Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa
File:                     95d67456-7bfe-3633-bb8e-6f617a5bea59.roa (raw, json)
Hash identifier:          ijW/7FZFpHewUHjFmUkXHPg8sobDsxKDRqK7jLT9ogQ=
Subject key identifier:   1C:A0:5E:78:4F:2B:92:F6:80:3E:B7:77:BA:6E:D7:9A:5E:27:74:74
Certificate issuer:       /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
Certificate serial:       010D0C9F4328584D7CCFDB6BA961D547312E3100
Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     55194
IP address blocks:        2604:5480:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:db:6b:a9:61:d5:47:31:2e:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=9778f8e4-8638-49d2-b91d-80c88b5176ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:6d:65:0f:64:c6:0f:4c:fb:1c:1e:fb:57:
                    9a:e7:83:b2:2a:85:1e:4e:b3:4f:1b:15:eb:54:ee:
                    cd:aa:d5:4d:69:99:fe:8c:05:83:9c:bc:83:d6:5a:
                    75:d8:a1:e6:68:8d:17:26:e5:c0:a0:7a:7f:f4:ad:
                    38:8d:64:45:1e:10:23:ff:4e:46:42:0f:74:dc:f5:
                    61:12:bf:33:55:3e:df:5e:6e:04:93:db:3d:d4:14:
                    e3:bd:12:fd:10:7a:c3:0a:5a:ce:2a:28:ef:ec:3c:
                    1d:df:b4:8d:0b:02:50:85:c9:48:56:ba:0e:ed:1a:
                    22:5f:c8:ca:6f:e9:de:a8:20:b8:86:14:1c:d4:c9:
                    d9:81:c5:20:a4:fb:03:66:17:2c:a5:42:56:b9:ae:
                    39:8b:10:9c:9e:3a:22:aa:91:f6:20:c0:4f:87:1b:
                    fa:28:04:59:05:0f:d8:57:7c:80:c7:6d:9b:86:3a:
                    a3:66:c4:45:9d:24:bd:25:36:8e:a8:6b:08:e5:d2:
                    cb:0a:19:fb:fb:d8:f3:9f:05:41:0c:bf:2a:3d:28:
                    37:72:05:c2:eb:18:90:3c:f1:3a:c7:92:f3:b3:44:
                    f6:78:87:49:fd:60:07:67:56:91:9b:c9:d2:4e:1d:
                    af:c4:be:31:30:6f:ff:9a:4c:be:36:8a:88:b1:39:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A0:5E:78:4F:2B:92:F6:80:3E:B7:77:BA:6E:D7:9A:5E:27:74:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/95d67456-7bfe-3633-bb8e-6f617a5bea59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl

            X509v3 Authority Key Identifier:
                keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5480:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:09:61:cb:34:bf:fb:de:77:ad:f5:ce:8a:a6:92:42:39:fc:
         96:69:a8:89:2d:fd:5b:bd:0d:31:38:5e:49:0c:6c:39:b9:c1:
         b0:21:fd:32:db:99:45:a0:61:53:92:46:91:82:cc:59:1d:9a:
         50:51:96:91:15:b4:c8:d0:97:e9:25:bd:af:2b:81:ff:03:ff:
         9c:71:dd:85:4a:26:68:35:b7:64:56:6d:cb:b1:7d:63:71:34:
         57:98:af:34:90:22:9f:30:d9:bd:ca:eb:7f:2a:5a:70:42:3d:
         ef:1e:8e:cb:4a:70:d9:c0:91:97:f8:7f:65:08:80:7d:44:4c:
         a9:81:21:31:3c:64:fb:d1:38:d7:1a:95:88:97:f5:2c:23:d2:
         8f:1a:47:41:28:71:ae:34:09:cf:b4:54:e7:f5:e0:0a:53:7d:
         e6:13:7c:11:c3:94:be:14:a8:2b:cc:70:ec:57:48:da:29:80:
         d1:a7:92:f9:6b:47:91:c7:ff:f0:ac:a5:19:02:94:ba:7f:d5:
         aa:3c:48:89:66:78:ac:b7:a2:99:10:48:ac:b5:1c:27:da:bc:
         6b:84:c7:e1:4d:93:d9:2e:b4:b8:29:27:ee:bf:8a:35:4c:ca:
         ea:35:9c:aa:e3:5c:6b:67:ae:59:25:40:15:25:50:66:33:f5:
         3a:ee:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:41 2026 by rpki-client