Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52839fc8-1d86-35a7-9923-233138c56bd1.roa
File:                     52839fc8-1d86-35a7-9923-233138c56bd1.roa (raw, json)
Hash identifier:          ijtli9ojJn/WeSllNPM52gGQ+s828wx5UqTgABlIdcE=
Subject key identifier:   C0:31:2A:25:D4:DB:F7:F7:1E:00:97:21:FB:66:79:70:D3:1E:88:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF60F251D0DF9200B06CE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52839fc8-1d86-35a7-9923-233138c56bd1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        24.1.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:0f:25:1d:0d:f9:20:0b:06:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=982089e1-bd88-4828-b663-7bb8748ad8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:c8:c8:d3:fb:36:b1:9d:06:58:78:6e:b6:
                    c2:1f:8e:57:cc:27:06:c4:85:5e:d5:9f:cb:9f:b7:
                    a3:b2:e2:6c:eb:e3:33:ee:2c:05:a9:8f:ae:a1:56:
                    23:31:18:7b:2d:74:eb:cc:52:65:77:c8:76:93:5b:
                    01:af:8e:08:b4:3d:b3:a5:00:e0:62:6e:97:6f:63:
                    42:59:7c:26:fa:0a:a7:64:bf:ba:25:71:d5:68:5f:
                    b1:01:88:56:95:6a:f2:11:50:ec:0f:73:48:0c:19:
                    18:a1:39:2d:18:ef:3e:26:fd:93:56:17:28:db:b3:
                    2b:d2:90:41:e6:0d:9e:9d:9f:0e:9e:8e:20:74:2b:
                    58:d3:69:e2:23:5e:fc:b0:d2:f8:f1:da:85:ef:d3:
                    0c:ac:a6:9e:98:95:c2:ec:23:2e:e1:ba:28:28:ae:
                    2a:a5:78:2e:64:f6:d9:f7:25:52:b3:07:3a:25:fe:
                    85:f2:10:a0:9f:15:a6:9f:35:6e:6c:57:e0:86:23:
                    be:37:52:81:d4:7b:98:21:79:b4:45:ef:0b:33:c3:
                    ae:d9:7f:87:ab:c0:0b:c2:f5:53:40:9a:e7:d7:38:
                    06:cd:a0:41:e6:d9:a1:38:1b:1d:6f:df:fe:4a:1e:
                    29:12:1a:0e:e6:46:b1:7e:48:78:b1:c9:4c:dd:89:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:31:2A:25:D4:DB:F7:F7:1E:00:97:21:FB:66:79:70:D3:1E:88:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52839fc8-1d86-35a7-9923-233138c56bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:11:10:a3:1e:d0:b9:d7:f0:c9:57:14:87:b7:73:d9:af:
         38:f6:9f:13:28:7e:ee:5f:a1:2d:a4:e0:e9:46:11:ec:5b:3e:
         7f:bd:ae:07:39:70:25:e1:69:57:bf:c9:3d:45:33:7f:bb:3b:
         8a:c0:a7:9c:7a:0f:b3:ad:67:68:3b:72:d9:55:7e:a5:d8:87:
         25:21:74:2e:21:0c:aa:09:12:1a:94:3d:fc:22:61:41:b4:c4:
         1e:ba:68:7e:8c:46:4a:bb:80:30:19:9d:6e:e2:4f:9f:c5:97:
         b0:82:39:c6:6e:e9:c6:66:78:d6:67:bb:b9:6c:c9:c5:12:8d:
         71:81:44:b9:eb:6c:d3:db:78:50:5b:2b:f9:07:ae:dc:ca:9c:
         39:c8:84:84:d3:64:2b:42:20:b9:40:2a:9b:14:fa:fe:d3:00:
         3e:67:f7:35:f7:ff:e4:57:0a:dc:a7:7f:63:a9:54:24:de:29:
         c1:3c:a9:6c:94:92:b3:6b:b7:38:79:86:81:da:46:ae:ef:d3:
         dd:c9:54:f4:3a:1d:24:e5:67:5e:0c:53:00:ca:15:91:d8:99:
         ca:16:dd:9e:fa:65:89:39:98:4c:95:93:5d:a8:bf:1c:7b:09:
         fa:13:83:90:56:f1:7e:fe:2d:ca:bb:d2:f3:87:a7:91:f4:21:
         cd:12:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:53:52 2026 by rpki-client