Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa
File:                     fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa (raw, json)
Hash identifier:          0Je27RRw2sS8irnDC/YPmbnKqDJ0FXqeTobDG17/PVE=
Subject key identifier:   45:78:1E:63:98:23:CF:1B:80:43:98:9F:AE:F1:5D:A0:FF:EA:68:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87316ED56927E2C9812FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7725
IP address blocks:        96.124.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:31:6e:d5:69:27:e2:c9:81:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=233c7d5c-97cf-4677-9034-930c6aa6efec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:e9:37:ab:e7:e2:84:39:fd:5e:ee:24:72:
                    1d:29:c4:68:9c:bf:ef:23:a0:b8:ef:76:c3:e1:26:
                    55:9b:75:75:ad:37:b0:de:cd:56:79:d1:75:12:dc:
                    b2:26:88:54:a2:49:ba:b4:83:b0:9a:6c:be:b1:42:
                    b9:c7:4a:ba:65:4a:2e:55:81:41:5f:9b:35:9d:a4:
                    57:15:af:c4:83:56:b4:bd:f6:00:94:1d:4c:72:7a:
                    b8:41:75:bf:49:70:9c:2d:21:2d:6d:ec:26:3d:f9:
                    91:78:c9:83:da:7e:23:52:64:7a:53:7e:31:3a:14:
                    9d:85:79:af:1d:b0:ec:fe:e2:f6:e3:d3:2f:23:0c:
                    53:b6:7d:f2:73:ad:97:89:16:b0:73:fb:34:76:26:
                    3d:9f:66:7b:85:4e:5e:84:53:c6:7b:f8:05:5e:a5:
                    64:97:e9:7e:6d:e9:a8:d6:47:81:ea:c5:3e:69:dd:
                    94:86:3e:df:d9:3e:31:61:a7:d6:72:ff:00:b0:17:
                    21:0d:5b:ae:90:76:fb:86:83:9b:cf:c7:f3:1b:59:
                    9f:f8:11:17:66:3e:16:99:1f:84:d0:36:fe:9f:38:
                    ea:b4:09:f1:57:4a:6e:7e:3e:44:d9:21:eb:a7:b2:
                    d6:a5:80:95:b0:9e:40:f7:ca:24:89:5a:c5:45:5a:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:78:1E:63:98:23:CF:1B:80:43:98:9F:AE:F1:5D:A0:FF:EA:68:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.124.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:61:34:98:d3:b0:f2:5a:dd:4a:fc:3b:3b:9c:8c:45:21:59:
         3c:a9:0d:32:d0:79:48:4a:d4:b2:82:50:94:9f:84:d1:91:e4:
         19:25:b4:d1:60:ee:70:19:fa:72:da:c3:0b:49:de:e5:02:82:
         ff:05:08:b2:78:fd:ec:41:a1:c9:cf:10:63:3a:5a:6a:71:bc:
         7c:98:59:0e:80:36:9b:49:b7:e9:bc:f4:8a:f8:89:aa:26:25:
         cd:c8:ce:52:f2:41:b2:bd:93:2f:d9:b4:d5:72:5d:c2:68:ba:
         6c:4c:cd:54:98:ca:0d:4b:e2:cd:5f:26:2e:ca:f7:dd:4c:d6:
         6c:0b:a6:19:a9:7c:99:a8:11:c7:38:27:c1:34:74:b6:c2:87:
         4f:ff:46:df:d8:b4:0c:16:c4:3a:50:12:ba:92:a9:a8:09:a4:
         4a:87:ba:61:0b:30:e7:d4:cc:17:df:81:59:7a:28:2f:bb:7d:
         ca:2e:4c:98:77:da:f4:cb:70:c3:4c:f2:23:4b:af:60:d1:06:
         26:d8:e2:eb:f6:fe:42:e7:60:c2:0b:c5:59:da:07:9c:a1:d2:
         42:05:78:87:ce:ef:81:90:ad:94:84:81:7d:5c:f4:eb:9f:05:
         7a:91:e2:67:0f:4f:3c:93:32:5f:da:61:61:42:91:03:d5:cc:
         4b:3c:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:20:00 2026 by rpki-client