Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a09523-a25f-312f-917c-14bd3f5c1f67.roa
File:                     13a09523-a25f-312f-917c-14bd3f5c1f67.roa (raw, json)
Hash identifier:          FQaiCPsS2LWLbqt2QMB3sHCW7ldVFMbRqT/3fnoXqDA=
Subject key identifier:   94:3E:1E:FB:89:90:EC:9B:96:21:6A:92:06:80:9A:FC:12:63:89:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED861F23811095BAE67E63200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a09523-a25f-312f-917c-14bd3f5c1f67.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        24.20.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:f2:38:11:09:5b:ae:67:e6:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=db617757-a45c-49ad-ad9e-d89f61540d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:cd:3c:3c:2c:9c:03:0a:35:7a:16:9d:e4:
                    c7:7c:5c:9b:ae:c5:8e:69:41:b0:88:1c:f7:e1:47:
                    14:36:fe:01:35:02:00:80:00:a4:ed:78:2d:2d:71:
                    d0:66:43:57:b1:03:57:25:5a:b3:5a:5f:20:e3:f3:
                    bb:a4:a5:10:14:15:2b:20:64:d9:c2:a8:7d:79:0c:
                    9e:f6:4c:20:35:e2:22:98:2c:25:37:28:e4:29:19:
                    69:9d:d0:8d:bb:0a:ae:27:c4:11:56:93:b9:bd:ae:
                    67:ce:0e:ba:4c:89:8c:2f:94:bf:04:f4:af:47:54:
                    0d:0c:8b:ae:37:86:83:c8:22:79:3d:4e:de:20:3e:
                    cc:78:05:ee:63:be:1c:c1:26:61:e6:43:eb:60:8c:
                    de:60:ec:17:75:88:87:86:3c:9e:a3:31:c1:4a:3c:
                    d7:57:62:ef:a5:fa:39:eb:07:ea:2f:62:08:f3:10:
                    23:80:76:69:55:cb:f5:9d:52:81:86:2f:90:bd:fc:
                    fc:6f:c6:02:77:f5:c6:42:0d:07:7e:02:a2:02:04:
                    bc:3f:4b:4b:82:f7:db:de:91:e0:07:c9:ad:87:94:
                    4f:68:41:60:8f:59:2d:0e:67:a9:25:1a:92:e0:23:
                    34:2d:95:df:30:71:87:ed:77:47:4a:eb:1a:ad:bb:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3E:1E:FB:89:90:EC:9B:96:21:6A:92:06:80:9A:FC:12:63:89:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a09523-a25f-312f-917c-14bd3f5c1f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.20.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:af:2a:c3:fd:42:fc:4b:ad:4d:b7:d8:98:44:7c:04:d8:d2:
         43:21:55:31:db:b7:bf:b5:66:c8:3c:04:b6:98:14:00:18:3c:
         d6:6a:f3:e5:20:56:b2:4e:15:f9:d8:7d:4c:01:14:62:29:f5:
         a5:13:50:18:c6:b6:0a:25:b6:b7:2d:1f:30:57:cd:e1:6b:c2:
         e2:a8:1a:51:d5:b9:ea:50:f1:c5:9d:62:fe:29:e5:d7:10:98:
         fb:fe:94:13:69:7f:a1:da:3b:67:5f:1d:fc:fa:c1:ff:64:a8:
         e8:a1:48:24:91:63:6c:bf:ce:6b:c2:0b:7b:b8:54:37:06:f4:
         44:97:d1:85:fc:6d:7f:ea:2a:81:b2:ee:d5:05:24:47:3e:58:
         c4:7a:6a:eb:2b:91:f4:12:bd:3b:f0:0b:db:07:1c:af:89:98:
         6d:36:16:7f:be:92:23:f3:96:02:98:a2:e0:3a:0f:29:8d:00:
         e9:59:6e:f6:e4:17:b2:5c:72:cc:d8:0b:0b:5c:1e:9c:16:8d:
         66:9d:5d:80:f9:df:4f:c4:c1:8d:8d:6d:de:09:08:47:dd:4b:
         85:81:61:d4:7b:0b:3d:45:b8:82:f1:90:e6:ba:dd:50:76:f5:
         14:35:24:f9:c0:0d:2f:b4:c8:14:62:b8:57:9c:86:4e:13:e2:
         15:30:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:57:11 2026 by rpki-client