Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa
File:                     5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa (raw, json)
Hash identifier:          NeBQ7gX9Ei4esQ5hCwJA1Ri24FumoZiyvZLEXoJfcGo=
Subject key identifier:   19:31:4B:34:EE:0B:C7:EF:F0:A4:55:B1:17:F9:FE:95:2C:F1:45:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6A4823FE229D09CA40200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        24.6.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:a4:82:3f:e2:29:d0:9c:a4:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=80534c22-fd63-4579-bfe0-ac93b5776eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:be:da:90:9e:98:d3:c7:40:af:6f:a1:a6:
                    69:10:88:b6:6d:41:63:46:ff:56:97:93:6e:61:5c:
                    4e:20:15:90:16:11:e5:5b:44:27:84:e9:ae:32:73:
                    f5:25:a9:35:f3:0e:be:e0:39:d7:a4:47:47:8c:b7:
                    5c:fc:90:d8:76:15:e7:b9:99:2a:7a:74:bd:d4:07:
                    ce:fd:91:da:e3:66:83:e8:4d:44:ed:5b:aa:57:0b:
                    4a:50:ad:f0:11:ae:48:fe:32:a0:33:59:7b:e7:43:
                    61:f3:e6:83:0d:e5:b0:b4:08:df:af:9c:c1:ee:fb:
                    be:24:52:bd:3e:ee:c0:1e:31:b8:64:cd:e7:16:a9:
                    ba:23:76:97:cc:5f:12:2a:0c:11:eb:d7:19:e1:45:
                    99:6a:06:68:4b:20:62:06:29:2a:50:1b:0b:d3:0f:
                    98:6e:1f:7b:2d:d9:6d:d7:06:6a:09:f5:73:17:d1:
                    40:1e:5b:df:9e:d1:5d:2c:2d:32:67:12:4c:7a:bb:
                    ac:d9:e0:55:02:a4:76:4b:40:c5:60:ff:83:6e:96:
                    ef:8c:48:6e:e6:89:1e:31:59:8f:7c:27:88:41:52:
                    68:c3:f4:a1:06:43:08:c3:37:95:fc:d6:c0:0b:4b:
                    eb:0b:49:e6:32:f1:3e:e5:9d:86:7b:48:0a:8c:5f:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:31:4B:34:EE:0B:C7:EF:F0:A4:55:B1:17:F9:FE:95:2C:F1:45:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c0d34af-d26c-3b79-a3a0-a8ce463f1e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:12:3a:d5:c3:b4:87:5f:ea:04:5e:59:28:9f:62:6d:ba:98:
         01:f2:d6:27:0b:70:51:71:fc:d2:7f:a8:07:76:16:38:05:7d:
         1d:4d:e1:e7:c8:40:c4:cb:c8:ef:43:bf:7e:b6:a3:7f:10:9a:
         32:56:84:20:5c:3a:5f:06:b8:95:e0:bb:72:f8:34:67:ac:a4:
         0f:8c:95:44:ce:54:ad:c4:e6:b2:77:73:04:30:df:ec:11:61:
         9e:6d:b6:25:c1:05:78:b1:45:e7:45:0e:66:f8:23:aa:d1:21:
         6f:0b:76:62:a4:8a:db:b3:2f:80:ea:a8:16:28:fa:87:7b:9d:
         17:ac:af:68:77:79:0d:58:2e:f5:ca:08:c0:ba:3e:60:34:4e:
         6b:c3:c0:0e:03:a6:b3:65:79:36:35:b6:62:12:2d:54:04:68:
         4e:b9:3b:33:84:d5:b5:c1:d6:bd:35:27:a2:98:b7:ea:50:36:
         b8:38:cb:54:57:1a:4f:26:87:5f:5a:97:7d:5f:1a:0c:6d:52:
         7e:54:24:34:ba:56:f7:8f:00:c8:7b:9e:6e:25:12:fb:3e:85:
         a5:9f:0e:14:95:a4:36:a5:60:e8:93:80:06:59:fa:e4:79:a7:
         f6:00:d5:0d:97:07:c3:a9:23:f0:1c:54:94:77:d3:12:b8:23:
         76:63:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:22:35 2026 by rpki-client