Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cab56e8-c2df-3aec-bfa2-d70e1a1f7d53.roa
File:                     6cab56e8-c2df-3aec-bfa2-d70e1a1f7d53.roa (raw, json)
Hash identifier:          Oq9bC6jiqyTHjAepMbELQvzMP6jyIoB7N9Dx7HtEzzs=
Subject key identifier:   57:0B:7C:FA:93:AB:12:46:A9:37:FF:EE:21:FA:64:AA:57:B1:BF:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144C9924852BD441FCE2700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cab56e8-c2df-3aec-bfa2-d70e1a1f7d53.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        24.98.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:c9:92:48:52:bd:44:1f:ce:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=5c510763-cc1a-41e0-8401-8e2f87eb7d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0a:04:8d:98:fb:1f:ca:22:dc:43:6a:bf:ec:
                    b7:e8:52:71:6c:2b:23:ea:f0:47:e3:2b:45:0f:eb:
                    28:d6:c4:1b:7e:e5:eb:d5:11:d0:bb:ec:98:99:15:
                    ee:3e:c7:71:ee:11:32:0c:fe:36:55:c6:b5:16:3a:
                    ef:12:59:44:36:d3:b5:50:e6:de:c4:92:89:57:d0:
                    d5:d8:1e:b9:9d:83:bd:1b:03:d6:78:c9:21:be:6a:
                    77:7c:a9:22:7a:1f:0a:4a:56:01:19:f4:35:24:57:
                    3c:16:88:1b:88:0e:84:b2:9a:27:a3:d9:6b:56:59:
                    14:f3:41:4d:2b:05:5c:3f:d2:9d:d4:07:dc:89:d4:
                    36:85:a4:e6:e0:42:ff:3d:b0:fc:e8:05:4a:cd:24:
                    eb:d2:39:34:bb:99:a5:4c:0f:39:5a:10:be:94:b3:
                    8e:5b:87:cc:96:99:a2:f4:4b:6b:68:45:8f:99:a6:
                    61:d5:bd:cd:18:86:f7:34:33:6c:4c:f3:23:e9:bc:
                    25:bb:c5:1a:87:5f:a5:e4:ee:a4:cd:39:62:12:65:
                    27:5a:1f:08:69:e9:15:20:af:a1:03:65:b2:aa:95:
                    1a:bc:2f:9f:6f:25:22:7e:18:2a:1b:d9:9c:30:ad:
                    b0:1b:2d:25:a3:43:40:3a:18:08:d2:1b:b6:0c:a9:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0B:7C:FA:93:AB:12:46:A9:37:FF:EE:21:FA:64:AA:57:B1:BF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cab56e8-c2df-3aec-bfa2-d70e1a1f7d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:5a:28:38:64:35:b0:a9:50:30:d1:f5:b3:7e:e8:34:08:
         70:16:52:9e:43:9e:17:d3:8d:0f:2f:6e:a6:ee:92:8a:0f:3d:
         65:84:0d:38:a2:74:d7:b7:40:4f:c9:8b:0f:46:d0:28:12:f7:
         1c:69:d1:8a:a4:6f:43:70:5e:47:d1:7b:27:27:5e:e6:d9:e5:
         3e:2c:dc:5a:c7:7c:09:3b:43:08:7c:76:be:39:49:1b:13:ab:
         3b:f0:4c:64:dc:30:ec:40:32:5c:a5:dc:f7:c6:8a:a4:35:01:
         de:1e:6c:ae:a8:ff:8d:b2:8e:ed:21:e5:90:a9:cc:d0:c0:d1:
         cc:2f:84:ce:96:39:58:f6:21:38:45:85:11:3e:27:39:0f:3f:
         2d:aa:45:da:9b:3b:2f:4b:f2:48:da:10:4a:b6:39:40:71:8e:
         d3:f0:f6:94:57:f9:00:a4:c2:b0:0b:d4:f9:ac:a1:e4:6d:e6:
         62:3e:ea:b5:0b:4f:22:c0:21:24:0a:74:c3:91:f5:82:6e:b4:
         b5:51:b2:41:44:86:f8:a1:0f:20:67:72:92:f9:10:2d:e2:27:
         da:bf:a6:88:1e:75:b3:e6:6d:65:43:4d:df:ab:38:02:7b:b7:
         a4:67:17:30:b1:7c:1c:b4:53:76:c8:25:49:11:97:05:e2:f9:
         9b:46:57:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:26 2026 by rpki-client