Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce100375-1c20-354a-90ba-5cd1e6376492.roa
File:                     ce100375-1c20-354a-90ba-5cd1e6376492.roa (raw, json)
Hash identifier:          KkxO406JOzbvYvzVGkCuF1TwVjWbTaZdFQKuqholzx8=
Subject key identifier:   4E:7E:06:CE:7C:66:32:F1:5F:94:9F:88:45:6F:94:8D:D3:E1:0D:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D8FCBC829FBA5386359C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce100375-1c20-354a-90ba-5cd1e6376492.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        76.124.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:8f:cb:c8:29:fb:a5:38:63:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=fabb5609-2051-4933-8a63-ac378e4495c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b9:49:33:af:96:24:4d:a0:78:26:f9:57:12:
                    4d:07:24:95:93:6c:8b:ee:63:a2:d3:fe:fe:9f:80:
                    c3:1f:e9:8d:fa:cb:19:b3:51:c4:ab:29:af:28:25:
                    69:f1:56:4e:1e:35:81:d9:84:05:c0:96:8e:65:78:
                    26:f2:9c:db:a1:ed:f0:a1:d8:d9:b5:46:58:22:fc:
                    7b:dc:64:ae:2a:89:d9:66:66:0d:99:1b:41:02:f3:
                    0d:99:ca:d7:82:9b:02:df:c0:8d:3f:ea:e2:93:24:
                    c5:79:17:01:19:5f:cf:6f:10:4d:8d:e7:26:f8:b7:
                    bf:39:cb:04:3e:3b:0e:2b:26:1b:cd:6d:e5:ce:b7:
                    bd:13:f9:dd:fb:cd:4c:bf:1a:eb:8a:13:21:6e:3d:
                    e5:4a:cb:7b:42:d7:c7:9a:b4:a0:51:32:64:b1:07:
                    ac:ab:e7:60:c5:dc:8f:14:e1:57:0a:4e:1a:27:27:
                    e7:c1:22:20:98:f7:c4:48:ad:0d:d0:4e:5d:a3:c7:
                    9b:c9:49:5a:51:76:a9:48:23:a1:0c:69:b0:11:1f:
                    1a:04:ef:b4:3e:92:49:24:3d:62:7e:19:6c:3c:37:
                    da:6f:02:16:61:3f:3d:7d:a1:c8:2b:b3:b6:69:40:
                    4a:e3:f3:b2:fa:63:73:52:38:1a:4b:88:c6:ab:ad:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7E:06:CE:7C:66:32:F1:5F:94:9F:88:45:6F:94:8D:D3:E1:0D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce100375-1c20-354a-90ba-5cd1e6376492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.124.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:6e:6b:80:22:74:1a:b6:36:be:71:40:c4:6b:3b:37:7d:
         4a:c8:72:5a:97:ec:e5:c9:a0:b0:09:a0:15:6c:46:31:7f:bf:
         f3:dd:de:6f:87:9e:c8:dd:79:dd:12:e8:e9:65:c5:85:56:84:
         7e:2e:e3:0f:1f:38:66:99:a6:19:40:e8:ec:65:fb:63:54:71:
         a3:a8:29:f7:bc:b7:8e:a5:44:64:b4:85:39:d7:91:3e:b2:20:
         89:d5:71:81:8f:68:5a:4e:1d:1a:10:8e:11:bb:53:3f:7c:85:
         4d:3d:b5:bc:08:0d:38:ba:a3:75:55:c1:07:e3:56:e4:a5:31:
         92:77:84:3b:2e:7b:fc:7c:b6:62:79:7a:28:27:b9:63:67:54:
         2b:fb:6c:65:6f:f4:f6:d6:38:d1:87:68:00:b2:dc:2d:b3:7b:
         cd:21:5f:0c:7f:7e:85:4f:5d:9b:15:35:87:72:7c:40:c7:76:
         e7:7f:b2:e3:a1:ff:a6:7b:31:00:5c:6d:3d:a6:1f:92:e0:1f:
         b3:49:65:15:4b:9f:14:bb:0c:a9:0b:9f:81:b3:d5:49:d5:05:
         99:2a:97:6f:c1:59:e9:66:bb:27:b5:cb:b5:e1:a7:7d:ee:e0:
         bc:da:59:03:6e:d3:df:39:7d:08:17:53:8d:b8:f5:25:48:a2:
         f6:2e:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:45:28 2026 by rpki-client