Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b66429-6b50-3c9d-b3c4-3332a38a611d.roa
File:                     32b66429-6b50-3c9d-b3c4-3332a38a611d.roa (raw, json)
Hash identifier:          tPGsCbIYpFPUDlTizU1jbLUADk7wHQA0l+C+sQ8eaU0=
Subject key identifier:   7A:2B:38:CB:01:A8:14:88:41:CC:7E:16:51:B9:EC:41:27:CB:51:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7777A2202CD27CD34C240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b66429-6b50-3c9d-b3c4-3332a38a611d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        24.14.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:77:7a:22:02:cd:27:cd:34:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b0dbe9f2-1f98-495b-ad04-33167980b988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:ac:9d:72:7f:90:b8:d6:e3:29:ab:0a:1f:
                    c0:3f:cd:fe:c6:a4:b3:ab:07:ec:47:1b:44:59:f5:
                    ae:8a:13:b3:25:b3:fc:fa:4a:e4:e2:6d:ca:9e:b3:
                    31:14:3c:29:2c:88:50:cc:81:cc:51:63:3b:c5:3a:
                    89:94:49:e0:b4:c2:28:88:35:84:c1:f8:3f:da:91:
                    2e:db:d1:6b:30:6c:03:6d:7e:b2:22:74:0d:d9:52:
                    0c:33:6a:5f:50:cb:3d:3b:f8:f0:c8:a4:59:a0:c0:
                    a0:95:c6:c7:35:21:71:cf:c9:ca:a2:b1:14:f7:2c:
                    d3:ab:82:b6:f7:c7:5a:1b:9b:d8:95:5b:35:98:58:
                    21:93:ed:1f:a5:f7:e5:57:19:eb:3b:f9:0f:34:00:
                    d9:31:83:0c:25:d6:2f:96:6d:c8:c9:de:f3:04:d5:
                    66:93:35:98:8e:e4:46:08:e4:9f:fb:68:20:06:ba:
                    0d:1a:19:57:e0:69:62:a5:85:19:94:8e:07:7f:6a:
                    98:42:ef:f6:7b:2d:f6:fa:90:8d:d1:2b:85:86:6d:
                    7c:76:8f:1c:16:04:28:6e:80:52:25:35:4e:44:33:
                    7b:94:a3:be:dd:18:17:bc:19:b0:4b:95:63:60:8f:
                    32:c7:99:c1:39:b0:fe:60:ed:88:63:e0:7d:65:57:
                    7d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2B:38:CB:01:A8:14:88:41:CC:7E:16:51:B9:EC:41:27:CB:51:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32b66429-6b50-3c9d-b3c4-3332a38a611d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:78:1a:ad:cf:4d:d8:5c:2e:fd:38:c2:7c:6a:1b:87:e5:
         8a:f5:4e:e7:d5:0e:8e:e4:0f:7f:14:6d:03:0e:9c:85:a7:bd:
         0e:f3:21:ed:cf:97:4f:1e:ca:1c:c4:e1:fd:6b:09:41:8c:e4:
         99:e6:c9:dd:33:34:bf:a3:2f:82:cf:44:fe:bc:73:26:b6:d4:
         c3:ff:2c:31:0b:ad:63:86:89:8b:fc:f6:88:a5:07:d6:2e:95:
         37:8d:e7:9a:2c:f9:f4:5a:22:57:dd:1f:c9:6a:11:a5:36:16:
         0d:72:ef:de:c1:1a:28:fd:bc:a5:53:c1:83:cf:bc:2a:9d:49:
         a9:da:c6:8a:e1:ea:8d:18:a9:92:db:fe:85:c0:99:7d:5e:70:
         78:1e:96:90:0f:49:5c:0c:e3:0d:bd:21:c8:3e:aa:1e:99:9d:
         37:d3:ee:88:17:4d:c7:fb:99:17:ff:0e:b5:b4:74:db:bd:a3:
         ee:f6:89:c1:6f:70:ff:d4:3e:4a:a2:d7:95:32:b1:6e:60:fa:
         97:c9:c7:0a:33:74:61:f9:71:58:a2:2e:06:21:d9:a2:90:41:
         e1:da:e9:cf:db:4c:dd:d0:b8:8b:13:71:84:61:3e:9d:65:2e:
         bc:80:46:01:5e:2c:f4:48:e6:0e:d7:87:c0:b0:38:2d:67:6a:
         31:b2:53:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:55:16 2026 by rpki-client