Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d9ef87b-443b-3181-98f8-3c64a6ce73b4.roa
File:                     9d9ef87b-443b-3181-98f8-3c64a6ce73b4.roa (raw, json)
Hash identifier:          XGe2Roch7b1EZ5sLluGCa0lKOhfYamWZPO+FEBEs79g=
Subject key identifier:   B7:ED:ED:E0:D8:F3:04:32:75:38:42:91:F2:20:A5:CD:8C:F1:9F:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8642F254D935E8B3AC4DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d9ef87b-443b-3181-98f8-3c64a6ce73b4.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        76.31.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:2f:25:4d:93:5e:8b:3a:c4:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=438306e6-2661-4e98-8568-3040e4f572e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:ab:12:72:cb:2c:73:d9:4d:84:3c:03:fe:
                    e6:45:04:e3:af:75:8c:15:77:a6:34:bd:99:6a:9e:
                    24:a7:c9:f5:b9:72:47:a3:5d:23:b3:c2:54:cd:87:
                    8f:db:6d:ea:2e:cd:43:eb:61:88:c3:ac:a2:b7:e9:
                    58:da:8e:12:08:d0:84:5b:c0:4d:45:8d:d5:a5:45:
                    db:9d:77:e8:8b:d3:05:69:28:f7:ca:7d:be:46:23:
                    6a:f6:23:43:70:e4:e2:36:1d:79:38:64:e8:6d:b4:
                    33:d2:bf:0a:ca:85:05:0d:ed:db:28:85:b8:02:59:
                    91:a5:d6:25:c7:79:04:8a:26:d4:35:8a:fc:09:a5:
                    a8:82:61:0c:36:4e:86:fd:0f:8d:53:06:37:27:ed:
                    f6:bf:40:e7:4c:31:46:08:a0:b8:fd:42:1c:92:2c:
                    01:7c:e8:63:e9:4e:5b:01:41:56:45:1b:5a:3c:ad:
                    1a:09:e7:11:4d:d2:fc:41:30:3d:64:d3:18:2a:41:
                    c3:74:99:2e:9e:dd:ec:2d:34:96:4f:cc:9b:7e:6a:
                    46:6a:4c:12:75:96:85:6d:fd:ea:2f:28:88:07:34:
                    8e:6a:53:00:88:45:8b:be:58:5f:3c:02:90:a0:36:
                    89:73:46:c8:56:1c:99:55:7f:ad:54:a5:47:2e:28:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:ED:E0:D8:F3:04:32:75:38:42:91:F2:20:A5:CD:8C:F1:9F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d9ef87b-443b-3181-98f8-3c64a6ce73b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.31.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:c4:ac:ba:45:57:ee:98:0d:ab:d6:b7:20:c0:df:4f:64:
         0e:91:4c:af:92:9b:c2:82:11:72:67:d7:12:6b:de:0f:6b:85:
         ed:78:bc:80:7e:7a:63:02:02:e6:74:ec:c2:da:dd:58:d2:b8:
         f1:58:51:68:75:4a:71:e7:68:a7:ab:4e:a2:5d:61:a1:70:79:
         0d:38:35:7f:c9:10:92:c9:8a:42:96:8e:4b:5f:f3:32:a9:9f:
         6c:91:10:a9:d3:34:8e:53:56:e2:a4:b4:ee:78:fd:ea:90:ce:
         85:44:ab:f1:42:e4:e6:f6:b9:54:20:22:6e:a9:05:e8:7e:71:
         e9:43:fd:01:b0:a8:21:99:b1:32:e2:ba:20:8d:45:a7:70:ea:
         e0:bb:a3:14:9a:a4:55:c6:88:48:0d:cd:5d:a0:dc:ed:ff:ca:
         24:c5:90:89:06:21:cb:2a:44:b0:0e:b2:d7:b5:dd:44:2f:b2:
         b9:da:f1:a6:36:a7:43:02:32:4a:0b:d1:78:8c:50:9c:72:44:
         8e:de:98:db:d9:f2:5c:9d:e1:c9:71:34:4c:d3:fa:ac:aa:bf:
         f7:d1:c5:15:54:f5:85:60:87:01:f7:0f:82:c8:b1:3f:ef:9f:
         1e:fe:d6:2a:4e:36:fc:30:e7:20:8c:10:a5:77:9b:85:7c:d0:
         8a:7e:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:55:07 2026 by rpki-client