Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b4dbaa-7ffb-39c8-adb7-2de5c66dc2ac.roa
File:                     78b4dbaa-7ffb-39c8-adb7-2de5c66dc2ac.roa (raw, json)
Hash identifier:          sZl2Gqj3wx0Mo5b7+/bvicPbEfHhi4qo1UszqSNSN4k=
Subject key identifier:   CF:64:8D:48:65:61:9C:DD:0B:C5:55:B7:67:E9:C0:EF:22:C9:A7:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B4B3BB4C01E21782A2480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b4dbaa-7ffb-39c8-adb7-2de5c66dc2ac.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        24.4.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:4b:3b:b4:c0:1e:21:78:2a:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=3a60d0ed-bc5a-4305-af4c-42065db90bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:e4:e9:a1:69:b6:75:f0:bf:62:36:13:73:
                    40:bf:93:5d:22:d5:66:8c:4e:17:01:33:42:45:68:
                    9e:08:58:7f:45:5c:55:5d:2b:e2:49:ff:6f:0e:cd:
                    c4:84:90:0b:eb:f5:da:a4:e0:cb:6c:83:68:a6:32:
                    bb:20:4e:18:3f:bb:c5:23:44:cf:20:33:f5:9d:fd:
                    2f:d7:bd:c7:ac:6c:d9:f5:c5:4c:ed:5f:5c:3a:b1:
                    a4:34:48:01:23:9c:db:60:c4:97:d5:a3:1e:1d:52:
                    f4:d1:8b:2b:71:cc:c4:13:e3:9e:8f:4a:85:f9:10:
                    43:8b:39:a4:a8:72:c4:3d:d6:5b:ce:4e:e4:6f:c0:
                    b8:94:92:96:48:6e:98:b2:55:2b:22:44:93:3d:43:
                    04:79:93:23:ae:bc:5d:15:8f:77:08:d8:23:a4:e0:
                    88:73:5e:b4:5d:46:7b:85:84:48:fd:fc:97:de:c6:
                    e5:44:81:32:12:b6:67:ea:75:0c:f8:de:7c:fb:c5:
                    a4:cb:e9:4a:96:bc:1e:45:63:88:41:32:5a:dd:b0:
                    76:2b:db:c5:42:a0:fc:54:c2:a7:ab:df:44:4f:0c:
                    59:7e:e2:63:5b:54:e6:07:80:c7:94:67:50:3e:74:
                    62:1f:0a:e9:69:e5:42:1e:ed:36:6c:22:24:74:f9:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:8D:48:65:61:9C:DD:0B:C5:55:B7:67:E9:C0:EF:22:C9:A7:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b4dbaa-7ffb-39c8-adb7-2de5c66dc2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.4.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:b4:71:37:63:fe:e6:a6:b9:18:f3:27:e6:ee:55:fc:ce:
         d8:39:be:3f:5e:ea:53:c5:00:12:a6:97:d9:7d:da:cb:c3:67:
         af:6b:88:29:23:8a:f0:8f:6b:08:1c:2d:06:4a:3c:43:53:d9:
         3b:08:26:08:8d:cd:5d:8c:69:63:2a:5f:29:e8:c4:8e:9d:f1:
         29:e3:b6:7e:9e:0e:fd:40:1f:a3:7d:9d:19:4d:1a:a7:0e:9d:
         89:a5:a9:8a:64:a7:a7:eb:1e:cb:fb:69:28:1d:6c:f9:ae:65:
         0e:de:bb:82:2e:80:97:69:40:d5:10:5c:2c:a7:9d:40:cf:01:
         4f:b9:e5:e9:0c:b3:98:52:c1:63:ac:af:d3:b3:e3:81:0e:22:
         d6:db:5f:ce:36:4b:93:54:f7:82:8f:7c:03:97:20:56:91:7e:
         db:dd:a4:aa:7b:c1:a1:30:83:eb:1c:cb:2a:d1:1a:1f:57:b0:
         86:90:b0:49:f2:fc:c3:05:13:c6:28:d8:6a:7a:81:fe:b5:ba:
         8c:ba:c7:d9:f0:c8:3b:e2:40:a4:fb:4b:54:cd:e4:fd:8f:aa:
         f1:c3:58:47:7e:06:cf:d0:fa:e1:5c:54:57:56:73:46:b6:20:
         c4:f9:89:c4:59:ea:29:22:75:ad:f0:83:da:7b:d5:c5:29:6e:
         64:7e:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:03:56 2026 by rpki-client