:eb:a5:a6:7b:84:d0:12:c6:7f:09:7e:fa:ca:49:
         83:52:3d:3e:24:b8:05:d0:57:0a:3e:c6:af:af:ef:45:bc:82:
         40:04:d7:00:56:6d:9b:b8:61:e2:e2:08:16:8c:e4:c7:b4:b0:
         77:04:62:9c:42:31:05:fb:17:a8:88:8f:b4:4b:e2:b6:3e:b2:
         fb:63:a6:46:1a:74:81:a0:6c:81:e1:16:9f:a6:73:e3:1e:a0:
         55:e5:ae:61:2b:dd:f8:3a:41:63:9d:4d:85:ba:76:99:35:a2:
         cb:90:b5:2c:2c:3d:3a:44:fe:41:46:13:7e:9e:4a:24:80:a6:
         f7:6e:a4:fd:a8:c3:c9:d1:81:1a:a9:75:8d:42:17:95:84:95:
         52:0b:87:09:b4:d6:da:f4:19:9d:07:d8:79:7e:65:7d:c6:77:
         4b:b2:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:25 2026 by rpki-client