Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b684845d-9243-3e1f-969c-71635d32a48b.roa
File:                     b684845d-9243-3e1f-969c-71635d32a48b.roa (raw, json)
Hash identifier:          GfVNQ9VPv9dJ/8FaAXrWFBqmZgh48MW/TiULaEBfFAg=
Subject key identifier:   4E:C3:F7:11:B7:C7:FA:12:54:E6:B3:D3:F7:30:39:24:2E:BB:03:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF282E3E09BE11AA709BA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b684845d-9243-3e1f-969c-71635d32a48b.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        24.22.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:28:2e:3e:09:be:11:aa:70:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f8530ff9-0cf9-4840-8d4a-d12a0a7a1bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:75:28:2c:06:d5:c7:f9:73:4e:07:7e:18:
                    9a:5b:44:20:b1:33:32:87:e3:6e:ee:ac:dc:d6:d5:
                    c7:06:21:78:26:3c:f7:16:2f:9f:33:50:36:c8:44:
                    7b:a1:68:17:ad:30:20:11:3c:22:29:57:5a:b5:64:
                    dd:be:f7:6f:07:43:68:fb:64:e4:a2:29:45:b8:aa:
                    c0:d8:56:a1:ce:15:ef:bb:68:4c:27:1c:b3:04:c3:
                    09:3f:71:c5:05:77:72:8b:f8:18:89:5c:37:38:01:
                    92:34:e2:2d:be:27:75:2d:17:22:f4:cd:e9:83:9a:
                    a3:01:72:66:70:73:24:a1:3d:76:8b:ab:1f:96:0d:
                    b5:c7:de:e3:e2:35:18:44:78:8a:a3:ea:95:96:6c:
                    ff:50:f2:26:92:e1:4c:37:0d:33:fe:20:7d:2f:fc:
                    b4:8e:f2:41:4a:01:83:7c:bf:2b:f8:26:3e:55:6f:
                    1d:d5:6a:55:f3:63:ed:07:09:41:21:8c:8a:2e:c0:
                    da:f4:a9:33:cc:31:4d:56:99:4b:7e:eb:f3:a9:01:
                    07:a2:11:94:ef:8e:31:7a:67:9b:cd:9e:d7:15:a8:
                    54:af:ea:5c:83:6d:d0:15:60:44:39:b9:bf:79:2f:
                    56:51:4a:1a:d4:3d:7a:7f:8d:5e:43:10:ec:2b:ac:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C3:F7:11:B7:C7:FA:12:54:E6:B3:D3:F7:30:39:24:2E:BB:03:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b684845d-9243-3e1f-969c-71635d32a48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.22.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:18:06:5a:5b:44:ed:5d:af:f8:77:77:b3:67:8f:16:72:
         5a:f0:9a:68:26:a5:11:d1:ed:00:d8:9c:ea:d1:82:8f:09:01:
         02:35:cf:88:7f:aa:05:89:08:0f:56:02:aa:47:49:0d:51:f6:
         9b:07:df:ad:c6:2d:b2:a8:a8:94:e8:9a:c8:7e:7b:8d:c7:f6:
         73:02:ac:27:40:42:5a:dd:f6:97:cd:35:f4:92:85:bf:62:f1:
         1a:a4:b3:0a:c1:2c:9e:29:6a:e6:a0:80:e6:5e:6a:ed:cf:e4:
         4a:e5:1c:df:20:08:08:43:27:c0:1a:82:b0:11:bf:94:51:f1:
         46:bc:28:4f:91:6d:bc:f5:5b:a5:7e:1c:9f:53:08:1b:13:f3:
         08:fc:dd:0e:6c:98:ce:c4:2a:8e:60:c6:7a:e5:41:db:be:08:
         33:83:11:7c:30:64:ba:34:a9:db:bd:05:88:d3:49:87:d1:3a:
         21:3b:84:e6:9b:ab:07:b3:39:f8:bd:50:25:28:1f:9b:07:9d:
         9e:c6:3b:96:c7:f1:7a:61:37:00:7d:69:c0:c0:f0:40:09:10:
         cc:e5:40:0e:b2:0a:3e:07:e7:f0:94:71:da:02:76:f4:2f:0a:
         ed:f5:e5:f1:d1:38:26:72:dd:22:b2:fa:59:7d:d1:f9:92:f5:
         e0:3d:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:15:14 2026 by rpki-client