Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/95bbdd86-21eb-34f4-809d-d92984d13e4b.roa
File:                     95bbdd86-21eb-34f4-809d-d92984d13e4b.roa (raw, json)
Hash identifier:          ZGwWvBhdoW5P2YCw7JeCiJFvle6QReAJQAqZycyrPO4=
Subject key identifier:   17:EF:3C:A8:46:BC:C5:92:26:30:DF:F7:46:64:D9:67:F1:92:87:92
Certificate issuer:       /CN=39993af2-98b1-47da-a218-47109f41cb97
Certificate serial:       010D0C9F4328584CC8DC9B081C34C2C699EB9240
Authority key identifier: 12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/95bbdd86-21eb-34f4-809d-d92984d13e4b.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     4150
IP address blocks:        74.91.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:9b:08:1c:34:c2:c6:99:eb:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39993af2-98b1-47da-a218-47109f41cb97
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=df4662ed-14de-4a54-ac6d-498cbe90e91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:c6:25:3a:41:aa:5e:ab:56:17:23:22:fe:
                    cb:87:bc:9e:5f:59:63:7c:91:92:e3:c5:e2:00:f4:
                    42:6d:6e:9c:24:f1:7a:3a:e4:5c:79:ca:5b:31:f8:
                    dc:fe:68:7e:0b:d4:47:af:91:e4:ad:7a:c7:1c:a5:
                    02:d1:06:64:59:7b:c8:ac:62:59:4e:85:d7:a4:bc:
                    37:e3:f8:74:7c:1f:e1:52:f8:5a:26:95:2e:6f:03:
                    68:17:b0:a5:95:72:52:ba:48:c7:1f:c8:59:50:b8:
                    f5:f4:0d:7c:d2:54:37:a1:3e:b0:20:94:87:92:8c:
                    36:03:41:c9:9f:8a:9f:4c:0e:f3:69:9b:40:8e:f5:
                    f7:87:ef:3a:7f:65:75:1b:2b:d4:63:53:48:5d:34:
                    ab:7c:c4:a3:fb:52:a3:7f:c5:fe:01:30:2b:42:e5:
                    27:83:09:b7:1a:8c:b5:7d:9c:d2:c0:e5:2f:8f:53:
                    0b:3f:7d:f9:6c:44:aa:34:3c:05:b7:03:94:10:4f:
                    71:02:c9:ff:14:c5:2c:5b:51:d5:43:41:30:c8:89:
                    6c:8e:79:33:87:86:cb:16:78:39:fa:3c:c7:f7:3a:
                    ec:12:07:5b:df:b4:22:9e:e2:2c:fc:54:21:7a:e5:
                    3c:14:2d:ca:e5:e6:16:fa:8c:af:88:9e:dc:5f:04:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EF:3C:A8:46:BC:C5:92:26:30:DF:F7:46:64:D9:67:F1:92:87:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/95bbdd86-21eb-34f4-809d-d92984d13e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl

            X509v3 Authority Key Identifier:
                keyid:12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:73:dc:a1:b3:1f:05:e9:55:8c:19:5c:24:d1:e0:08:33:c7:
         da:a5:0a:1c:b9:12:80:4b:4e:e0:35:14:3e:63:bf:0b:08:ae:
         5d:ce:9d:fb:2b:da:84:c3:66:88:d6:24:97:d6:3b:2a:71:27:
         f2:23:df:52:42:4f:ac:a7:5c:a9:08:c9:7c:3d:96:86:13:14:
         7a:a4:cb:cc:3b:99:6f:f3:cc:83:75:91:63:ab:82:10:aa:81:
         61:38:46:ea:13:93:12:1f:f9:37:22:dd:2d:7e:cf:d5:c9:99:
         09:0c:f8:b8:0e:33:d8:6b:81:8c:20:90:85:eb:aa:fb:8c:43:
         51:96:fe:02:f5:77:28:9e:d5:54:19:4d:79:d9:fa:af:84:b1:
         39:d4:52:8b:79:c9:e2:f4:34:bd:7f:00:cf:d0:14:ad:31:0d:
         ec:1e:39:3c:83:07:46:a0:80:58:fb:18:bd:b5:99:d6:59:ab:
         a5:e3:98:4e:e6:be:d1:f3:50:49:97:e0:6a:79:1d:2b:54:a8:
         42:32:2b:00:af:18:d8:71:22:25:63:bb:67:3a:5e:e6:40:e1:
         0b:9b:72:40:66:ab:e7:db:34:c8:fd:f5:72:b4:24:62:76:cd:
         b4:9d:3d:cf:53:1b:78:c1:f2:b3:26:99:c3:f6:34:c4:95:40:
         55:0a:98:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:47 2026 by rpki-client