Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa
File:                     6dca5a17-8e7b-3be9-b53b-2a516a105494.roa (raw, json)
Hash identifier:          l/nX8xyOO9gUDoth4Mir521xcQJDARmZB+VebnPVFgg=
Subject key identifier:   9F:97:5F:99:F1:F7:1E:DA:32:2A:89:09:25:55:06:43:76:52:74:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862314F664BE28CC0EF7640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        24.91.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:31:4f:66:4b:e2:8c:c0:ef:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=2abc1db2-3d27-4337-93f5-d7de5db8db3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:41:29:ee:75:de:81:2f:d0:e7:1c:ed:86:
                    f3:17:4e:0f:65:47:c0:5f:21:31:64:fe:30:97:74:
                    14:80:3f:2c:ec:d2:29:66:30:ab:ae:36:7c:43:eb:
                    d7:69:76:00:69:f2:7a:c8:a3:fc:12:f4:a0:c6:c7:
                    8d:a5:17:b3:61:9c:8e:01:06:8a:b6:3f:c8:d0:6a:
                    b1:2a:39:67:fc:7e:77:6d:a2:ae:f3:7e:81:a1:44:
                    9a:6a:90:f9:be:74:71:58:14:be:94:83:d2:67:b9:
                    72:87:3f:59:a4:69:48:71:93:cf:64:7c:3c:ec:9f:
                    b1:b0:c8:50:f9:b7:80:b7:e6:d7:3a:54:04:0e:88:
                    b4:57:5d:3c:9d:f2:25:d6:b3:44:eb:b9:99:25:a8:
                    05:b0:ef:e1:55:d1:89:8c:35:c9:98:fe:f8:3c:c4:
                    03:d0:e7:69:ac:58:ea:c9:c0:a4:3d:5f:22:b7:1c:
                    1e:0a:f7:96:b5:36:d9:aa:01:84:0b:08:dd:0d:38:
                    5f:b3:08:3b:f2:d3:5e:68:25:81:04:52:95:ac:90:
                    91:a5:95:2c:13:03:c7:91:f5:82:e2:42:5a:97:86:
                    f8:f4:1c:9f:5f:bb:a1:00:09:7d:24:60:91:ef:11:
                    fc:96:da:48:dc:47:dd:02:f6:b7:5a:6d:08:0e:05:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:5F:99:F1:F7:1E:DA:32:2A:89:09:25:55:06:43:76:52:74:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:22:0b:cb:d6:a7:71:8a:03:0c:64:24:5f:89:94:0a:4a:
         d1:f3:a1:1b:42:38:59:bd:50:99:02:9e:89:08:2a:71:49:2b:
         06:a7:72:54:08:a3:bc:78:d0:75:ae:fe:d8:89:45:43:78:a3:
         da:a1:ec:5e:c3:2d:74:2b:b9:82:20:fd:c9:5a:42:50:67:20:
         3d:f5:d1:31:6a:93:dc:20:b9:e0:3e:d2:3f:87:71:fa:95:c9:
         7e:aa:37:41:31:6d:20:6d:04:41:af:33:af:50:97:5e:f1:2e:
         28:00:62:63:28:4b:11:fc:36:48:2a:08:bd:ad:8e:fc:6b:0d:
         de:5d:22:ac:be:06:96:ad:d5:51:2f:9d:f6:46:68:06:95:23:
         87:28:2f:93:0d:f5:41:06:a6:f5:00:36:a0:c6:0c:46:4e:13:
         3f:6f:8b:5b:87:59:6a:8f:82:a8:87:a8:79:d9:11:75:d3:13:
         6b:fb:a3:10:bf:8f:d7:9b:6e:72:b4:b2:b8:0f:db:78:66:9e:
         58:b6:1e:ea:30:23:65:d2:a3:70:bf:8d:63:73:ec:50:47:15:
         ba:3f:5d:df:1f:aa:81:d5:eb:e4:a4:c4:73:f9:3a:0c:dc:84:
         77:d1:eb:36:50:c7:34:20:6f:93:43:f7:c4:c7:05:1c:98:0b:
         50:da:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:51:01 2026 by rpki-client