Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e0ff00-8121-3016-96a3-48fc26f2b1ad.roa
File:                     e3e0ff00-8121-3016-96a3-48fc26f2b1ad.roa (raw, json)
Hash identifier:          RpQfLJ11ZfePtC7FzAWM+mEllZqacxAVHsF3iRfcA6E=
Subject key identifier:   DA:5F:06:98:C7:D8:A1:DA:34:82:18:43:9B:E3:19:5F:46:32:B8:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36004CE821C99E84099A0FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e0ff00-8121-3016-96a3-48fc26f2b1ad.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        24.21.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:4c:e8:21:c9:9e:84:09:9a:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=1ffa991e-aca2-444c-baba-f1f44a032798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:4e:2f:bb:0e:27:dc:3d:78:7d:1f:14:c5:
                    f5:7a:ea:13:25:f3:6b:49:f0:9c:21:a6:26:a8:61:
                    77:a8:7f:17:6c:bf:14:e2:89:84:69:9a:40:ca:72:
                    4c:34:71:30:66:05:03:d2:4d:be:7f:a1:c2:3d:4c:
                    d3:d2:b0:d5:c7:fc:a2:c1:7d:7e:a5:79:3b:ee:95:
                    60:c3:9f:0f:c7:b0:ab:51:9e:96:ee:06:46:62:1b:
                    b7:b3:59:56:42:bc:55:c3:31:7e:75:55:f9:73:71:
                    d8:3e:3c:0d:6e:2d:e0:74:f2:b4:17:95:6e:10:a2:
                    1e:70:4b:a2:23:0d:3e:87:0c:f0:9f:c5:89:45:58:
                    ad:34:a1:71:c6:05:0b:f2:1f:4b:95:ef:49:af:b4:
                    01:d9:e9:92:11:3e:69:9f:6d:38:30:c0:b1:c7:99:
                    dd:14:7a:d6:ee:9b:b1:97:96:51:ee:97:94:2b:d4:
                    05:fd:d7:08:0f:fd:13:22:e3:8e:ba:88:a6:f6:a8:
                    0b:e1:d6:64:e8:ff:cd:5b:3f:91:9f:49:1c:ed:84:
                    0a:19:56:6c:05:3b:54:35:f3:0e:fd:2a:16:58:21:
                    3d:f9:4c:0b:d2:56:74:b7:de:f3:7d:26:75:70:2d:
                    f3:3d:e1:10:03:4c:e3:d8:71:75:cd:68:a5:83:c7:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5F:06:98:C7:D8:A1:DA:34:82:18:43:9B:E3:19:5F:46:32:B8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e0ff00-8121-3016-96a3-48fc26f2b1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.21.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:5e:bf:0e:42:f2:bf:a8:ff:d2:e1:3f:87:43:87:8c:65:
         19:50:3d:0c:95:d3:b6:09:b9:be:f6:28:57:3a:24:b2:8d:b3:
         17:e5:60:d8:20:96:c5:96:a4:8f:33:e2:23:4d:e2:c6:34:80:
         72:9a:37:39:72:9a:1d:b4:b9:c8:57:d3:b4:e5:b1:46:39:28:
         27:07:20:b1:c8:28:12:02:4f:96:71:b2:6f:6d:84:66:0c:1a:
         52:15:36:d7:c6:2e:b8:2d:47:ed:c5:fd:ce:7d:6d:ec:9a:21:
         85:b2:aa:ba:c8:f9:25:38:f1:b5:03:fa:4b:cd:62:d2:67:17:
         21:e2:b8:ae:8f:0a:be:65:a1:4f:6c:52:04:b3:f8:b2:26:d1:
         30:6d:91:59:02:39:a3:79:36:bd:0c:34:7c:39:ce:aa:1c:41:
         96:77:f2:b6:4c:7d:7a:8a:e8:f5:82:fe:12:f1:68:21:f2:c2:
         bb:24:76:4d:a3:7e:c3:e3:f2:e9:36:41:dd:a8:5e:81:84:e6:
         36:c3:32:b2:ff:66:50:27:1e:44:15:89:fa:b4:3b:84:5d:b5:
         f3:d7:e0:3f:83:e9:11:b6:d1:9e:0a:25:39:87:a3:6a:ad:00:
         79:07:a5:60:c2:05:99:cd:c6:d6:33:17:cb:e7:81:cf:85:30:
         d7:94:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:19:24 2026 by rpki-client