Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00130afb-89c4-31e3-8a1a-87f90a3179a3.roa
File:                     00130afb-89c4-31e3-8a1a-87f90a3179a3.roa (raw, json)
Hash identifier:          I2viwA/cBfNEWtpGTI9+DBM+4WW6UU4J0+K/Lbs/3bw=
Subject key identifier:   F3:60:A3:36:14:70:38:4E:18:02:C6:2B:54:02:0C:16:7B:10:B7:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8622A63444B61B429F9A3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00130afb-89c4-31e3-8a1a-87f90a3179a3.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        24.34.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:2a:63:44:4b:61:b4:29:f9:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=bfabc75f-2c9c-48d8-9512-0d177bd73700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c5:8d:01:04:4b:99:77:d5:76:e4:dd:24:a3:
                    ec:17:7c:fa:9c:19:94:86:c7:9b:7d:65:47:4e:bc:
                    4b:05:09:83:65:c7:6f:83:99:fe:12:2e:9c:b0:4e:
                    76:84:74:50:90:35:9a:da:17:e7:82:6f:a9:28:78:
                    0b:98:26:8c:1b:2e:c7:73:93:97:e8:8b:e8:37:70:
                    8a:0f:cd:4e:d5:f0:e8:4a:7f:48:84:55:b3:dd:12:
                    f9:f3:2e:32:70:0b:e9:5a:a8:28:d8:27:16:d6:92:
                    4f:1a:b3:05:e0:06:df:7b:20:22:a9:cc:86:74:99:
                    1f:97:38:0b:5f:bb:7c:80:77:a1:cd:e5:58:76:74:
                    29:ca:88:e5:3d:e9:46:b5:5f:88:6e:95:74:2a:48:
                    14:bc:af:5b:91:85:5e:c3:04:27:72:41:ec:d2:36:
                    cc:e0:f1:9d:c8:01:d4:2e:93:6b:6b:8a:2d:07:fc:
                    f0:cb:6f:d2:ae:fa:48:3f:35:39:da:9d:fc:ae:1b:
                    c7:9c:78:6a:81:0a:72:d9:66:e0:44:c7:96:7f:66:
                    84:23:be:0b:4e:ed:6f:97:d2:7d:cb:b2:95:0d:81:
                    58:1c:a5:da:d7:4d:1c:23:d4:e6:46:dc:ad:01:08:
                    5d:9d:48:9c:83:af:2e:c6:e7:a8:03:2f:cb:28:1a:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:60:A3:36:14:70:38:4E:18:02:C6:2B:54:02:0C:16:7B:10:B7:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00130afb-89c4-31e3-8a1a-87f90a3179a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:46:9f:c4:8d:45:8f:20:d0:23:f9:2b:01:5c:1b:db:9f:
         8e:89:dc:52:36:ae:97:3f:61:c8:3e:7b:07:aa:4e:7f:31:fa:
         1d:98:54:90:c0:84:47:b8:8c:55:71:ba:ba:9a:cb:8c:c6:79:
         b1:05:7e:73:19:29:83:ed:a5:f1:e8:2e:ff:d1:07:d0:1f:39:
         8a:38:80:5b:51:8a:20:86:04:46:64:70:5e:3b:0a:3d:6a:81:
         0c:c5:d4:f3:e0:d7:74:36:ec:00:a9:eb:2a:10:e1:01:fc:b9:
         cb:8b:57:b4:3a:9e:5b:ef:d8:b4:06:72:78:ce:04:5a:fa:02:
         24:da:d5:d5:a4:5a:e6:b3:64:9b:f2:d3:8d:c9:ba:54:30:09:
         a0:6a:dc:e4:65:46:ca:c2:6c:60:9b:1e:f5:e0:e2:c5:ae:e6:
         e4:4b:af:3c:42:9d:d6:46:72:72:a1:8c:a8:85:10:68:81:aa:
         ce:bb:d4:3c:e9:f3:ce:dc:a5:8b:0c:d6:1b:7f:cd:59:64:2d:
         34:95:66:1b:ee:79:05:db:71:5b:6c:85:5b:d4:18:e1:5a:dc:
         cf:e9:f9:d1:d9:77:31:d9:77:82:d8:8d:83:e9:22:78:92:0f:
         f1:74:81:a9:1d:c5:da:76:1b:55:44:9f:14:ce:88:23:d5:47:
         eb:9c:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:35:52 2026 by rpki-client