Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24149e62-1cee-31e6-936a-7106a898033f.roa
File:                     24149e62-1cee-31e6-936a-7106a898033f.roa (raw, json)
Hash identifier:          kvrDsT/+nyKhFNEyZZbtIP9wbwofPmofpIbDImd5kmg=
Subject key identifier:   81:A7:26:89:58:22:A3:16:CE:A8:17:1F:CE:8F:88:87:24:34:E0:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED861FD52D4F765DF0A53A700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24149e62-1cee-31e6-936a-7106a898033f.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        71.193.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:fd:52:d4:f7:65:df:0a:53:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=74de2155-4b7e-4661-92fd-6c97bc43445b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:c3:09:ff:8d:65:25:5d:f5:86:3d:76:f2:
                    00:bd:87:90:3e:95:81:8f:dc:e1:58:86:83:b8:07:
                    6c:5d:ad:2c:d7:42:fd:a1:0b:91:d3:a8:dd:af:c6:
                    ae:83:5b:7b:71:f1:83:e3:8a:46:f9:e4:c7:08:10:
                    b1:30:4a:40:4f:3f:7d:43:0b:ab:fd:b1:6b:03:9e:
                    46:0c:ff:b6:28:78:c2:89:40:5c:09:e5:37:37:f6:
                    02:20:5d:37:c2:52:2e:2c:b5:bb:ea:7b:3c:19:30:
                    16:3a:9d:22:c4:81:41:e5:29:1f:a2:01:c4:71:c1:
                    f8:02:59:3a:4e:bb:d3:30:0e:25:19:5c:50:d0:af:
                    a4:2c:8e:e5:33:12:11:d0:3c:6e:89:b7:b4:b7:4c:
                    3a:06:25:aa:be:5d:62:92:b9:00:c5:67:f8:a0:99:
                    c7:d8:85:a0:a0:12:62:e0:6e:f1:90:45:67:ac:53:
                    39:a5:43:3f:7e:e3:93:1c:8a:87:b9:70:d3:91:ba:
                    2c:16:45:5f:96:d7:57:2f:61:73:b0:50:d8:d8:31:
                    a6:1d:0e:35:c3:ea:9f:83:bc:00:c3:56:63:51:96:
                    d7:9c:80:f4:3a:6c:54:75:29:64:24:e8:dc:fb:dd:
                    84:58:93:df:a4:de:44:62:3c:d5:6e:6a:bd:1d:33:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A7:26:89:58:22:A3:16:CE:A8:17:1F:CE:8F:88:87:24:34:E0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24149e62-1cee-31e6-936a-7106a898033f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.193.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:98:23:e2:d7:38:58:70:d6:12:ae:1f:0d:d0:1f:20:e0:c3:
         94:52:b2:f8:6f:df:84:06:e2:c2:7f:d3:c6:d5:36:77:79:ca:
         eb:57:34:c7:3f:8f:89:bd:0e:4a:ba:98:1b:6f:05:35:77:a2:
         b1:be:47:ac:0e:17:af:76:fd:cb:74:d6:34:4a:c7:7a:98:47:
         df:51:c0:86:4f:49:ec:66:29:30:4d:14:2f:d7:d0:91:d7:0c:
         73:fe:61:a3:79:0b:43:56:35:67:55:6e:da:2e:71:e9:7c:b0:
         7b:15:af:1e:30:f2:9f:93:ad:68:1d:87:00:57:b8:20:b2:64:
         80:9c:25:89:42:68:64:c6:d1:f5:88:1c:95:d1:8c:9b:25:71:
         ee:e0:71:5b:60:3d:3d:a9:0a:fa:98:98:31:e0:79:6f:4c:c0:
         4b:a0:dd:31:a1:05:57:ed:5e:ba:51:95:77:10:1f:a3:79:9d:
         0d:2c:49:f4:1e:0f:b3:f3:4e:9c:46:2b:f0:93:90:39:0c:47:
         98:f4:35:39:5a:e1:31:d5:6a:56:b8:60:ff:3b:8c:63:65:76:
         63:04:8a:b6:7c:43:3a:b5:b0:e4:a5:c1:a0:9b:98:c8:cc:f1:
         19:4b:75:ea:3e:7b:80:9f:bc:00:19:00:e3:77:17:28:d2:5b:
         f2:be:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:32:17 2026 by rpki-client