Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4f45981-ecb5-3d7f-b665-ebf77875b9bf.roa
File:                     f4f45981-ecb5-3d7f-b665-ebf77875b9bf.roa (raw, json)
Hash identifier:          gtFtgx0c39H36i7ZHM97b4Cqu3FO9Dt2lC74hEkj6K4=
Subject key identifier:   A8:DB:6B:13:E2:3E:8A:61:2D:0A:2B:EF:9B:D5:91:7A:B1:7C:B0:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5933CEB4B003CF6DD24D90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4f45981-ecb5-3d7f-b665-ebf77875b9bf.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33660
IP address blocks:        76.23.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:33:ce:b4:b0:03:cf:6d:d2:4d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=73606160-d93f-4809-80b1-1fefa1f1efcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:20:ad:0e:79:6f:4f:bb:95:29:0f:4d:ac:
                    5b:8b:ed:48:e9:dc:7e:21:0f:44:87:23:a8:d6:6e:
                    5b:9c:9a:75:68:04:64:fc:44:c4:16:7f:54:a4:ac:
                    7c:86:f9:aa:4b:f2:8b:64:68:45:54:22:6b:72:ae:
                    50:96:11:0b:ff:3e:dc:e5:d5:ac:bc:2f:f4:1a:37:
                    71:66:e5:f2:19:1b:18:7f:5c:08:9d:36:21:ad:ca:
                    79:53:87:d8:ad:03:a2:64:88:fe:5f:33:ac:87:ec:
                    0f:9d:c6:6b:39:e8:c0:d6:70:b9:a9:fe:a3:d5:41:
                    c0:dc:c4:5f:c3:69:fc:53:f8:df:8d:40:09:a9:91:
                    0c:09:45:b4:5a:24:eb:39:cc:f1:14:3a:03:dd:6d:
                    54:8e:45:5c:26:d3:99:d9:9f:99:e5:22:67:2a:62:
                    a7:7e:65:b4:18:53:41:a5:41:3d:28:a7:f3:37:a3:
                    2d:27:b8:e8:dc:30:fb:76:47:20:19:96:77:05:9d:
                    de:08:1c:8f:0c:06:9e:c0:17:1b:48:0f:95:e5:02:
                    04:fc:91:9a:ef:8c:21:38:f2:2c:39:c3:fd:9a:11:
                    8c:e8:96:99:8d:3c:b0:72:20:50:8b:be:10:cc:ff:
                    84:e3:ec:d6:30:47:b9:43:2c:ef:9f:6e:14:6d:d6:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DB:6B:13:E2:3E:8A:61:2D:0A:2B:EF:9B:D5:91:7A:B1:7C:B0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4f45981-ecb5-3d7f-b665-ebf77875b9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.23.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e4:28:9b:75:e4:1d:16:a7:20:6a:72:5c:1a:e9:7e:44:cb:
         a6:ba:31:9b:c3:20:5e:a4:e2:2e:82:e9:5c:cc:1a:51:a6:e4:
         54:72:1d:64:bf:a7:9f:27:86:4b:49:5d:82:4e:d3:86:97:d8:
         dc:18:7c:1c:fd:40:85:1e:fb:e5:a5:45:7b:1c:bd:e8:44:ed:
         f1:52:12:2b:43:2c:d8:1a:92:41:58:2b:08:d9:5c:d9:e3:78:
         a8:99:c6:1a:39:37:1d:fe:2b:24:80:06:4c:c2:0c:cf:1c:6a:
         57:bd:22:9d:ad:92:7b:2d:f1:d5:d1:15:d2:e6:83:42:3e:b0:
         67:8a:3a:f0:83:14:7e:c8:bf:a1:c9:21:50:72:d1:5e:30:20:
         b9:7b:33:71:8a:2e:6a:64:d7:61:bf:79:3c:22:4a:f7:71:95:
         d2:58:19:93:ec:7b:3b:10:08:ba:19:48:f2:63:70:10:27:71:
         be:8a:5a:9c:44:d2:62:fd:d3:b4:6a:e2:56:42:e3:77:ab:9d:
         e2:e2:8f:c3:73:2e:36:3b:c0:c1:bd:98:bb:44:c5:66:f3:5e:
         80:e4:28:9d:cf:b6:50:99:bd:7d:f6:99:41:c4:fc:67:a8:08:
         ee:1a:ea:7d:64:d1:e1:e8:75:ff:f1:9d:43:b8:e2:6e:86:d2:
         16:b3:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:34:30 2026 by rpki-client