Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2817745e-3aba-346a-afe2-d79a78e81831.roa
File:                     2817745e-3aba-346a-afe2-d79a78e81831.roa (raw, json)
Hash identifier:          Ag1egkjYJpqe08HZdoKi3bZ8CogAbdgfPE1ymsk45kk=
Subject key identifier:   35:4B:FD:94:78:8E:FE:2D:D1:08:69:48:A9:39:87:05:5B:75:0D:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED861F2C139B6AADA4280F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2817745e-3aba-346a-afe2-d79a78e81831.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        24.20.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:f2:c1:39:b6:aa:da:42:80:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=cd31ef93-30bc-468a-8390-162e7dffae2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:84:4b:0a:76:7f:ef:1b:5d:4d:4a:9c:90:
                    00:3a:df:cc:1c:2e:71:84:4d:af:cf:77:be:3b:f0:
                    ec:bf:61:14:cd:7d:9f:da:80:2a:71:92:e6:30:65:
                    6f:75:64:12:77:e5:bb:b1:a4:c0:eb:94:63:0f:b1:
                    93:45:30:5c:f4:c9:27:90:bc:cd:b1:89:1f:ed:1a:
                    fb:59:06:e7:b5:94:16:c9:80:c2:c7:99:37:9e:6c:
                    b6:4b:9a:90:63:ce:dc:1e:7f:f4:4f:2d:4f:64:f0:
                    db:16:e0:0a:25:e6:2b:20:40:32:57:85:12:5c:7e:
                    f5:b3:db:e6:de:10:7c:ab:d7:06:31:84:68:56:87:
                    63:c3:e8:08:1b:41:54:c2:ac:52:1a:3c:5a:41:3a:
                    b6:bf:a0:1c:6b:75:13:d9:5d:5f:5d:e3:79:f3:4a:
                    22:7f:6d:d2:d0:ae:d2:43:1d:e7:b0:30:0b:22:db:
                    d6:cd:8f:a8:3c:24:d9:28:b4:85:eb:a3:18:f9:68:
                    f6:c4:c3:cc:1b:a3:6f:75:46:08:e2:f7:03:6a:43:
                    60:bb:f2:10:06:f6:d4:8d:20:7f:c9:94:89:9a:8e:
                    9c:8d:5e:f4:c0:74:2b:23:ff:f8:63:8b:07:ec:81:
                    c4:61:1c:dd:2a:e1:53:f7:c8:6a:13:41:ff:19:0b:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:FD:94:78:8E:FE:2D:D1:08:69:48:A9:39:87:05:5B:75:0D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2817745e-3aba-346a-afe2-d79a78e81831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.20.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:fa:e8:ba:33:9d:f7:76:f5:07:d9:dd:cc:ad:38:f2:d5:5f:
         3b:ea:ac:c8:47:71:6d:8e:24:de:47:46:3e:ae:00:a2:af:36:
         35:8e:47:d0:9c:67:76:4d:30:f1:06:52:5e:ff:be:f1:c5:93:
         a5:0b:67:fb:6f:5a:38:99:5f:03:80:42:65:c0:fc:4a:6d:5a:
         aa:22:f2:33:11:8b:3b:de:16:c5:f4:96:cc:0e:39:89:bc:7c:
         c9:22:7f:d0:2f:da:e3:9c:3d:de:bf:31:26:15:f0:b2:dd:3f:
         d3:77:76:be:d3:7e:fe:b1:ac:2f:bc:ef:3f:32:01:1b:83:9c:
         4e:60:af:96:71:6a:f4:e8:38:e3:40:ef:c5:5c:7f:24:7f:7f:
         92:68:cd:fa:70:80:85:3d:cc:6e:e7:c2:f9:cf:2b:4e:4f:c5:
         34:07:8b:74:59:2f:2d:5b:14:70:1d:15:14:04:7e:01:94:f2:
         1a:2d:93:b0:fc:59:64:21:1e:d0:6e:e2:3d:9c:04:32:fc:0f:
         5f:08:08:d0:b3:db:f9:0a:ff:80:42:9d:be:e5:eb:d4:4e:cd:
         2e:6e:51:8b:1f:5f:ce:8d:5c:85:c9:a8:90:23:03:8b:46:da:
         ca:c7:6d:fb:03:40:00:4a:44:1a:b6:96:36:7e:81:f1:99:bc:
         62:2f:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:30:27 2026 by rpki-client