Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b804db1b-cd07-3ba3-972f-9a024d73b93e.roa
File:                     b804db1b-cd07-3ba3-972f-9a024d73b93e.roa (raw, json)
Hash identifier:          dxuKLW4f7wOPXJEcLTTmJS3oNkNddxafm12AMpPZWA4=
Subject key identifier:   21:93:FC:90:2D:09:1A:6B:95:C3:AB:6A:AC:BD:5B:F4:48:AB:D8:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E61451E088CB5EA992D725F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b804db1b-cd07-3ba3-972f-9a024d73b93e.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        24.126.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:1e:08:8c:b5:ea:99:2d:72:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=8831ae16-8b9a-4279-8d2f-42a575fc5bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:71:25:e9:41:1d:0c:0f:a3:06:c3:83:44:
                    48:58:67:3d:78:fd:43:69:6c:cc:45:59:e7:21:c9:
                    11:b0:16:1a:b1:37:dd:70:26:9e:92:da:79:21:73:
                    ee:b3:f1:e2:de:57:26:18:cf:f2:bb:35:a4:11:49:
                    b9:dc:4d:fd:6d:2d:27:29:7d:cd:e6:66:80:c0:63:
                    74:8f:58:a8:ea:5b:f5:2f:9a:b8:14:a5:e5:b9:1b:
                    a2:de:88:4d:ba:ad:d6:91:1f:95:b3:f8:3e:16:b0:
                    3a:28:e6:c2:c3:4a:05:7e:dc:ff:a5:7c:f9:a2:10:
                    15:f4:52:df:48:4e:54:9f:9b:95:ce:b8:68:17:bb:
                    35:63:00:37:fa:fa:4c:eb:f3:32:3c:2c:6a:72:e8:
                    33:f7:22:37:fd:0c:e6:bb:af:1c:e1:3f:af:07:72:
                    89:e6:29:df:ab:55:18:e1:f5:0e:c9:ad:db:d1:7a:
                    6d:ae:a8:4b:90:09:da:f2:3f:56:c7:55:26:3c:71:
                    d1:db:e3:00:61:45:4f:c4:b3:40:1d:99:b5:c3:36:
                    3f:b7:0e:02:16:02:26:d1:82:40:1e:d2:07:8a:29:
                    c6:87:19:0d:f1:24:4a:44:1a:d2:f5:df:e8:b9:12:
                    14:f5:59:be:bd:ca:67:ab:33:d4:ee:b1:52:3f:2a:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:93:FC:90:2D:09:1A:6B:95:C3:AB:6A:AC:BD:5B:F4:48:AB:D8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b804db1b-cd07-3ba3-972f-9a024d73b93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.126.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:98:76:71:7b:ab:ac:46:b6:4f:3d:ae:32:43:31:ad:2c:
         01:ad:ca:61:a5:0e:d2:a0:60:a4:3b:be:5a:4c:64:0e:68:69:
         f3:10:19:0e:95:46:ac:cd:ea:a3:a1:0e:1d:a5:e9:c0:89:f9:
         fd:1d:20:e1:13:28:74:72:03:0a:c2:87:15:39:d2:08:97:da:
         ab:fd:bd:17:68:11:e7:e7:dc:73:1e:4b:cc:90:1b:f8:95:33:
         aa:b4:0c:4e:09:6a:86:d5:15:79:de:1f:c7:07:ca:2b:9b:e9:
         33:3e:48:4a:6e:c1:de:e2:e2:c5:64:4c:26:b2:f5:52:ad:c0:
         ef:82:d5:bd:89:84:80:59:e5:92:3a:8b:05:3b:27:61:64:11:
         e7:f4:26:f6:61:23:6b:87:4e:5d:1f:21:58:77:cf:45:0c:97:
         19:c1:44:61:12:50:3d:1f:1e:8e:f7:02:f0:e7:d4:21:2c:af:
         ef:73:13:5a:6c:d7:3b:1e:86:ea:2b:03:61:15:ba:76:4b:44:
         15:c8:ef:eb:f7:aa:cf:62:82:73:b8:58:50:c0:c7:a6:ed:f6:
         ec:79:0c:13:62:96:f8:10:34:d3:ba:32:df:b1:6e:79:c3:91:
         cd:76:9e:42:f7:ef:8c:a6:92:c1:48:9c:67:03:12:b1:dd:1a:
         fe:93:0f:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRR4IjLXqmS1yX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ODgzMWFlMTYtOGI5YS00Mjc5LThkMmYtNDJhNTc1ZmM1YmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aFxJelBHQwPowbDg0RIWGc9eP1DaWzMRVnn
IckRsBYasTfdcCaektp5IXPus/Hi3lcmGM/yuzWkEUm53E39bS0nKX3N5maAwGN0
j1io6lv1L5q4FKXluRui3ohNuq3WkR+Vs/g+FrA6KObCw0oFftz/pXz5ohAV9FLf
SE5Un5uVzrhoF7s1YwA3+vpM6/MyPCxqcugz9yI3/Qzmu68c4T+vB3KJ5infq1UY
4fUOya3b0XptrqhLkAna8j9Wx1UmPHHR2+MAYUVPxLNAHZm1wzY/tw4CFgIm0YJA
HtIHiinGhxkN8SRKRBrS9d/ouRIU9Vm+vcpnqzPU7rFSPypXWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGT/JAtCRprlcOraqy9W/RIq9jwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjgwNGRiMWItY2QwNy0z
YmEzLTk3MmYtOWEwMjRkNzNiOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGH7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxsmHZxe6usRrZPPa4yQzGtLAGtymGlDtKgYKQ7vlpMZA5oafMQGQ6V
RqzN6qOhDh2l6cCJ+f0dIOETKHRyAwrChxU50giX2qv9vRdoEefn3HMeS8yQG/iV
M6q0DE4JaobVFXneH8cHyiub6TM+SEpuwd7i4sVkTCay9VKtwO+C1b2JhIBZ5ZI6
iwU7J2FkEef0JvZhI2uHTl0fIVh3z0UMlxnBRGESUD0fHo73AvDn1CEsr+9zE1ps
1zsehuorA2EVunZLRBXI7+v3qs9ignO4WFDAx6bt9ux5DBNilvgQNNO6Mt+xbnnD
kc12nkL374ymksFInGcDErHdGv6TDwo=
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:30:13 2026 by rpki-client