Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d913a3-86a4-3614-b2b8-9b106c477ee1.roa
File:                     42d913a3-86a4-3614-b2b8-9b106c477ee1.roa (raw, json)
Hash identifier:          Txnq3G+NhJhbrJSdMZNpxijT1Z4U1ebBWc1JP+Ncml8=
Subject key identifier:   04:20:12:09:54:95:6A:E8:29:FA:8A:09:51:1E:04:A1:22:3B:16:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980E0D8151F94683C953440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d913a3-86a4-3614-b2b8-9b106c477ee1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        75.147.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:e0:d8:15:1f:94:68:3c:95:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=15f44cf9-dd14-434f-8966-ee3f833b53fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:e9:e2:5c:32:97:52:1b:31:0f:d2:60:60:
                    8f:5e:45:8c:8b:78:51:87:26:87:b8:33:dd:d2:f5:
                    dd:dc:10:3d:e2:59:32:d6:8a:55:c4:2f:58:38:c2:
                    cc:26:ed:90:fd:09:15:69:07:b7:12:57:8b:16:12:
                    7f:85:4e:87:6c:62:95:d8:bc:d7:a8:08:04:40:76:
                    30:ee:e2:e2:4d:17:5f:23:92:53:1a:c7:1c:e3:c5:
                    19:5f:c9:a6:87:10:a9:a2:a9:5c:d8:fb:15:fb:bb:
                    2c:10:3a:73:be:30:ce:f3:2a:e0:86:58:11:b5:f2:
                    b0:14:d0:6c:1b:88:84:5d:19:63:fc:50:aa:d2:16:
                    d4:9d:bc:f5:f8:f0:a1:c0:62:d5:a4:bf:eb:1e:d3:
                    a0:71:3c:1d:7d:e1:c9:99:18:b4:d8:f5:64:c9:58:
                    59:ae:3d:53:0e:64:86:06:9f:c8:f7:f8:68:30:3c:
                    dc:cb:14:6e:86:0d:47:16:07:c5:ce:a2:4a:75:fc:
                    87:ce:71:49:5a:72:38:9c:f4:fc:35:ad:d2:a5:a9:
                    82:6e:e9:98:04:2c:70:cb:42:b1:32:ae:d9:95:08:
                    0f:4f:27:ef:6d:74:43:69:07:6c:b8:c9:e5:f1:23:
                    cd:e3:18:cc:f5:82:b3:0c:92:06:94:ec:ae:8e:29:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:20:12:09:54:95:6A:E8:29:FA:8A:09:51:1E:04:A1:22:3B:16:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d913a3-86a4-3614-b2b8-9b106c477ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.147.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:3c:30:94:a8:8f:fb:ae:7a:57:e1:08:eb:31:7a:62:e9:82:
         5c:23:f8:c4:48:1e:83:64:db:5d:c5:af:9f:06:fd:d0:e7:76:
         72:4d:0d:0f:32:f3:9c:7b:92:96:2f:13:9e:f1:f7:e2:ff:c4:
         87:ca:e7:e9:9b:db:c0:10:36:34:d9:f7:2f:eb:62:5f:07:0c:
         37:22:54:e7:ad:65:1b:1f:2c:fe:72:8f:12:36:ab:fa:36:4d:
         80:99:06:ff:16:10:96:e4:39:eb:40:56:6e:a2:da:7c:55:f4:
         5c:fc:4b:20:e7:d2:0e:f2:35:33:90:b2:c0:66:e7:32:a8:9e:
         18:c7:ff:e7:0a:e6:c9:bf:52:30:f9:0a:e3:78:99:4c:22:b9:
         42:c8:0f:13:c9:f7:31:5b:39:c3:83:25:ee:cd:a3:31:b3:f0:
         20:df:0c:07:3a:11:16:d5:aa:21:67:b6:a3:e2:12:16:7d:43:
         a2:38:54:bb:87:10:48:4d:84:f5:2c:de:85:68:5c:2a:67:4f:
         bc:60:5f:87:fe:a9:93:38:db:58:09:8f:8a:d1:d5:7a:9b:4e:
         ab:0c:43:f2:45:01:6c:8e:4a:4e:da:cd:91:26:db:c1:6c:45:
         c6:db:da:10:0f:d7:92:97:ac:73:70:41:21:1d:d5:b5:7d:df:
         37:8e:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:33:54 2026 by rpki-client