Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47bbf488-f976-3699-bfab-c662e68639a3.roa
File:                     47bbf488-f976-3699-bfab-c662e68639a3.roa (raw, json)
Hash identifier:          FOqI2dtC2rbFqBcJc/loq7r6haozWkmr6dKppj0PeAY=
Subject key identifier:   EE:58:F0:64:62:DF:AE:5A:4F:06:63:49:62:DE:99:FB:4F:09:93:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A83291F2CA4F9DB1F493D8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47bbf488-f976-3699-bfab-c662e68639a3.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        24.0.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:32:91:f2:ca:4f:9d:b1:f4:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=8db7fdc7-023d-44f5-ae2f-06d316cfe8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:a0:dc:cd:5d:1c:a4:4f:e2:84:3e:1f:75:
                    22:27:4f:c5:89:3d:73:e8:5d:e3:01:de:c0:61:a1:
                    c5:3e:50:82:14:c8:91:0a:b7:5c:e3:46:ba:cb:ce:
                    fc:c7:6c:5f:f6:f3:0e:2d:fd:57:e3:f5:ca:8d:51:
                    84:28:21:b9:42:b7:b8:58:de:92:13:d6:ac:8b:42:
                    b6:e9:f5:23:1d:82:36:85:bb:ad:21:18:d3:ff:e4:
                    33:12:e6:39:31:68:8e:be:41:1d:ad:b5:2f:91:90:
                    41:44:b8:d7:49:d6:7f:fc:ad:f8:a1:9e:1e:15:4c:
                    7d:50:4b:2d:ee:6e:8f:e8:4b:4f:ea:14:0c:af:38:
                    db:95:19:74:78:49:b8:7a:ba:0a:7c:0b:5e:4e:48:
                    a1:d7:dd:6f:60:ba:9a:51:7f:59:5b:c9:01:33:44:
                    cc:98:e9:09:79:01:31:64:e9:11:f4:fc:8b:61:be:
                    d3:df:f3:26:24:aa:60:c6:64:71:6a:49:a2:91:79:
                    90:e0:08:36:e7:b7:53:84:d2:8d:56:c9:a7:a3:b2:
                    ca:d2:5e:d8:88:a5:6d:13:49:92:79:51:67:b7:bb:
                    b2:9e:e4:81:4d:94:84:4e:48:c5:e7:f9:9f:bb:33:
                    1a:86:82:64:a2:a9:05:f6:14:dd:6a:de:b2:29:4d:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:F0:64:62:DF:AE:5A:4F:06:63:49:62:DE:99:FB:4F:09:93:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47bbf488-f976-3699-bfab-c662e68639a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:60:b7:32:3d:3b:92:5f:f6:0e:98:49:a5:f6:ff:02:38:
         3a:0e:7b:b1:c1:dd:fa:7f:d0:d0:ec:6d:62:e6:8e:e8:b1:31:
         e4:e9:bb:41:3f:63:7e:24:aa:36:b0:6e:53:41:d7:fb:c6:d7:
         af:91:d6:25:47:f1:f9:ed:d0:26:24:3a:50:1a:d2:c9:21:b0:
         40:1f:0b:51:e1:26:eb:29:77:09:93:bb:0e:3a:60:f6:3b:1d:
         07:e4:7d:9a:30:6e:c8:17:b4:a1:0c:81:e8:d2:3d:f2:1f:c8:
         94:eb:68:7a:79:c4:ac:7a:7e:09:d0:48:07:7c:a3:c7:41:6e:
         5e:05:44:e1:69:1f:74:b9:20:bf:45:c5:e1:ef:82:85:df:70:
         28:01:b4:88:ca:08:13:f5:c4:ae:fa:bf:4b:44:54:f0:05:f3:
         56:28:de:99:e1:74:1c:b3:0c:3f:36:43:00:12:0b:fe:42:81:
         bc:0f:74:b9:e6:41:01:99:3c:6b:a9:ad:e3:61:6f:9d:42:d2:
         ee:15:68:c4:46:e2:a6:6a:5f:92:6f:22:a5:32:67:60:c1:fd:
         3d:41:25:fa:78:5e:7b:16:b1:a0:da:07:79:9c:20:8b:26:f0:
         63:e9:76:76:b7:2c:5e:35:39:8c:22:8a:f6:4f:fc:c6:42:44:
         06:26:b3:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqDKR8spPnbH0k9gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
OGRiN2ZkYzctMDIzZC00NGY1LWFlMmYtMDZkMzE2Y2ZlOGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ig3M1dHKRP4oQ+H3UiJ0/FiT1z6F3jAd7A
YaHFPlCCFMiRCrdc40a6y878x2xf9vMOLf1X4/XKjVGEKCG5Qre4WN6SE9asi0K2
6fUjHYI2hbutIRjT/+QzEuY5MWiOvkEdrbUvkZBBRLjXSdZ//K34oZ4eFUx9UEst
7m6P6EtP6hQMrzjblRl0eEm4eroKfAteTkih191vYLqaUX9ZW8kBM0TMmOkJeQEx
ZOkR9PyLYb7T3/MmJKpgxmRxakmikXmQ4Ag257dThNKNVsmno7LK0l7YiKVtE0mS
eVFnt7uynuSBTZSETkjF5/mfuzMahoJkoqkF9hTdat6yKU3oXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5Y8GRi365aTwZjSWLemftPCZOdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDdiYmY0ODgtZjk3Ni0z
Njk5LWJmYWItYzY2MmU2ODYzOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAC9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvbYLcyPTuSX/YOmEml9v8CODoOe7HB3fp/0NDsbWLmjuixMeTpu0E/
Y34kqjawblNB1/vG16+R1iVH8fnt0CYkOlAa0skhsEAfC1HhJuspdwmTuw46YPY7
HQfkfZowbsgXtKEMgejSPfIfyJTraHp5xKx6fgnQSAd8o8dBbl4FROFpH3S5IL9F
xeHvgoXfcCgBtIjKCBP1xK76v0tEVPAF81Yo3pnhdByzDD82QwASC/5CgbwPdLnm
QQGZPGupreNhb51C0u4VaMRG4qZqX5JvIqUyZ2DB/T1BJfp4XnsWsaDaB3mcIIsm
8GPpdna3LF41OYwiivZP/MZCRAYms4c=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:45:43 2026 by rpki-client