Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb1474b-3ad5-3ae5-ac9f-2ac9d3ede3ba.roa
File:                     3eb1474b-3ad5-3ae5-ac9f-2ac9d3ede3ba.roa (raw, json)
Hash identifier:          w5OGnpihlZvjDvVlclQaXvsaie4Z8iOanE0pMzfeln0=
Subject key identifier:   71:2B:C5:0D:B0:9D:CE:6C:4C:A2:99:F6:7F:7C:CB:68:E3:57:74:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36004C14B6923CBA7A88D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb1474b-3ad5-3ae5-ac9f-2ac9d3ede3ba.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        24.20.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:4c:14:b6:92:3c:ba:7a:88:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=a2606123-4bde-4402-a6b6-28a172bc1490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:8a:54:8a:b7:9b:a4:c9:57:16:f3:92:35:
                    ac:0c:5d:b0:51:cb:bc:99:a9:de:78:33:60:55:04:
                    2c:ae:fd:ae:30:01:bc:1b:34:6b:92:ca:b6:49:24:
                    31:b9:2d:ca:44:ec:c4:05:bf:cf:64:84:e3:2b:b8:
                    43:98:7b:45:34:af:c9:2d:3b:60:bc:f9:da:1d:e1:
                    a4:da:47:98:6d:c6:fa:3b:b8:a4:dd:c2:47:7d:4f:
                    d1:ef:fd:4d:02:d1:e1:c2:42:01:da:29:b4:ca:dd:
                    0a:31:83:ae:5d:4d:27:63:ab:d0:fc:a6:eb:59:29:
                    7e:8a:93:0b:d1:00:7c:79:d3:6f:2d:27:5a:97:dc:
                    cd:01:c7:7a:c0:99:3a:f6:9c:98:85:c1:16:b1:72:
                    b0:06:98:b4:66:59:e6:c3:ce:f1:6f:70:cb:f5:c2:
                    14:83:ab:3e:61:68:94:6e:26:19:64:2c:d8:99:25:
                    d6:4d:b9:8f:10:7f:1c:c7:a5:72:18:79:17:21:c5:
                    a0:ab:15:c4:72:0e:ad:ab:34:19:e8:e6:1b:71:93:
                    c0:07:4a:43:f9:76:32:e6:cd:97:ab:4a:b2:be:f8:
                    04:98:d4:8a:63:33:80:e7:0d:dd:d5:f6:16:0a:4d:
                    cf:2a:c4:91:81:d6:26:d6:70:46:68:2c:9b:8c:ed:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2B:C5:0D:B0:9D:CE:6C:4C:A2:99:F6:7F:7C:CB:68:E3:57:74:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eb1474b-3ad5-3ae5-ac9f-2ac9d3ede3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.20.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:ed:46:bb:de:5e:c3:1e:08:67:3e:ce:bd:76:50:87:71:
         25:78:48:24:41:bd:e8:16:24:13:b4:c2:b5:08:40:86:cc:56:
         3d:a0:23:e3:83:86:f1:2a:81:48:ef:59:68:a4:02:14:63:40:
         0b:af:41:2e:36:f2:8b:12:01:3a:3f:4e:02:6c:4d:84:29:8b:
         54:34:13:f5:12:49:ed:81:33:7a:8c:23:73:e2:d7:ef:85:25:
         e9:4c:9e:af:30:e8:5a:90:b9:a3:1c:b3:0a:7e:9c:2d:c6:33:
         15:04:a9:94:42:55:a3:20:c1:2e:e1:de:d8:d2:e5:c2:2c:b5:
         63:2b:b0:94:4d:9a:12:de:95:d6:80:9b:15:0b:20:1c:67:7b:
         a5:52:6e:a5:02:f3:61:5b:f4:b2:ce:10:88:9d:b6:ab:59:4c:
         75:56:9a:77:0c:a0:c9:4c:12:6b:72:99:19:cf:10:83:dd:d2:
         cf:47:c1:47:0e:14:9b:af:e0:2b:f5:c1:cc:11:21:fa:71:2a:
         51:fc:bb:2a:b1:ab:1d:50:a3:a8:77:7b:aa:0d:b4:15:bd:d2:
         3f:26:fb:81:57:34:8c:0a:79:54:a8:39:18:29:5d:99:49:ab:
         e9:a0:78:ea:4c:d5:fc:83:aa:3e:c1:e9:f5:f7:5a:e5:8d:ca:
         fd:e1:e2:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AEwUtpI8unqI1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
YTI2MDYxMjMtNGJkZS00NDAyLWE2YjYtMjhhMTcyYmMxNDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8c6KVIq3m6TJVxbzkjWsDF2wUcu8maneeDNg
VQQsrv2uMAG8GzRrksq2SSQxuS3KROzEBb/PZITjK7hDmHtFNK/JLTtgvPnaHeGk
2keYbcb6O7ik3cJHfU/R7/1NAtHhwkIB2im0yt0KMYOuXU0nY6vQ/KbrWSl+ipML
0QB8edNvLSdal9zNAcd6wJk69pyYhcEWsXKwBpi0Zlnmw87xb3DL9cIUg6s+YWiU
biYZZCzYmSXWTbmPEH8cx6VyGHkXIcWgqxXEcg6tqzQZ6OYbcZPAB0pD+XYy5s2X
q0qyvvgEmNSKYzOA5w3d1fYWCk3PKsSRgdYm1nBGaCybjO2XkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHErxQ2wnc5sTKKZ9n98y2jjV3TfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ViMTQ3NGItM2FkNS0z
YWU1LWFjOWYtMmFjOWQzZWRlM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBSsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHw37Ua73l7DHghnPs69dlCHcSV4SCRBvegWJBO0wrUIQIbMVj2gI+OD
hvEqgUjvWWikAhRjQAuvQS428osSATo/TgJsTYQpi1Q0E/USSe2BM3qMI3Pi1++F
JelMnq8w6FqQuaMcswp+nC3GMxUEqZRCVaMgwS7h3tjS5cIstWMrsJRNmhLeldaA
mxULIBxne6VSbqUC82Fb9LLOEIidtqtZTHVWmncMoMlMEmtymRnPEIPd0s9HwUcO
FJuv4Cv1wcwRIfpxKlH8uyqxqx1Qo6h3e6oNtBW90j8m+4FXNIwKeVSoORgpXZlJ
q+mgeOpM1fyDqj7B6fX3WuWNyv3h4qU=
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:08:49 2026 by rpki-client