Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d3c8f85-93ae-3e11-b662-d8a2c42bce3a.roa
File:                     7d3c8f85-93ae-3e11-b662-d8a2c42bce3a.roa (raw, json)
Hash identifier:          jNqd67hb3Qd2mWJ6F+b1/7a4oOgEgA833jKOnryymXs=
Subject key identifier:   FA:D8:CD:13:C2:A9:4D:A4:AF:2F:87:6A:95:8B:6B:A6:78:8E:59:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600DFF7F4E60D1D93A69E10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d3c8f85-93ae-3e11-b662-d8a2c42bce3a.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        76.28.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:df:f7:f4:e6:0d:1d:93:a6:9e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=4d171d8d-b64e-4e6b-b668-cdf5c7d88edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:71:7c:60:1c:5e:18:ab:24:74:cb:55:16:
                    a8:1f:04:7b:54:cd:03:99:8b:52:c3:0c:da:34:02:
                    ad:e9:e0:c2:de:61:aa:79:85:4b:53:5e:61:ed:ab:
                    b9:42:c3:e6:97:0a:5f:09:ba:c1:f4:34:6f:6a:57:
                    ef:7e:b4:df:5e:76:20:33:b7:e9:4f:8f:65:52:63:
                    a8:4e:ed:46:f2:7a:a8:ca:d2:e1:92:d7:75:dc:0b:
                    65:ce:f3:fd:e6:5c:76:c8:83:0e:29:e4:a2:0a:9b:
                    87:2f:8e:37:97:fe:db:34:0e:43:23:88:5a:87:7f:
                    0a:e8:d8:22:95:31:1d:c2:c6:99:a6:c4:b9:2b:7a:
                    80:fa:51:93:15:74:75:04:65:a2:95:3a:73:f7:d0:
                    66:5c:9a:4e:ce:5c:9b:d7:af:0d:43:20:57:44:fe:
                    74:48:0e:0e:92:b6:bd:c1:3f:9b:67:c8:92:7e:d4:
                    2b:3b:7f:8d:43:5d:32:f7:eb:86:77:64:06:20:47:
                    15:3a:52:29:99:aa:4f:fd:be:2a:d9:d5:5d:93:d8:
                    8d:ee:6a:aa:fc:1a:2a:61:ed:ac:6f:b0:b9:2d:3d:
                    b2:59:98:1c:63:96:48:0e:c4:7e:2b:1b:ee:02:17:
                    83:9b:cf:bc:c0:3c:02:54:e6:da:ba:04:e5:5e:fe:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:CD:13:C2:A9:4D:A4:AF:2F:87:6A:95:8B:6B:A6:78:8E:59:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d3c8f85-93ae-3e11-b662-d8a2c42bce3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.28.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:91:ac:a2:95:9e:73:86:36:da:a5:57:e1:fa:41:ab:02:
         47:b1:33:53:18:67:24:48:bc:28:17:b3:2d:0b:6d:c8:50:d3:
         d5:d5:a5:e3:9b:8f:5d:fb:e0:e7:f1:9a:e4:ac:9c:04:62:81:
         42:63:f6:bc:4e:a8:38:e6:f0:6b:45:ab:35:40:b2:25:05:d5:
         2d:e1:c4:f0:63:b5:d9:fb:aa:07:35:bb:bb:72:08:cc:35:ba:
         7e:93:cc:9d:94:17:6d:35:af:b2:59:ed:a2:f3:bd:56:28:aa:
         2a:61:80:b5:9b:44:87:f5:35:2c:29:a8:0c:a3:04:ac:cb:2a:
         4a:03:14:fa:b9:1d:f6:ff:57:54:28:da:53:ab:cb:8f:07:bb:
         be:be:87:a7:67:16:42:15:54:67:68:69:0f:40:a9:55:2c:08:
         ad:3d:bd:13:03:13:38:22:71:fb:bf:b8:66:e0:76:6c:40:c7:
         7b:c4:26:eb:cd:e6:bc:e6:be:ea:98:48:c6:b0:44:f2:42:61:
         35:9e:ff:d0:fd:e7:a4:5b:23:49:7c:16:39:98:b6:01:bb:b3:
         a8:ea:74:57:87:62:76:82:86:3c:70:16:c8:e7:ca:37:29:87:
         20:fb:12:9d:61:ac:6f:db:9a:d4:24:39:e8:fa:b7:00:13:c5:
         0c:91:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:41 2026 by rpki-client