Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd2f933f-0e04-33e4-8173-adbbbc108282.roa
File:                     cd2f933f-0e04-33e4-8173-adbbbc108282.roa (raw, json)
Hash identifier:          XYS+9scq3yf5Ff7e5HMShO/tyETKRlnE0hkiizdug+I=
Subject key identifier:   6F:72:18:7D:A4:64:35:E8:E1:82:53:7F:9E:8C:8C:DE:ED:80:2D:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF77A32BCE181616E581B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd2f933f-0e04-33e4-8173-adbbbc108282.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        24.15.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:7a:32:bc:e1:81:61:6e:58:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3d7339dd-42b4-4e22-90a2-a6871b3e7f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:fa:eb:a6:0e:ec:d8:18:99:c2:39:70:c3:
                    39:52:c0:44:0a:88:97:46:18:63:97:3a:20:d7:2b:
                    bb:d3:53:30:45:b4:ae:14:62:fd:bf:33:ba:27:1e:
                    33:9f:47:eb:74:55:e7:ee:f5:43:da:26:72:7f:fc:
                    ad:61:f4:b5:10:05:6c:ee:a5:d9:fe:2d:9b:bf:25:
                    db:5d:94:14:1a:ec:ff:6f:36:aa:99:63:54:9d:1c:
                    45:97:b8:9a:d2:45:20:c0:44:ec:c9:77:aa:a2:67:
                    c8:de:20:1e:9d:46:a0:81:2f:f1:30:e3:f9:8e:89:
                    fd:e8:11:d5:2d:51:b8:5f:23:60:b0:28:e3:33:eb:
                    f6:91:ec:e3:3f:3a:e0:3c:18:72:77:47:c8:18:9d:
                    6e:5e:5e:59:d3:32:a3:c9:00:69:75:22:14:b7:2c:
                    3a:3c:87:d2:66:0e:82:62:54:6e:9e:98:8a:24:15:
                    45:1c:ef:a1:02:52:84:4e:a7:da:d4:bf:8c:cb:fe:
                    41:e3:da:69:b4:62:0b:5c:10:02:41:53:6a:21:a7:
                    f4:ca:1e:de:e7:cc:11:70:f6:bb:95:cb:e0:ab:11:
                    e2:a7:29:07:1f:6f:f4:eb:a5:ce:46:a3:b3:9f:90:
                    3e:bd:f8:36:0b:33:7b:4a:c1:a8:c5:8f:87:3b:6d:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:18:7D:A4:64:35:E8:E1:82:53:7F:9E:8C:8C:DE:ED:80:2D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd2f933f-0e04-33e4-8173-adbbbc108282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.15.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c6:24:68:b6:03:db:52:97:b2:09:9f:14:bd:45:59:b3:a0:
         bc:2d:a6:84:bf:d4:ac:9b:e2:c8:0c:cd:4e:e3:82:c8:98:10:
         50:c3:06:bf:7e:86:9d:41:00:68:0a:fe:75:10:7e:f7:5f:a7:
         80:ea:42:94:f6:59:22:9c:83:ee:50:4a:b6:99:45:0d:9d:af:
         2d:f5:b2:71:c1:97:7e:bd:16:45:55:f7:3e:c2:67:ae:d2:11:
         9c:ca:f5:db:27:41:d0:4f:e9:24:73:00:d0:3e:e4:52:72:1f:
         4e:66:f7:03:fa:17:4e:38:85:11:a3:64:e7:64:2a:9a:1b:cd:
         d6:37:40:72:4f:58:6a:52:24:4f:91:1f:82:e0:46:63:6e:54:
         1a:40:05:cf:83:6d:30:38:fb:6a:c4:60:bb:85:23:11:36:3d:
         bd:a8:c7:05:b0:f2:e5:68:f2:20:8a:04:9a:d4:38:0e:54:d3:
         0f:d8:38:01:42:4a:c0:c4:81:e3:bd:1c:fe:9e:b7:d9:f7:9e:
         d1:c3:2c:2f:65:e7:da:64:98:e3:dc:40:e2:e2:6b:7f:46:53:
         80:60:aa:e4:1b:1b:fb:7d:ed:2b:e8:a9:31:bb:9a:c2:0b:c9:
         ee:cf:9c:ac:f5:62:08:3e:39:73:1a:08:d3:fc:58:8e:78:de:
         3d:48:ea:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O93oyvOGBYW5YGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
M2Q3MzM5ZGQtNDJiNC00ZTIyLTkwYTItYTY4NzFiM2U3ZjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq/666YO7NgYmcI5cMM5UsBECoiXRhhjlzog
1yu701MwRbSuFGL9vzO6Jx4zn0frdFXn7vVD2iZyf/ytYfS1EAVs7qXZ/i2bvyXb
XZQUGuz/bzaqmWNUnRxFl7ia0kUgwETsyXeqomfI3iAenUaggS/xMOP5jon96BHV
LVG4XyNgsCjjM+v2kezjPzrgPBhyd0fIGJ1uXl5Z0zKjyQBpdSIUtyw6PIfSZg6C
YlRunpiKJBVFHO+hAlKETqfa1L+My/5B49pptGILXBACQVNqIaf0yh7e58wRcPa7
lcvgqxHipykHH2/066XORqOzn5A+vfg2CzN7SsGoxY+HO20dhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9yGH2kZDXo4YJTf56MjN7tgC1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2QyZjkzM2YtMGUwNC0z
M2U0LTgxNzMtYWRiYmJjMTA4MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGA8dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKnGJGi2A9tSl7IJnxS9RVmzoLwtpoS/1Kyb4sgMzU7jgsiYEFDDBr9+
hp1BAGgK/nUQfvdfp4DqQpT2WSKcg+5QSraZRQ2dry31snHBl369FkVV9z7CZ67S
EZzK9dsnQdBP6SRzANA+5FJyH05m9wP6F044hRGjZOdkKpobzdY3QHJPWGpSJE+R
H4LgRmNuVBpABc+DbTA4+2rEYLuFIxE2Pb2oxwWw8uVo8iCKBJrUOA5U0w/YOAFC
SsDEgeO9HP6et9n3ntHDLC9l59pkmOPcQOLia39GU4BgquQbG/t97SvoqTG7msIL
ye7PnKz1Ygg+OXMaCNP8WI543j1I6mI=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:30:57 2026 by rpki-client