Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cf1b487-b141-31b0-9759-7673bc504353.roa
File:                     7cf1b487-b141-31b0-9759-7673bc504353.roa (raw, json)
Hash identifier:          kDezwp5xRYor0F8G80wuw4sineva1k1QtWtlFgDdLeM=
Subject key identifier:   D1:EC:7D:B5:0F:98:78:40:19:A5:8D:B0:C2:28:B1:B5:E5:15:4B:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E62FD21A0C34952F609A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cf1b487-b141-31b0-9759-7673bc504353.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        76.103.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:62:fd:21:a0:c3:49:52:f6:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1412bdfd-3388-4668-a3d0-4f3c893b4461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:35:d6:4a:a7:a7:d6:f0:48:2d:54:95:1b:
                    32:76:71:c7:b6:e3:7f:0b:67:45:a1:ce:f2:f7:db:
                    65:a1:6d:49:1f:e5:07:69:8e:4f:4b:b0:57:27:27:
                    87:2e:66:e3:3c:4e:4b:7c:d6:7b:fa:f8:c9:d5:4d:
                    7a:35:ed:2a:f3:01:fa:a7:56:4d:35:b7:5c:af:6a:
                    92:a9:5c:de:b1:1b:30:86:44:dd:c5:ad:6a:62:92:
                    90:1b:53:33:ef:cc:f2:65:d8:94:63:a2:4c:dc:ac:
                    6b:37:cf:80:8c:69:9e:14:a8:5e:3f:61:7a:52:cd:
                    8e:78:ea:61:e0:a5:e5:ff:b9:7c:e8:9e:0d:0d:3e:
                    6f:76:af:ff:4f:7a:6a:e5:5e:32:ff:51:a2:ee:ca:
                    6b:41:9f:82:87:46:0f:a9:08:53:f8:73:f9:ed:bb:
                    e1:74:f2:9f:4d:07:d6:22:f9:61:80:c9:01:97:6d:
                    f5:93:9d:4a:b1:5f:eb:94:39:6c:9d:c4:53:80:c6:
                    6f:49:f2:4e:90:ca:6e:d3:ac:7a:a9:5c:08:ad:d9:
                    8b:00:ae:8c:04:a7:fa:6b:48:3d:77:20:c2:d3:87:
                    89:66:ad:89:fa:f9:76:24:2b:25:b0:dc:72:35:89:
                    df:26:7c:74:81:bc:c9:5f:b8:83:dc:28:8d:fd:d9:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EC:7D:B5:0F:98:78:40:19:A5:8D:B0:C2:28:B1:B5:E5:15:4B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cf1b487-b141-31b0-9759-7673bc504353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.103.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:dc:30:1c:1a:5b:2b:be:ed:ef:c5:29:4a:61:75:15:8e:62:
         9d:ab:96:56:ec:ac:cd:d4:66:fb:b6:9d:9d:66:c0:8f:94:ee:
         c2:57:b5:8f:a8:21:32:05:40:3d:d0:95:bd:56:0f:b0:11:37:
         63:e0:f3:99:aa:f5:9b:23:ee:b6:dd:d5:16:ad:2e:fb:8a:45:
         75:f5:d4:c4:91:c1:47:ad:b7:a2:9b:02:fc:8e:e4:d9:1f:88:
         be:5d:47:a2:d1:aa:31:c2:b7:a0:68:da:6a:33:c7:14:58:02:
         6c:ae:d9:e1:cc:2e:5d:77:4a:fd:d7:a3:84:52:e0:a4:fd:a5:
         10:53:2c:26:7a:9f:db:18:91:bb:23:f2:a8:aa:86:a2:88:7e:
         48:c4:b9:45:7c:92:e2:74:39:9c:79:30:4b:43:c9:cd:20:ce:
         8c:68:a0:73:5a:90:dc:aa:30:55:1a:76:5c:56:17:a6:c2:6b:
         d9:25:7a:89:9a:c4:59:ae:57:a8:d3:dc:ee:a6:2b:88:b9:60:
         ad:ef:0a:08:8c:0b:4f:bb:a5:bd:bf:f1:9c:eb:70:0c:bc:cb:
         fe:97:3f:9d:60:46:ba:68:1b:9e:71:22:a1:cf:93:3a:d8:e2:
         98:ab:38:37:4a:09:da:78:bb:46:f4:44:7c:2b:a4:25:cd:af:
         b0:de:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:52:32 2026 by rpki-client