Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
File:                     5159f522-faa6-3f17-bd17-8b471a149541.roa (raw, json)
Hash identifier:          ZOtaI1PNXtyFW/k2Q/uoXlxKaiHp+fogxp2uHynyUiA=
Subject key identifier:   5A:09:17:54:E7:6A:BF:BD:BF:50:DA:4C:8F:4F:54:19:78:A8:23:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AA3B7BA4800EEFE877780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        71.224.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:a3:b7:ba:48:00:ee:fe:87:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=a02cbedb-ca02-457e-af1d-2b696a5dbbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:f8:64:72:50:2e:38:31:f5:37:0c:8c:18:
                    c9:dc:1b:ba:37:80:06:9a:47:c5:28:7a:26:0b:6c:
                    16:39:d7:94:f4:9c:53:c8:8b:e3:78:cd:94:82:06:
                    11:79:69:fd:38:f4:67:d7:19:09:1e:7b:47:95:b0:
                    4e:af:25:97:88:99:b9:c5:a0:82:6d:1c:af:10:62:
                    c5:b9:bc:1d:98:d9:17:aa:77:e2:14:fc:2d:0c:62:
                    80:bd:36:06:22:1e:94:0c:44:96:54:76:65:c7:10:
                    28:e3:0c:5d:06:74:bc:fa:5f:3b:0a:fc:18:c6:ef:
                    c4:17:cb:d0:e6:15:cc:8f:bb:f7:55:3f:42:e3:f7:
                    38:9b:66:47:7a:18:92:8a:92:e0:2f:05:f5:13:dc:
                    2f:a3:22:fe:98:86:26:4a:d6:a1:8a:9b:f0:68:ff:
                    bc:5a:35:7f:51:a3:c8:5e:12:5a:b5:c7:79:0c:12:
                    a4:69:33:ec:1b:95:ed:c0:16:a4:19:84:21:df:19:
                    5f:f3:97:c8:24:42:c6:7a:02:79:4b:3b:b3:29:be:
                    90:2d:d3:41:1e:cd:38:0b:ed:93:59:4f:04:50:99:
                    d4:db:07:77:4c:c9:c7:c0:a2:53:7c:67:1c:d4:9b:
                    a6:21:df:32:d7:c5:09:64:a2:27:ec:3f:3a:52:48:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:09:17:54:E7:6A:BF:BD:BF:50:DA:4C:8F:4F:54:19:78:A8:23:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.224.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:a3:e5:62:7a:fe:1f:3c:85:23:97:84:19:ec:64:da:53:
         85:92:f9:97:0a:38:e9:c3:16:fc:98:fd:c1:f6:b3:8b:0a:0b:
         e3:a9:19:3d:21:f9:00:46:60:41:f8:a9:67:40:58:64:86:31:
         32:48:9f:4e:69:82:a6:4d:db:4f:df:24:54:0b:d8:b6:d3:ae:
         dd:fe:2f:ae:e3:bb:c5:f4:6b:1e:46:a1:54:eb:83:7a:73:15:
         6e:e9:db:ac:aa:fb:fd:96:e0:3e:25:6d:c9:76:6d:66:eb:6d:
         ca:39:07:5f:58:f6:63:d5:08:1f:97:42:52:a2:91:3d:51:37:
         fc:2e:20:ef:9e:df:72:f6:7d:37:e8:47:1c:54:6a:ba:6d:11:
         12:c4:bc:8f:96:6b:ab:87:1e:d5:6f:d7:fb:e3:f5:8b:70:f6:
         f1:40:c2:b0:29:04:c2:24:52:44:bf:1e:25:1b:fb:18:c0:02:
         9c:73:89:19:4b:2b:21:97:81:f1:05:6c:88:ea:a6:d3:e1:ba:
         b6:36:48:bf:5f:0f:09:5b:29:97:99:b8:ac:48:e8:a8:0b:b4:
         32:85:e8:3c:2c:32:c7:d5:23:f9:76:d7:62:7d:aa:a4:18:c5:
         37:72:2a:83:4b:09:ae:c5:48:0a:31:4a:89:af:bb:1e:16:37:
         dc:5b:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:56:15 2026 by rpki-client