Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e724afff-4cab-35c6-b0de-59733c04e18c.roa
File:                     e724afff-4cab-35c6-b0de-59733c04e18c.roa (raw, json)
Hash identifier:          u4KLRGyOIJAwClUHgaPP2H+MWDQotobGatdb0zxfumc=
Subject key identifier:   35:D5:F3:F1:22:3B:D7:0A:FC:27:1C:55:71:E6:BE:0E:95:0F:BC:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144CB69E886D71B0FA97F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e724afff-4cab-35c6-b0de-59733c04e18c.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        24.98.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:cb:69:e8:86:d7:1b:0f:a9:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=aae2078c-4db1-40b2-af1c-3c93c0cccb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:21:c3:7b:27:15:5c:3b:e5:a7:70:dc:eb:
                    de:a9:1f:84:28:25:f2:5c:d1:7c:00:63:ba:b9:20:
                    d1:16:46:b8:4c:2d:23:1e:64:e4:52:22:16:12:46:
                    63:b8:ee:d0:b1:34:10:7f:e2:13:20:31:cf:ae:57:
                    b5:81:6a:cb:60:fb:62:c5:5b:ac:67:fb:f7:7e:9e:
                    ce:7d:32:a8:a7:4e:9f:70:f1:08:37:d8:b6:d2:0b:
                    b1:ee:6e:21:4a:92:ad:62:91:3e:e0:e3:0e:ac:5c:
                    8c:27:63:2d:52:8c:59:dc:11:b2:ec:c6:a9:07:3f:
                    0d:23:2c:c4:7f:dd:44:4c:2c:2f:80:75:db:77:ab:
                    74:8b:31:b3:30:e2:24:9c:64:d8:e6:c1:63:f1:57:
                    3c:f6:69:44:8d:75:43:1b:3a:da:6b:70:a6:71:69:
                    ec:b2:3d:bd:f3:e3:72:95:12:30:ae:e3:1c:c5:98:
                    da:93:9c:5a:24:d3:f6:09:e8:3e:1f:58:f4:9f:58:
                    34:ee:2d:83:3d:fe:ef:c6:ab:46:ff:f1:63:2e:b8:
                    25:06:c9:11:18:26:6e:5a:6c:d5:e7:92:52:43:76:
                    5e:2f:93:da:f9:03:77:ac:6c:18:2f:02:bb:28:6f:
                    2e:4a:e4:56:31:57:11:ec:a7:ed:9b:9e:e4:32:dc:
                    06:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D5:F3:F1:22:3B:D7:0A:FC:27:1C:55:71:E6:BE:0E:95:0F:BC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e724afff-4cab-35c6-b0de-59733c04e18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:67:1b:2c:97:59:e6:f6:0b:1b:7e:d9:20:76:67:38:f3:
         49:db:70:a1:3a:58:97:4d:50:f2:7f:ba:1d:88:32:87:60:0b:
         30:be:f6:d9:18:d6:aa:e9:9f:15:ce:05:d2:43:02:fb:04:4a:
         89:f4:15:7e:3b:63:85:f6:16:be:24:ce:0b:99:41:fe:4e:f1:
         1c:fa:ca:cc:98:7c:6b:df:e6:2b:3f:dd:c0:83:3c:95:41:79:
         dc:f8:83:d8:21:43:93:de:26:de:f6:b3:2b:ae:c1:2f:9a:6d:
         7b:8e:0a:99:d7:23:c5:2a:3d:b4:fb:b1:30:63:e3:06:40:06:
         22:00:2b:4c:ac:66:37:07:52:65:c0:fd:6f:70:ce:19:29:0d:
         37:20:a4:18:60:10:57:c7:1a:7d:20:10:1c:6e:85:52:ff:1a:
         ee:ae:d0:70:84:c5:7b:08:1d:92:a4:c0:fa:cf:72:85:af:f6:
         34:bc:4c:17:5f:7a:eb:ac:82:8c:f0:89:5e:b8:09:ae:4b:cc:
         67:f1:f7:f7:03:d5:86:01:27:c6:14:37:ee:7e:3c:fb:8c:ee:
         6d:99:97:43:f2:99:13:0b:f3:47:2d:c0:ef:b6:5e:59:1c:72:
         9f:80:dc:53:4d:93:9a:b0:6d:db:89:82:6b:96:d1:20:d7:28:
         43:fe:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:33:04 2026 by rpki-client