Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c90455ed-1c1a-348b-b7ad-e810479da9f9.roa
File:                     c90455ed-1c1a-348b-b7ad-e810479da9f9.roa (raw, json)
Hash identifier:          kM2/CGW6a+libcExTXrskI2KXPji0ORcCbDnWcp5Pzs=
Subject key identifier:   AD:BA:92:C4:1B:3A:03:BE:CE:F4:6E:DC:D0:A0:10:46:42:96:DC:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E50900BA7CFF5034B5800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c90455ed-1c1a-348b-b7ad-e810479da9f9.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        24.127.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:50:90:0b:a7:cf:f5:03:4b:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=b75d9190-23fe-4aec-bb8b-cd015d0f8269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5e:86:25:10:44:ff:c6:69:a5:eb:14:38:b9:
                    49:c1:b8:56:28:a9:cc:e8:28:04:b5:e8:9a:17:4c:
                    08:05:33:42:ec:c3:d0:8c:0f:5c:83:34:b4:06:30:
                    e2:37:8a:b3:a7:d2:76:06:ec:2c:33:2c:00:c8:14:
                    a3:f6:cc:e0:b0:c1:b4:da:c5:b9:32:f4:63:99:60:
                    ca:66:ed:ba:b1:1b:ee:75:21:73:e2:b5:a6:b0:a6:
                    55:b5:69:36:d3:49:c2:0a:00:a5:52:10:a5:38:18:
                    b7:c1:ee:d3:ab:6a:26:d8:be:9e:7a:67:85:a9:36:
                    30:a1:2e:2a:cb:b3:b4:95:0c:5c:10:41:d6:b7:36:
                    10:b7:d4:9a:bd:27:c3:83:5e:68:b4:bf:ed:bf:95:
                    af:08:cc:b4:ec:f2:94:84:33:84:ab:85:09:92:85:
                    d9:c7:91:4b:1d:ba:b9:c4:76:37:19:7e:a0:c9:74:
                    f0:e5:25:aa:be:ad:77:1c:5f:5d:00:ab:d1:5d:b2:
                    aa:60:e2:76:cd:82:aa:f5:0b:5b:a5:c8:cd:ee:63:
                    52:e7:15:42:80:a3:8f:b5:98:73:fb:cd:c3:97:6f:
                    6b:c0:6d:76:eb:a3:f9:b2:ff:ce:21:1e:ae:cb:d4:
                    09:a5:0f:e1:3f:7e:41:d1:8e:35:48:86:eb:79:6f:
                    b2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:92:C4:1B:3A:03:BE:CE:F4:6E:DC:D0:A0:10:46:42:96:DC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c90455ed-1c1a-348b-b7ad-e810479da9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:23:c1:61:71:a1:3c:f3:2a:d1:98:ce:22:84:b8:c4:5b:
         d7:56:a1:6d:38:b9:65:83:5b:33:8b:77:3b:91:36:62:4a:98:
         20:57:23:1f:a4:cf:1f:f5:59:2f:b2:8c:15:67:a2:f9:79:e3:
         e8:1d:23:79:84:31:77:c9:c5:54:7e:26:cb:3e:bc:97:a7:26:
         ee:e1:2e:1f:21:a0:b5:12:5e:e3:3e:b2:96:a4:ba:d6:f2:7a:
         1d:60:c7:4a:53:2e:02:7d:eb:a4:84:fa:ae:f2:1b:ad:45:f6:
         ee:96:72:bc:a3:ee:da:a1:bd:33:cf:5f:2e:af:16:5e:e3:5a:
         71:7d:18:91:c6:5b:5e:a5:bc:25:7a:d7:20:94:ac:a6:af:00:
         09:f8:67:7a:46:98:e2:d6:b3:4e:38:54:54:23:0e:b8:86:0e:
         96:87:c9:8a:ee:64:8f:00:12:c9:60:44:74:87:9b:73:f7:8a:
         2a:ca:15:e0:e5:06:a1:9e:43:27:f6:81:fc:bd:08:d0:49:56:
         07:46:0d:cd:9b:7b:aa:2c:75:5e:bf:fc:c4:54:c6:44:60:76:
         90:c4:55:27:f6:f4:0c:54:a0:05:70:82:9f:31:41:b2:9e:ab:
         22:d0:da:39:43:84:eb:ef:5e:72:e3:c9:aa:f9:87:b7:6e:fb:
         53:08:eb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:58:37 2026 by rpki-client