Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12251412-6be4-3dff-886b-14134ae7b9cb.roa
File:                     12251412-6be4-3dff-886b-14134ae7b9cb.roa (raw, json)
Hash identifier:          GvuRnAJCu09EGEwuAA2IQS99aKglW/fEgYfnk8+59/g=
Subject key identifier:   44:E1:AD:89:D2:C2:49:92:7E:53:EC:C1:D2:00:76:92:9A:96:6A:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFC92AF78A594A36217880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12251412-6be4-3dff-886b-14134ae7b9cb.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        24.127.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:c9:2a:f7:8a:59:4a:36:21:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=7b2f0817-5569-440c-b399-17c5d56afbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:4b:8a:c2:20:2e:74:85:dd:bb:68:2d:af:
                    21:02:c9:d5:64:e2:95:fd:e8:df:cc:17:9e:d8:80:
                    54:2f:a4:85:09:ef:bf:7b:68:1b:6e:88:a6:32:0a:
                    02:49:d4:4a:9c:73:d9:f3:e9:43:1c:75:9e:45:27:
                    92:0e:c1:86:fb:48:96:1c:f6:72:a0:2e:3e:3d:91:
                    16:6d:8b:98:a0:2e:68:ab:89:cb:a7:9c:d0:d2:32:
                    c4:b2:84:7c:61:32:d1:cf:11:06:53:c2:35:3f:01:
                    12:eb:01:02:11:50:c4:c1:12:9e:f0:a4:e9:51:ec:
                    80:3c:1d:cf:53:5f:7a:1d:97:d1:f0:4a:f5:65:c1:
                    f5:98:50:ec:1d:d6:9a:18:19:71:96:c9:dc:e0:95:
                    39:c2:91:30:21:f3:1f:2a:c6:ea:da:7f:d4:98:58:
                    47:df:28:ab:7a:12:c7:2c:e2:76:9d:c3:6f:64:eb:
                    2c:5d:f4:4c:54:67:ee:d9:96:d0:2e:6d:c3:1e:d0:
                    fb:d8:78:16:a0:d2:99:6e:f5:c3:ed:00:1e:cd:b5:
                    70:aa:72:46:12:d8:7f:b8:42:43:dc:ad:e3:49:58:
                    7b:c8:63:0f:e9:d2:0c:c9:3a:2e:b3:45:38:5a:e8:
                    30:8d:a7:1e:d8:a6:43:11:d4:e8:03:fe:ec:7d:4f:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E1:AD:89:D2:C2:49:92:7E:53:EC:C1:D2:00:76:92:9A:96:6A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12251412-6be4-3dff-886b-14134ae7b9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:cc:65:52:2d:77:b9:06:ff:f4:c2:55:24:7e:0e:25:42:da:
         4d:35:fc:d7:34:37:3e:b3:53:fc:5e:18:19:13:4f:14:4e:a7:
         a7:dd:b5:1e:e8:3e:34:b4:70:7d:9b:ae:99:3a:ee:e0:f6:38:
         36:d5:c0:25:65:80:b9:ca:8a:cb:67:1d:60:49:6f:8c:1d:cd:
         29:50:13:b4:d6:fd:4d:05:56:71:ee:fd:c9:80:7e:30:d4:ed:
         49:ef:92:01:58:6c:8e:a7:9a:dd:ec:d4:8a:95:ff:8a:5c:17:
         64:f8:54:af:b2:cc:9c:e2:d0:3f:4f:76:6f:4b:38:82:0d:f9:
         44:c5:c0:7a:76:48:66:04:cf:80:ec:df:d1:aa:86:00:32:32:
         a1:1b:d2:4a:73:46:c4:d8:84:c6:87:12:fe:d8:99:ba:60:db:
         2d:bf:1d:51:f4:59:b1:d6:60:19:25:ef:06:23:6f:f2:0e:e9:
         5a:65:1e:9f:ec:cb:75:fa:d1:72:cb:06:4e:a4:89:0e:6c:db:
         9a:c3:a1:64:51:98:ac:2b:bb:1d:9b:83:e0:56:c7:59:c0:3b:
         ed:d9:21:1f:f9:9b:cb:73:2e:85:38:11:26:3c:c1:57:d5:aa:
         e9:77:1a:36:1b:cb:42:18:a1:a5:8a:76:b9:68:ab:c7:de:b2:
         e3:75:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:32:28 2026 by rpki-client