Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98f18d3-d187-33aa-8118-86c2d6943f03.roa
File:                     f98f18d3-d187-33aa-8118-86c2d6943f03.roa (raw, json)
Hash identifier:          jLwirwudpTdJGgePp3/4pk7NEZcHGv1OqeD96sAHolo=
Subject key identifier:   09:93:2F:6D:ED:0D:42:97:5B:17:2C:AD:BF:51:27:52:06:34:C9:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981F7D92750946B46EA1260
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98f18d3-d187-33aa-8118-86c2d6943f03.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        76.156.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:f7:d9:27:50:94:6b:46:ea:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ac1b315-4eb4-468e-8897-fa4578dfa849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:d1:11:23:aa:97:df:49:8f:a8:04:cd:b1:
                    91:3a:7f:e0:d7:fd:12:39:d2:98:53:81:0d:b1:6d:
                    f5:30:3e:3c:e1:12:b5:cc:70:bc:e0:b0:3a:9c:67:
                    85:70:2f:35:06:3e:7e:7e:71:96:61:6d:0b:18:b1:
                    33:41:db:64:da:9a:15:15:19:50:68:ea:7e:97:bc:
                    23:cb:03:db:42:de:b4:ad:ac:6a:4d:34:97:d5:a3:
                    7b:9d:bb:84:ba:63:11:b2:a0:2c:c3:4c:3b:59:c0:
                    13:09:3f:96:c7:a3:5a:32:a7:bb:79:4b:a5:5e:fe:
                    8a:f2:ad:d4:ec:4f:64:29:84:8c:d6:8b:de:68:9a:
                    00:7c:57:2f:e6:e1:64:20:bb:a9:6b:86:d9:c6:99:
                    e6:46:99:c7:ec:1c:66:a4:d3:42:17:0e:d2:6a:3c:
                    a1:b9:fa:22:db:55:c0:48:26:05:f9:6d:18:b7:df:
                    c4:f7:b9:70:43:01:7a:8a:73:57:cc:28:57:ce:55:
                    66:63:7a:9c:d5:56:3b:5b:c7:90:3f:ee:7e:70:8c:
                    e7:a6:cf:5e:93:86:b0:56:3b:12:3c:d7:50:c2:d4:
                    02:d3:ea:1d:68:66:26:23:e4:0f:96:10:e6:2e:41:
                    aa:20:a5:db:e7:09:83:d8:4b:c3:1f:24:cf:57:96:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:2F:6D:ED:0D:42:97:5B:17:2C:AD:BF:51:27:52:06:34:C9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98f18d3-d187-33aa-8118-86c2d6943f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:00:67:12:02:06:d7:85:5b:e4:5b:89:d5:bd:ce:c6:c3:9b:
         ca:24:7a:c7:57:cc:c0:8b:5f:73:86:6b:62:63:f5:22:81:db:
         7e:27:1b:3b:88:e1:d4:71:b0:24:4b:21:dd:b0:a3:59:da:69:
         d6:93:6c:7e:85:90:e5:89:66:cd:cf:0d:0a:9c:40:d4:6e:fc:
         54:d1:a9:56:bb:23:a3:07:e4:37:70:2c:33:d1:b0:e3:a5:0b:
         6a:e8:8d:e1:80:31:93:c6:d9:b6:8c:3e:fd:06:dc:8c:a2:9a:
         81:c5:77:d0:5d:36:a9:93:68:7d:17:44:47:cf:bb:6e:8d:22:
         98:8e:b1:a9:67:70:a9:d9:79:4c:dd:70:22:24:49:e5:9f:66:
         91:11:3c:f9:05:62:c6:87:1e:47:5d:5f:c6:c1:ea:51:e1:40:
         a0:04:0f:c6:aa:3a:72:87:b5:8d:e0:48:4d:10:e0:5d:ab:01:
         7d:33:51:b5:59:b9:30:af:9f:64:d2:f1:e9:32:9a:48:c3:9e:
         23:95:6e:4e:ca:04:17:4e:11:c3:58:c3:1c:8e:e9:9f:47:16:
         ab:f2:66:d6:1d:88:40:da:6b:5f:1c:5d:2f:c4:e0:42:32:13:
         6f:9c:f6:01:1c:b4:7e:8a:4d:11:d1:ad:a6:a4:c6:9d:dc:f0:
         9c:53:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:50:04 2026 by rpki-client