Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3a8d9d-8e08-3cf6-b865-de816acf55fd.roa
File:                     5a3a8d9d-8e08-3cf6-b865-de816acf55fd.roa (raw, json)
Hash identifier:          Iz3cgcAq45kGXdwxHa55D/GE24zIjaC5+mKBo1yg094=
Subject key identifier:   AF:4E:BF:A2:7A:0C:08:ED:65:90:05:42:39:CE:2F:C1:CA:70:6A:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4F84D79ED60780284957F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3a8d9d-8e08-3cf6-b865-de816acf55fd.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        24.127.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:84:d7:9e:d6:07:80:28:49:57:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=4f09c572-7e72-4308-86e9-8e86527ed764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:d4:5d:64:5d:e9:85:cd:04:60:74:82:ad:
                    f7:03:0e:93:70:65:a7:24:51:d0:3b:9b:40:f3:b5:
                    d2:8f:c2:34:81:29:79:b1:c2:f1:ab:41:47:e1:75:
                    ba:9e:ae:3b:b2:c7:fd:d8:92:df:d0:08:7f:fd:da:
                    7d:10:71:a3:81:1a:cc:57:19:0b:41:ae:ec:9c:0c:
                    bc:1e:3b:5a:68:06:e8:64:7e:6a:48:24:c4:da:61:
                    a7:36:fa:a0:44:39:f3:d1:05:24:fb:25:0f:53:8f:
                    a1:a1:f9:c7:ba:c4:c8:53:2f:a9:9b:59:1b:d4:7a:
                    25:29:0b:8a:6b:3d:39:03:8a:95:5e:1d:69:1b:8c:
                    bc:55:7e:94:ea:38:58:50:6d:73:08:26:e6:22:8e:
                    c0:46:c5:84:09:a0:25:89:a7:60:35:e9:be:eb:13:
                    4b:96:44:75:7b:23:fc:4d:b5:5e:96:b6:da:63:b8:
                    ff:7b:d4:c0:de:1c:82:af:d0:91:d6:d7:4a:c0:c6:
                    28:99:29:6f:9d:f7:0e:8a:21:3a:48:d4:c1:b3:4b:
                    f5:58:fb:16:4c:8c:3e:9f:ab:ad:9e:b5:e7:1c:e0:
                    e7:5b:3a:b2:5a:44:29:b9:a6:27:7b:cd:1f:a0:f1:
                    4f:76:f2:80:fa:c9:b1:b4:21:71:7d:b3:35:b9:f5:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:BF:A2:7A:0C:08:ED:65:90:05:42:39:CE:2F:C1:CA:70:6A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3a8d9d-8e08-3cf6-b865-de816acf55fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:12:f6:27:00:56:40:3d:cf:15:d7:72:8b:d7:50:f4:37:6c:
         72:7e:b7:3c:88:f2:95:c5:39:7b:a0:fe:95:e6:86:51:ca:53:
         d4:50:31:e6:c8:6d:91:3c:a4:c7:87:87:e6:d2:e9:f3:ae:50:
         fb:fd:be:00:e0:fe:71:05:20:97:aa:cb:36:55:11:6a:3a:c7:
         c5:20:d3:9c:52:d2:b6:73:c6:b0:42:19:28:7a:eb:9f:e0:46:
         28:f5:12:99:40:fd:1a:d2:8a:d7:9f:b7:90:20:cf:a0:ed:fc:
         b6:44:6b:5a:42:48:d1:d2:cb:e4:b1:64:fa:27:7d:a2:fd:b7:
         01:13:8a:ea:d6:9e:97:b7:ec:c5:95:25:00:8c:fb:94:65:e8:
         81:b2:1b:47:db:29:01:33:83:fa:1d:84:b5:bd:ef:ee:68:d0:
         90:1a:aa:74:6c:ce:be:3f:52:96:12:da:a8:ac:7e:5c:bd:e2:
         40:19:21:60:cb:89:61:3a:80:ca:f9:f7:26:1b:7a:0b:73:67:
         2c:be:ab:15:6e:69:e1:07:1f:3e:7a:97:0a:32:b4:d6:a4:ed:
         0b:ef:06:ff:88:88:b7:ff:a4:76:0f:34:bc:da:a6:eb:60:29:
         bb:b0:4d:01:92:d2:d3:e5:85:70:c4:82:9e:5d:9d:24:66:cc:
         38:55:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:17:50 2026 by rpki-client