Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d183df29-5ba4-3770-b39d-5ab3529220f7.roa
File:                     d183df29-5ba4-3770-b39d-5ab3529220f7.roa (raw, json)
Hash identifier:          iW61xdg6NUghatLwnMZdgoJDgFhq9WH8Hv1hLAV+cYA=
Subject key identifier:   B1:EE:3B:36:E1:91:3C:7F:C7:9F:71:02:0B:1D:13:F2:5E:81:00:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF60BC9E10E1EE168449950
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d183df29-5ba4-3770-b39d-5ab3529220f7.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        24.12.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:0b:c9:e1:0e:1e:e1:68:44:99:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=bf09779d-cfb1-4517-b60a-8208151d8a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:76:a1:b8:51:3e:06:c8:82:73:42:81:da:
                    87:80:97:9d:d8:cf:ff:b6:be:37:44:a8:c8:b5:bd:
                    5d:82:09:b2:fc:75:c7:5f:74:3b:14:94:62:fd:47:
                    a9:2c:41:0b:10:eb:1c:9d:40:e4:80:7d:21:a1:70:
                    0c:f7:d2:3c:bd:92:ba:07:12:c9:7c:f6:4d:39:ea:
                    38:c6:2f:e1:b9:b9:a1:e5:e9:a9:7f:27:43:7d:54:
                    83:d2:f7:4d:93:46:f9:20:9d:af:0b:fd:b4:f0:66:
                    76:42:2c:cf:d0:d0:b1:1c:09:a1:08:53:47:81:ec:
                    f7:14:b0:77:70:83:cc:c8:44:ac:8a:24:c6:25:88:
                    6c:44:6e:9e:8c:a5:6c:80:fb:12:19:43:e1:ac:96:
                    37:03:fe:dc:29:e6:54:c7:40:38:c9:5a:fb:05:f3:
                    8e:a7:8c:49:83:95:c2:3d:3c:11:4b:ab:42:8c:cf:
                    1c:56:9a:04:f5:fb:87:ef:47:11:4b:ba:31:bb:c5:
                    8e:1a:c8:67:d6:d0:85:de:cd:72:c1:77:97:95:fe:
                    2c:bc:b4:d2:dc:f8:a5:80:b7:34:55:e7:1d:12:43:
                    8a:26:d6:d4:85:ff:41:75:ce:0c:d0:93:5f:54:a9:
                    07:b4:77:da:01:69:a9:a2:51:ac:81:bb:20:a7:ed:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:3B:36:E1:91:3C:7F:C7:9F:71:02:0B:1D:13:F2:5E:81:00:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d183df29-5ba4-3770-b39d-5ab3529220f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.12.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ce:c3:10:91:75:2b:46:cf:ad:77:63:15:b3:67:33:28:e0:
         9a:d2:20:64:3a:da:fb:b6:0f:79:f4:63:9b:01:06:64:49:d2:
         c5:cd:18:2d:04:1b:36:22:3a:18:b6:23:31:5b:69:fa:88:25:
         41:17:45:bb:7a:ed:7c:54:12:72:9b:ec:91:f6:e9:cb:42:33:
         35:a1:25:1e:67:f7:f9:1c:3c:15:0c:3c:1e:48:33:71:4e:d8:
         51:8e:4c:39:0a:f7:7d:1f:f9:33:2a:ed:c6:93:2a:30:3e:2d:
         53:2d:9d:07:38:76:ca:9c:ba:46:0c:93:f5:f4:20:18:34:6e:
         49:a6:d5:ec:bb:6e:50:c0:3a:39:4e:45:77:bb:2f:1b:df:11:
         12:3f:2e:92:ae:81:9b:42:1e:4a:d3:97:b0:5a:cc:b5:d9:ff:
         1a:d3:1c:56:d3:a9:b9:a5:e2:6b:92:36:30:ee:79:68:cf:b8:
         34:4d:01:df:2e:75:88:42:ef:38:88:df:63:06:84:4e:8c:39:
         9d:b1:e8:7a:43:52:29:2c:32:70:e6:bf:dd:f2:1d:e1:5e:f8:
         6c:7f:6a:cb:fa:93:18:f4:c6:84:de:30:38:8f:9d:1c:24:64:
         46:76:f2:ca:cd:20:08:55:22:de:2c:88:0f:ee:16:2b:85:92:
         62:85:c2:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9gvJ4Q4e4WhEmVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
YmYwOTc3OWQtY2ZiMS00NTE3LWI2MGEtODIwODE1MWQ4YThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigF2obhRPgbIgnNCgdqHgJed2M//tr43RKjI
tb1dggmy/HXHX3Q7FJRi/UepLEELEOscnUDkgH0hoXAM99I8vZK6BxLJfPZNOeo4
xi/hubmh5empfydDfVSD0vdNk0b5IJ2vC/208GZ2QizP0NCxHAmhCFNHgez3FLB3
cIPMyESsiiTGJYhsRG6ejKVsgPsSGUPhrJY3A/7cKeZUx0A4yVr7BfOOp4xJg5XC
PTwRS6tCjM8cVpoE9fuH70cRS7oxu8WOGshn1tCF3s1ywXeXlf4svLTS3PilgLc0
VecdEkOKJtbUhf9Bdc4M0JNfVKkHtHfaAWmpolGsgbsgp+2bzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHuOzbhkTx/x59xAgsdE/JegQBsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE4M2RmMjktNWJhNC0z
NzcwLWIzOWQtNWFiMzUyOTIyMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMHOwxCRdStGz613YxWzZzMo4JrSIGQ62vu2D3n0Y5sBBmRJ0sXNGC0E
GzYiOhi2IzFbafqIJUEXRbt67XxUEnKb7JH26ctCMzWhJR5n9/kcPBUMPB5IM3FO
2FGOTDkK930f+TMq7caTKjA+LVMtnQc4dsqcukYMk/X0IBg0bkmm1ey7blDAOjlO
RXe7LxvfERI/LpKugZtCHkrTl7BazLXZ/xrTHFbTqbml4muSNjDueWjPuDRNAd8u
dYhC7ziI32MGhE6MOZ2x6HpDUiksMnDmv93yHeFe+Gx/asv6kxj0xoTeMDiPnRwk
ZEZ28srNIAhVIt4siA/uFiuFkmKFwpA=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:25:11 2026 by rpki-client