Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5fcbbd-fa1f-3348-a388-02be41492831.roa
File:                     5a5fcbbd-fa1f-3348-a388-02be41492831.roa (raw, json)
Hash identifier:          27x9kTesHMEm7gr+xtnnag16xwe1uNnyE5pgQ8F9Tag=
Subject key identifier:   43:F8:F0:75:F7:53:6A:0B:81:D2:C2:86:56:E3:DD:CF:0F:81:35:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8622F3973AE52796ACEC800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5fcbbd-fa1f-3348-a388-02be41492831.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        24.62.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:2f:39:73:ae:52:79:6a:ce:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=a313f2aa-4c1d-46e9-980a-a5a4d89fd1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:bd:15:71:30:4f:5a:9b:77:37:c2:cd:62:
                    0c:0b:c2:1e:39:ca:ce:cd:34:62:51:8b:09:78:3b:
                    c0:ce:d1:5f:f4:29:f8:eb:b8:b7:42:51:08:66:2e:
                    d9:aa:58:4d:b9:f2:de:47:ef:38:1c:65:a3:e9:f9:
                    c9:63:ca:04:0f:ef:c2:bd:36:57:cd:ce:b2:69:75:
                    e3:2a:fb:6d:67:40:48:a8:86:c4:c5:32:fb:d4:2a:
                    fd:c7:02:77:76:b9:4a:a6:b0:51:1a:99:bb:19:84:
                    bb:1d:77:38:0d:c4:a8:34:03:73:a4:08:2b:6e:63:
                    ce:94:7b:d4:28:ef:f8:87:c8:26:cd:28:e9:88:02:
                    52:93:0d:40:88:6c:94:d8:9d:4b:0f:9a:15:f7:60:
                    41:26:60:d7:8b:58:cf:9b:8f:9a:1e:8b:11:30:78:
                    65:a3:0d:24:ce:49:e9:4b:87:9b:2c:2f:26:e8:85:
                    8e:e7:70:cc:d9:56:b6:38:13:4a:38:6d:8b:14:64:
                    98:71:22:e8:0f:98:e1:fe:d1:b4:f8:45:78:2f:e0:
                    7d:3c:13:a2:f1:a6:57:a5:04:0b:29:57:71:7e:fb:
                    21:3d:36:f6:7a:36:cd:e5:58:59:30:4b:5f:00:dc:
                    00:65:d3:ed:29:af:81:a2:dd:5a:d2:77:77:76:58:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:F0:75:F7:53:6A:0B:81:D2:C2:86:56:E3:DD:CF:0F:81:35:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5fcbbd-fa1f-3348-a388-02be41492831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.62.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:97:ab:be:4b:f6:65:c2:27:cd:f4:b6:c4:07:28:74:af:1f:
         4f:09:9a:df:fb:99:e2:93:f4:8a:74:2b:9b:f0:de:85:48:6c:
         a0:ea:e1:6b:08:1f:f7:d7:fb:f1:85:40:2e:7d:1a:95:b8:5b:
         16:ec:ca:2d:18:cf:d3:1d:fe:93:81:56:5f:a6:3f:17:b2:19:
         06:06:15:2a:57:c7:9f:15:cf:6e:6f:41:1e:85:e6:20:51:7a:
         81:6c:57:48:1b:a0:d0:0e:fd:65:30:23:ed:19:37:ae:bf:c4:
         e5:e1:85:1b:af:9d:46:5b:ee:ab:3a:86:1e:ec:46:5c:80:77:
         bd:01:72:f7:bd:7f:aa:6b:b4:65:d3:29:b2:b3:8b:d0:cd:64:
         4f:71:4f:7e:1b:b7:6d:b5:f3:7d:4a:77:00:69:91:7e:cb:de:
         87:b6:c6:50:b5:87:d8:3e:0f:db:4d:cc:c5:17:7a:b2:4d:4c:
         87:0a:65:68:4d:0d:14:13:78:9f:b7:dd:b2:ed:1e:f6:ce:c3:
         6d:cf:b2:f6:15:3c:9a:99:a9:b7:91:d9:80:bc:0f:ea:0d:8c:
         e8:cb:95:d3:cd:a1:91:bf:ec:7e:7f:f2:bf:61:dd:3e:64:9c:
         19:b3:08:d3:c5:ed:3f:2e:a1:6a:cb:fa:2b:a1:f0:4f:d1:a6:
         96:aa:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:37:53 2026 by rpki-client