Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d4f0894-701f-3bbf-a50a-ff739d0ff919.roa
File:                     4d4f0894-701f-3bbf-a50a-ff739d0ff919.roa (raw, json)
Hash identifier:          /vvWOixQQ9RMWlH3RfyvfBA3mhq4IMQgOP6PJFn0rRo=
Subject key identifier:   49:9C:AC:EF:88:D1:A4:DF:CC:03:C0:D6:3C:D3:F3:41:81:53:2A:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF768E1F8E9DCE57C2D6D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d4f0894-701f-3bbf-a50a-ff739d0ff919.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        76.99.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:68:e1:f8:e9:dc:e5:7c:2d:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=793414fa-779e-4b7c-ad71-4df572137a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:89:26:e4:5c:80:00:08:1e:38:f0:58:4d:b6:
                    b1:b5:a3:17:79:ab:c8:72:d9:bd:a9:77:55:c5:e4:
                    e0:2d:58:9f:bb:00:c3:1b:2b:3d:e9:09:58:4e:2f:
                    8c:fa:b5:07:45:ac:97:1d:5f:da:8c:d6:01:3a:7c:
                    b9:23:9b:c6:ee:b6:91:2e:86:85:7e:fa:a1:ea:84:
                    1f:e6:9a:e3:73:ce:b3:fe:c1:c4:17:b6:6c:d7:15:
                    eb:cd:3d:0e:22:b9:02:5e:42:7c:4f:5e:50:55:4e:
                    b9:22:af:6f:55:50:a8:1d:be:c7:9e:f4:1f:f1:e2:
                    96:f3:32:89:ed:59:11:69:5f:77:77:e9:a4:2d:8a:
                    d2:7d:af:49:05:66:dd:a5:74:2f:33:3d:ad:03:a6:
                    b4:10:00:9d:e7:1f:69:45:ca:27:c0:2d:47:e1:e2:
                    16:e2:5b:08:90:a5:b0:5f:7f:b8:51:12:f6:f0:3d:
                    db:a7:75:b8:5e:e2:c6:df:2d:4f:5a:90:38:6f:2d:
                    37:97:db:07:77:08:b8:e4:2f:b6:ca:7e:93:63:6c:
                    7b:13:e0:43:4a:d8:20:c0:98:26:6a:98:29:ce:fb:
                    83:85:6c:18:0e:3c:bf:34:f0:bb:c0:62:79:2e:aa:
                    df:60:28:70:3f:c3:00:63:60:7c:ef:d2:ed:b4:db:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9C:AC:EF:88:D1:A4:DF:CC:03:C0:D6:3C:D3:F3:41:81:53:2A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d4f0894-701f-3bbf-a50a-ff739d0ff919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.99.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:3b:23:02:01:bd:a6:42:93:00:59:07:f7:f0:9c:55:7e:
         3b:22:00:f0:ab:e2:1a:fb:31:99:fc:77:5c:6f:60:62:c2:51:
         27:93:47:c4:d5:e0:fc:15:ac:00:94:06:a8:90:07:e6:8b:a1:
         3a:15:25:80:1e:87:21:ed:a8:0c:a1:5d:dd:d7:c1:80:08:a1:
         cc:b2:c6:c6:8c:e0:45:aa:b6:b4:7e:bd:72:78:73:0f:b6:f2:
         e9:f0:99:5f:a0:54:27:39:d8:03:85:f9:d7:e7:c8:23:23:b7:
         44:08:b1:b5:e7:4a:cb:63:3e:36:4e:61:21:89:80:9e:3f:85:
         c0:f1:fe:bd:cf:b6:0c:42:25:f0:d4:2e:cb:ca:d4:1b:c2:f9:
         33:a3:77:05:98:b4:05:96:0f:88:0e:5a:dd:da:28:4f:d2:55:
         9a:65:3b:d7:91:8c:ba:93:1e:09:77:80:fa:ec:3c:ea:3e:8a:
         44:31:2f:fe:7a:ed:a5:0f:97:9c:c5:30:a5:38:23:c0:1c:42:
         32:03:ec:d6:e8:60:44:c0:6a:0e:86:d3:94:06:f6:2c:52:72:
         e4:03:69:89:3e:7f:d8:ad:18:89:87:01:fa:e0:f2:b4:38:ef:
         49:b2:f0:fa:26:ee:04:8d:a1:8c:de:1f:bd:e9:60:4c:09:41:
         d9:49:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:11:59 2026 by rpki-client