Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28951aa-2130-3315-bff6-a5ab1f821137.roa
File:                     a28951aa-2130-3315-bff6-a5ab1f821137.roa (raw, json)
Hash identifier:          ThzGP2r7zs2oIMgMVGq+Uv0Z7fQ8hwHlTUTZmEjJS00=
Subject key identifier:   44:12:15:A3:5A:D6:3C:A2:62:94:EF:05:3F:8D:17:1F:E2:ED:57:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D9E1E957E03946D137080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28951aa-2130-3315-bff6-a5ab1f821137.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        24.14.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:9e:1e:95:7e:03:94:6d:13:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9d060960-c5f7-4950-a76b-13d1f17a68ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:65:f3:d2:c5:8d:58:fe:3f:aa:ff:22:19:
                    2c:ed:06:8f:0c:7b:d7:80:ea:28:50:82:35:fa:13:
                    7e:f7:d9:8f:11:f0:13:93:38:b0:bb:78:28:54:7b:
                    a4:1f:3b:57:a4:e0:45:0a:0d:25:f0:69:e3:6e:01:
                    b9:27:b8:fa:25:fa:eb:84:d8:4a:64:dc:fe:b0:b1:
                    86:aa:8a:13:3d:29:b1:b4:39:ee:7c:ad:9c:a2:28:
                    7f:0f:10:13:09:28:d6:fd:1a:15:38:3b:3f:f1:b8:
                    bb:11:4e:22:cc:b0:19:86:1a:12:94:44:65:ee:73:
                    a1:1f:fa:6c:e1:22:02:ab:45:d3:1d:e4:4e:45:be:
                    ef:d3:8b:54:b6:73:74:08:2a:35:6e:90:4b:63:d8:
                    b3:23:87:f1:d6:9d:1c:4a:f2:08:3a:dc:14:47:26:
                    e0:5e:c1:c1:92:9b:4c:4e:d1:c4:ba:08:d2:28:75:
                    91:9f:0c:5a:14:17:a0:7c:53:81:eb:a5:7e:55:91:
                    8b:7a:24:44:1a:27:6c:33:a0:13:f3:87:3a:0e:2e:
                    13:a9:0a:84:55:53:1f:50:3f:05:3a:7d:87:b5:2d:
                    d7:c8:35:fc:2a:4a:eb:2b:ee:10:b8:3d:c0:ad:1d:
                    a9:1d:ef:a8:ef:b8:9d:c9:b4:89:04:d7:d2:f1:61:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:15:A3:5A:D6:3C:A2:62:94:EF:05:3F:8D:17:1F:E2:ED:57:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28951aa-2130-3315-bff6-a5ab1f821137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:df:f6:5c:82:46:5e:74:d5:f1:16:ab:e1:98:35:15:14:fa:
         14:9e:47:98:c2:1a:fa:17:e9:7e:0c:72:28:47:cf:49:e7:76:
         86:7a:ce:c9:bb:81:ce:11:1c:fb:47:bb:5c:71:e2:f7:69:5a:
         dd:26:de:ee:50:a5:b4:1b:61:a3:51:40:b6:46:c7:ca:06:5b:
         75:63:c4:16:6e:60:58:f9:43:90:8a:07:4e:e8:80:1f:78:d4:
         59:37:51:01:93:0f:de:79:54:1e:51:cd:05:a0:5f:90:27:ad:
         d2:b4:9b:20:79:af:bc:a1:5c:42:88:b7:b8:ae:f0:15:17:31:
         93:9d:82:03:06:5c:c3:14:8e:7b:92:df:b8:a3:0b:a5:2b:dc:
         db:a0:7a:0c:36:76:25:dd:f4:0a:dd:3d:48:b2:47:c3:c9:81:
         5e:75:5c:5d:cb:ff:82:e9:cf:77:81:7f:59:b6:02:31:ab:d8:
         6f:1a:46:08:2a:aa:44:f2:7d:8d:a8:63:d5:0a:13:c2:a3:90:
         dc:29:44:29:ac:c6:cb:04:19:f1:0c:c8:a4:c6:85:19:eb:9c:
         f2:65:6e:5e:7f:77:cb:42:f9:9a:a5:36:83:bf:67:cf:95:b9:
         2e:55:43:cd:29:c0:ef:dd:e6:32:cc:4c:02:47:ce:84:22:f2:
         14:41:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:24:30 2026 by rpki-client