Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2788ae-92b4-3120-9973-884ff9f0fad0.roa
File:                     dd2788ae-92b4-3120-9973-884ff9f0fad0.roa (raw, json)
Hash identifier:          YwtuFvXUmDX62f1IYEeBJtxrF22kdbUD1g7y7AC/YkY=
Subject key identifier:   8F:84:B9:AD:45:2F:5D:B3:E8:B3:A2:8D:9D:E4:1A:D2:9B:AB:9C:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6A2005BFD6C76B6E2FAA4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2788ae-92b4-3120-9973-884ff9f0fad0.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        24.5.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:a2:00:5b:fd:6c:76:b6:e2:fa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=9e0e9003-3a18-45dd-97c7-f7b172e53ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:7f:78:1a:c2:97:61:e1:32:f9:52:c6:64:
                    c6:dc:ab:53:96:e8:d4:2d:e3:7f:e0:08:b8:a6:fb:
                    a4:34:81:9c:4d:bb:06:ec:f9:bf:70:96:78:e0:28:
                    f0:68:5b:bf:58:d4:25:fc:0b:66:19:ef:1f:ca:f9:
                    6b:00:b8:94:80:6b:94:27:1b:f2:af:b0:17:2e:44:
                    79:1c:8e:ab:b1:5e:2c:1b:9f:f5:c2:af:e2:a0:25:
                    61:aa:2c:19:fa:09:9f:03:a8:99:65:37:5c:d3:17:
                    c1:b3:6a:ce:d0:67:e2:82:03:9d:69:49:00:0e:34:
                    39:7d:0c:70:ba:e3:2a:6e:9f:f4:44:ce:78:9d:64:
                    f7:98:72:11:de:07:49:0a:13:9c:75:dc:93:54:08:
                    70:60:13:81:fb:5f:95:d0:3c:a2:49:52:c7:d5:7c:
                    70:a4:9d:c7:c8:cf:38:6b:5c:92:d6:77:82:35:00:
                    90:9c:17:40:47:78:1d:33:f2:99:fa:e0:e4:e4:4a:
                    aa:4d:11:6f:34:6a:e7:12:ee:cd:5c:96:7b:e3:cf:
                    72:3b:3a:6a:6b:68:9d:da:f1:f6:a5:e4:5f:67:27:
                    a4:09:a4:c0:03:aa:8f:3f:f6:a6:de:2e:03:66:c0:
                    27:96:04:b4:72:7b:09:31:14:ee:96:a5:cf:2e:8a:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:84:B9:AD:45:2F:5D:B3:E8:B3:A2:8D:9D:E4:1A:D2:9B:AB:9C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2788ae-92b4-3120-9973-884ff9f0fad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:e2:36:d4:53:f4:42:69:8a:f1:55:c3:70:b4:e1:8e:d7:74:
         6e:f1:a6:ba:14:7f:f8:f5:75:3a:1a:18:f8:37:d9:b9:83:2c:
         f3:88:96:cb:6b:2b:9a:14:86:c1:d8:4f:47:5b:fa:96:2d:ea:
         5a:21:58:be:ed:4f:5d:82:fd:d0:c2:9e:62:27:43:43:b2:01:
         ef:a1:3f:f1:a3:43:dc:99:2d:9b:2f:d2:c1:78:28:e6:6f:9b:
         8a:3b:ac:0d:0e:c5:87:d5:e5:4b:67:e9:0f:15:12:57:2b:02:
         76:86:3c:36:ba:ce:1a:11:ee:3e:11:16:c1:8f:91:f2:da:1a:
         47:2c:90:16:01:2f:5b:59:ba:c6:db:3e:e7:f2:78:2b:b5:85:
         55:ff:6e:72:c3:9b:ce:c1:61:9c:9e:a7:d4:c8:20:da:d7:78:
         a2:fa:69:aa:bd:d7:e3:d7:cf:94:b8:db:20:cb:4b:59:be:d8:
         8f:a6:bb:9d:24:39:06:64:b4:06:f7:09:7f:05:60:cf:e3:4e:
         87:19:5e:bb:d0:b6:3b:7f:bc:92:1c:6b:03:c1:40:36:98:f7:
         2c:26:dc:62:ee:5c:01:ca:5b:15:6b:2e:fe:4e:4a:64:96:53:
         54:74:2e:4b:c9:03:e2:53:ed:2a:b8:c6:83:ba:20:62:ae:17:
         0e:0f:2b:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9qIAW/1sdrbi+qQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
OWUwZTkwMDMtM2ExOC00NWRkLTk3YzctZjdiMTcyZTUzZWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ON/eBrCl2HhMvlSxmTG3KtTlujULeN/4Ai4
pvukNIGcTbsG7Pm/cJZ44CjwaFu/WNQl/AtmGe8fyvlrALiUgGuUJxvyr7AXLkR5
HI6rsV4sG5/1wq/ioCVhqiwZ+gmfA6iZZTdc0xfBs2rO0GfiggOdaUkADjQ5fQxw
uuMqbp/0RM54nWT3mHIR3gdJChOcddyTVAhwYBOB+1+V0DyiSVLH1XxwpJ3HyM84
a1yS1neCNQCQnBdAR3gdM/KZ+uDk5EqqTRFvNGrnEu7NXJZ7489yOzpqa2id2vH2
peRfZyekCaTAA6qPP/am3i4DZsAnlgS0cnsJMRTulqXPLor7YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+Eua1FL12z6LOijZ3kGtKbq5wjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQyNzg4YWUtOTJiNC0z
MTIwLTk5NzMtODg0ZmY5ZjBmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAWSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMfiNtRT9EJpivFVw3C04Y7XdG7xproUf/j1dToaGPg32bmDLPOIlstr
K5oUhsHYT0db+pYt6lohWL7tT12C/dDCnmInQ0OyAe+hP/GjQ9yZLZsv0sF4KOZv
m4o7rA0OxYfV5Utn6Q8VElcrAnaGPDa6zhoR7j4RFsGPkfLaGkcskBYBL1tZusbb
PufyeCu1hVX/bnLDm87BYZyep9TIINrXeKL6aaq91+PXz5S42yDLS1m+2I+mu50k
OQZktAb3CX8FYM/jTocZXrvQtjt/vJIcawPBQDaY9ywm3GLuXAHKWxVrLv5OSmSW
U1R0LkvJA+JT7Sq4xoO6IGKuFw4PKwM=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:33:50 2026 by rpki-client