Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5851c4b8-8609-309a-8bce-2b04615e1819.roa
File:                     5851c4b8-8609-309a-8bce-2b04615e1819.roa (raw, json)
Hash identifier:          5oi8F8d7BoTAzprntGONgj4dLbcbbLpOXcAOrkjD7hc=
Subject key identifier:   1B:6B:0E:16:04:40:66:78:CB:05:D6:D2:30:3D:1C:9A:E8:73:0F:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DF4DB391A12F3CB04FAAAAFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5851c4b8-8609-309a-8bce-2b04615e1819.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        24.130.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:39:1a:12:f3:cb:04:fa:aa:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=3b4bea29-38a2-491c-9e51-d9a930312a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:d5:f1:a9:29:21:39:bd:2c:7a:53:9c:04:
                    3a:3f:e7:0c:cd:ba:66:4e:03:6b:7f:c5:bd:74:a6:
                    5d:eb:38:f4:87:9f:03:86:94:81:3c:bb:bb:9a:b1:
                    65:cc:0a:3d:5f:f0:2d:f6:69:bc:ad:94:c1:e7:4a:
                    70:89:7a:6d:22:46:fc:ad:83:2c:b5:68:45:c8:03:
                    86:7b:95:a0:e5:86:84:f4:06:a1:d2:58:33:18:be:
                    e0:65:34:83:0c:53:7a:77:e8:ce:ae:c2:0f:03:df:
                    9a:b5:03:99:74:4e:58:31:87:fb:97:6b:96:ad:27:
                    43:96:08:05:dd:da:fa:84:01:f9:ce:3e:fe:31:a4:
                    64:ff:8d:5c:e2:1c:01:15:bd:31:fe:66:22:e3:eb:
                    13:78:bd:d1:08:b5:0f:0d:81:66:b2:1a:7a:db:e1:
                    fc:dc:4c:87:a9:fc:25:2a:28:2e:96:05:20:ad:4d:
                    eb:bf:b5:8a:0e:15:fd:db:69:b1:3b:0d:62:b1:85:
                    45:2b:db:c9:c5:e2:ef:f6:4d:c9:65:16:ee:25:84:
                    f1:4d:21:62:c8:12:af:a2:84:5f:19:fd:27:96:98:
                    da:6d:8b:25:ff:28:9c:08:d9:fa:d2:0d:44:18:7f:
                    0e:5b:70:f2:2c:39:73:88:51:2b:bf:3c:54:be:ab:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:0E:16:04:40:66:78:CB:05:D6:D2:30:3D:1C:9A:E8:73:0F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5851c4b8-8609-309a-8bce-2b04615e1819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.130.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:d1:7e:72:28:b4:f8:9b:91:50:f4:b9:8a:3b:0a:19:b5:
         b0:9e:33:c7:90:0a:37:fa:b8:f7:93:ce:92:b0:13:20:04:ca:
         90:ed:ad:2c:9d:86:b4:bb:9d:84:86:c0:83:10:5c:19:f6:67:
         24:43:2d:8f:ba:12:a5:f7:0b:4b:a3:1a:23:f1:a7:aa:d4:fb:
         e2:c7:b7:ff:c2:b7:ce:eb:35:61:a5:cb:21:77:0c:95:ae:e7:
         f8:8e:29:fe:5d:27:5a:28:5d:14:d6:85:e0:44:18:19:a1:09:
         b0:3b:49:ba:0a:8d:2b:1a:85:c5:92:05:29:de:0a:cb:b3:fd:
         12:cb:1d:45:99:e3:e1:e7:68:f8:b7:58:b4:c2:b6:cd:73:c9:
         72:84:8f:f6:c8:a9:e1:4f:17:58:66:be:78:87:28:93:af:9e:
         ba:f6:7e:69:a2:e2:e0:91:47:f4:22:f8:e2:b1:94:30:e1:8e:
         6b:d6:ee:ef:b8:87:65:1d:d0:7b:6d:93:51:5d:be:8f:a0:46:
         5c:e2:2d:94:60:1e:a1:97:f5:59:83:95:d7:ba:51:12:1f:68:
         7f:fa:7c:26:17:8b:4a:87:71:b1:75:dd:77:ca:29:01:86:b2:
         01:d2:56:b6:da:b1:28:fa:37:71:6d:20:5a:a8:93:b9:9d:85:
         ac:43:9e:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE302zkaEvPLBPqqr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
M2I0YmVhMjktMzhhMi00OTFjLTllNTEtZDlhOTMwMzEyYTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4fV8akpITm9LHpTnAQ6P+cMzbpmTgNrf8W9
dKZd6zj0h58DhpSBPLu7mrFlzAo9X/At9mm8rZTB50pwiXptIkb8rYMstWhFyAOG
e5Wg5YaE9Aah0lgzGL7gZTSDDFN6d+jOrsIPA9+atQOZdE5YMYf7l2uWrSdDlggF
3dr6hAH5zj7+MaRk/41c4hwBFb0x/mYi4+sTeL3RCLUPDYFmshp62+H83EyHqfwl
KigulgUgrU3rv7WKDhX922mxOw1isYVFK9vJxeLv9k3JZRbuJYTxTSFiyBKvooRf
Gf0nlpjabYsl/yicCNn60g1EGH8OW3DyLDlziFErvzxUvquRrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtrDhYEQGZ4ywXW0jA9HJrocw/VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg1MWM0YjgtODYwOS0z
MDlhLThiY2UtMmIwNDYxNWUxODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGIJIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFu0X5yKLT4m5FQ9LmKOwoZtbCeM8eQCjf6uPeTzpKwEyAEypDtrSyd
hrS7nYSGwIMQXBn2ZyRDLY+6EqX3C0ujGiPxp6rU++LHt//Ct87rNWGlyyF3DJWu
5/iOKf5dJ1ooXRTWheBEGBmhCbA7SboKjSsahcWSBSneCsuz/RLLHUWZ4+HnaPi3
WLTCts1zyXKEj/bIqeFPF1hmvniHKJOvnrr2fmmi4uCRR/Qi+OKxlDDhjmvW7u+4
h2Ud0Httk1Fdvo+gRlziLZRgHqGX9VmDlde6URIfaH/6fCYXi0qHcbF13XfKKQGG
sgHSVrbasSj6N3FtIFqok7mdhaxDnuA=
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:58:21 2026 by rpki-client