Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4324efcd-7aff-3d26-9448-d814093c5027.roa
File:                     4324efcd-7aff-3d26-9448-d814093c5027.roa (raw, json)
Hash identifier:          91egPNpckEIGy3DnU4nGosf0JBg26Tq6qJ0DIElYjdw=
Subject key identifier:   54:89:9B:D5:02:B1:24:02:C3:EF:E5:C4:B9:29:D5:22:38:0C:15:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4F0BE957E2488EE5175680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4324efcd-7aff-3d26-9448-d814093c5027.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        24.218.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:0b:e9:57:e2:48:8e:e5:17:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=200f165e-a00f-417d-a8df-f7aa2cd98898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:a9:4e:87:69:45:c3:18:e1:c9:80:8e:45:
                    23:2a:33:5c:18:ed:34:60:81:49:38:6c:01:6d:5e:
                    d9:fd:48:ca:0d:ac:f0:ef:a1:ef:ea:29:8f:6f:41:
                    43:e0:6e:53:70:22:5b:bf:de:b6:eb:3b:d6:08:bd:
                    eb:7e:18:52:47:30:b7:d4:03:62:9f:66:c3:28:15:
                    e5:14:c2:0f:40:6a:22:b0:3b:b5:4a:1f:e5:14:7e:
                    a7:d3:3d:b7:d3:5f:c9:7f:cd:b7:26:dc:26:5b:b7:
                    f8:6c:f9:bd:09:3b:74:4b:5c:30:ab:f4:38:b5:b0:
                    52:3a:e4:8d:06:42:10:6f:bb:e1:08:7a:06:c0:c0:
                    d5:4e:b7:14:eb:ab:f3:dc:90:3c:b8:c5:53:ae:93:
                    d3:e8:78:09:76:cc:9d:58:e6:4b:82:f1:a7:b8:43:
                    09:d9:f4:f6:4d:2e:a4:e3:0e:00:ad:d7:a6:42:a4:
                    97:d6:f0:77:54:b9:49:08:16:a2:5d:6f:79:b3:21:
                    ae:09:40:de:20:a4:81:44:e0:f0:e1:73:35:ef:90:
                    03:3a:fb:9c:50:9a:bb:e8:08:3d:bb:51:0f:66:9c:
                    1a:e0:ce:6a:69:15:fd:af:b5:38:29:a4:f0:11:3f:
                    41:c3:ad:b8:58:54:c6:79:db:22:0e:79:84:ac:c0:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:9B:D5:02:B1:24:02:C3:EF:E5:C4:B9:29:D5:22:38:0C:15:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4324efcd-7aff-3d26-9448-d814093c5027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.218.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:7d:b2:c8:80:af:f9:90:48:78:af:f3:1d:7b:30:02:cc:
         0f:12:40:69:9b:2e:09:7a:c8:ee:2a:d6:6b:64:f8:2e:e6:bd:
         de:68:bd:53:30:d5:77:35:42:a6:bd:9c:e9:a5:83:83:88:66:
         78:86:4b:64:d2:2f:57:86:19:21:39:a0:a2:3d:4d:8b:c7:81:
         bf:7f:19:3f:4a:65:80:6e:8d:fe:5d:2d:82:2d:6e:5c:91:3e:
         af:fb:19:f1:80:43:f9:56:0b:12:f3:06:80:a4:e1:e9:bd:80:
         65:0f:3b:ee:81:a9:0a:d8:c6:7b:e0:ed:4a:cd:61:34:20:e3:
         b1:05:fe:3d:71:b6:77:54:fe:59:dc:89:40:dc:d3:38:b0:99:
         f4:14:11:b0:f1:1a:0e:cf:81:d4:0e:b5:19:52:0e:56:a7:62:
         44:47:b9:bd:5f:d6:ad:8d:74:03:c7:02:a6:40:19:63:83:3f:
         09:a8:f4:dd:7f:56:e3:bf:0e:8a:6c:2f:bd:57:84:5a:ca:12:
         8f:1e:0c:cf:07:03:fa:01:40:bd:fc:13:45:02:5f:b7:65:d6:
         2d:3e:cc:7c:7e:0a:55:39:e6:a9:bd:08:da:f8:1c:58:1b:b2:
         50:7c:03:ea:26:66:61:b6:78:c8:d5:6f:f1:f8:a9:95:55:d7:
         fb:ff:e8:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TwvpV+JIjuUXVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
MjAwZjE2NWUtYTAwZi00MTdkLWE4ZGYtZjdhYTJjZDk4ODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzepTodpRcMY4cmAjkUjKjNcGO00YIFJOGwB
bV7Z/UjKDazw76Hv6imPb0FD4G5TcCJbv9626zvWCL3rfhhSRzC31ANin2bDKBXl
FMIPQGoisDu1Sh/lFH6n0z2301/Jf823JtwmW7f4bPm9CTt0S1wwq/Q4tbBSOuSN
BkIQb7vhCHoGwMDVTrcU66vz3JA8uMVTrpPT6HgJdsydWOZLgvGnuEMJ2fT2TS6k
4w4ArdemQqSX1vB3VLlJCBaiXW95syGuCUDeIKSBRODw4XM175ADOvucUJq76Ag9
u1EPZpwa4M5qaRX9r7U4KaTwET9Bw624WFTGedsiDnmErMCYRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSJm9UCsSQCw+/lxLkp1SI4DBVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDMyNGVmY2QtN2FmZi0z
ZDI2LTk0NDgtZDgxNDA5M2M1MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNrMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJz6fbLIgK/5kEh4r/MdezACzA8SQGmbLgl6yO4q1mtk+C7mvd5ovVMw
1Xc1Qqa9nOmlg4OIZniGS2TSL1eGGSE5oKI9TYvHgb9/GT9KZYBujf5dLYItblyR
Pq/7GfGAQ/lWCxLzBoCk4em9gGUPO+6BqQrYxnvg7UrNYTQg47EF/j1xtndU/lnc
iUDc0ziwmfQUEbDxGg7PgdQOtRlSDlanYkRHub1f1q2NdAPHAqZAGWODPwmo9N1/
VuO/DopsL71XhFrKEo8eDM8HA/oBQL38E0UCX7dl1i0+zHx+ClU55qm9CNr4HFgb
slB8A+omZmG2eMjVb/H4qZVV1/v/6Jo=
-----END CERTIFICATE-----
Generated at Wed Nov 4 19:01:55 2026 by rpki-client