Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66bb9250-e512-398c-ba3a-2d37ad891055.roa
File:                     66bb9250-e512-398c-ba3a-2d37ad891055.roa (raw, json)
Hash identifier:          su2oXAR/L/oFe0jXKeSwqgGzunsYQoB+dUHc6fO+DOU=
Subject key identifier:   F9:5A:84:59:F0:43:C2:C3:49:4D:A2:65:85:7C:E5:1F:F3:46:CC:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C14A156BD1DA5E1327A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66bb9250-e512-398c-ba3a-2d37ad891055.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        24.1.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:14:a1:56:bd:1d:a5:e1:32:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=a580e1a6-cf15-49fe-ade0-d889882cd458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:79:4e:6c:ad:f2:b3:4f:21:9d:0c:e8:3b:
                    99:8d:7e:54:81:7a:a8:05:77:a3:9e:69:f0:e8:18:
                    b8:93:0e:07:ef:17:31:94:77:7b:87:ca:06:e1:60:
                    59:c4:98:0f:cf:f0:8e:2f:d7:4d:25:4a:f2:ea:92:
                    a3:17:f7:b3:69:a2:c7:7a:05:f7:ed:41:bd:0a:64:
                    fb:c9:c9:ad:84:16:97:65:e4:da:db:2b:a9:08:f8:
                    e2:07:cd:91:1b:66:f1:02:a1:16:49:88:89:17:46:
                    77:00:4e:48:8c:de:46:5f:1c:3e:04:9b:a6:d1:07:
                    ec:2f:53:a1:86:d3:1a:aa:b1:e8:32:72:7d:7e:c7:
                    36:2a:4b:e3:c7:71:c8:01:f6:90:78:f3:2f:a8:aa:
                    0c:fa:35:c0:4c:72:65:ff:9a:34:78:81:c3:8c:bc:
                    a8:e2:d1:93:54:50:69:e5:7e:4f:0e:48:b2:4a:6c:
                    00:74:51:82:2a:96:ed:c3:2c:33:5f:9a:4d:ae:ea:
                    08:8f:e0:a3:8e:f1:9e:9d:7a:8c:e4:f1:eb:e9:9e:
                    f7:c7:e9:b0:8e:47:14:74:44:30:83:c0:a6:26:12:
                    8d:6d:a9:e3:6a:7f:4b:fa:15:38:67:e1:a0:1f:40:
                    32:6b:64:ea:45:be:24:38:1e:1f:ec:5c:6e:f3:c9:
                    23:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:84:59:F0:43:C2:C3:49:4D:A2:65:85:7C:E5:1F:F3:46:CC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66bb9250-e512-398c-ba3a-2d37ad891055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:71:9d:5b:0e:82:b8:37:d1:04:2f:e8:02:6b:b4:f9:e3:d0:
         4d:50:0f:11:ae:53:cc:68:7e:9d:bf:43:e2:a9:ce:01:51:0d:
         e7:6a:05:8a:43:9b:89:b8:95:9b:39:4b:ff:9d:8d:15:70:59:
         99:dc:73:dc:60:5e:bc:19:c1:1d:b5:5f:0b:22:59:83:11:36:
         0a:af:c4:b9:83:4d:13:9c:f9:39:3d:41:55:77:73:48:e6:f2:
         0e:95:9c:af:8e:e7:f8:41:5f:2c:a0:44:7c:78:b2:60:a8:da:
         89:c5:af:c2:3a:91:b1:a9:d1:78:2e:9c:d9:f4:61:a1:ca:c6:
         b8:66:5e:76:0d:ac:a4:5c:93:8b:da:2c:08:3d:78:5b:49:05:
         91:54:9f:4c:d2:e6:c8:48:16:64:ab:d9:a1:19:7a:96:7c:a0:
         8f:7e:7f:2d:77:74:a4:87:92:91:b7:54:4b:74:02:9d:76:e2:
         e2:a0:10:de:04:7b:3e:07:94:b3:5b:cf:9d:2e:48:2c:9e:c3:
         32:f4:09:38:09:6a:89:b8:20:c1:b5:d8:b7:48:e4:8b:06:fd:
         7d:33:12:2a:0e:c4:e5:09:18:99:02:b8:9d:86:a8:17:b1:0c:
         d7:71:d1:86:65:83:81:80:54:a4:7a:91:d0:57:df:31:20:a2:
         2b:2e:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:10:23 2026 by rpki-client