Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa
File:                     e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa (raw, json)
Hash identifier:          vx5phdkl6RiAQQ0bojFYy/uWiBgYfwe6Eae6U73RLq0=
Subject key identifier:   37:39:16:F9:75:88:47:B0:AB:99:8B:62:6D:CF:10:F1:8F:C0:D1:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFC9D16266A3E0FC505800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        24.127.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:c9:d1:62:66:a3:e0:fc:50:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=551a92b2-06a0-4b7f-b7b1-216ed3fc4cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:04:66:d0:6d:8d:69:68:55:c4:e7:db:ac:
                    05:60:cc:36:c4:d7:96:f2:c4:02:4b:64:1e:3c:f5:
                    18:27:ad:68:de:69:a5:b1:b4:1f:b7:c3:59:1d:1f:
                    a9:95:6c:eb:dc:f5:8a:25:5d:b8:65:6c:20:94:f9:
                    85:4b:94:2b:ce:35:47:7d:96:39:cd:d7:b7:5f:47:
                    1c:0e:b5:07:1f:8c:e8:4f:bb:57:88:a0:b6:e5:dc:
                    12:58:08:e6:8e:03:ed:b1:7b:98:f2:f3:b7:e5:d3:
                    c9:46:81:8c:71:c7:65:a8:7a:39:3c:ad:2e:fd:7e:
                    2a:71:9b:1e:c8:ad:e5:d2:54:41:66:e1:bb:2f:f0:
                    ec:9c:e5:55:8c:21:16:7b:4a:a5:df:be:24:83:d3:
                    b2:ff:67:1a:d7:10:45:1e:a8:d1:91:ef:64:45:60:
                    fd:86:6a:fb:ac:33:d8:db:86:d8:49:5b:e6:75:d6:
                    aa:23:0e:4f:22:36:52:87:d4:a3:2c:6b:80:32:a2:
                    f1:ed:1f:52:bf:d2:0c:68:3c:6b:cb:b7:9e:36:e6:
                    ad:25:fd:dd:1f:7d:67:06:89:77:71:b6:82:01:3d:
                    2c:03:f8:1e:d7:20:f6:3f:07:07:53:ee:ad:58:8e:
                    21:ae:58:7f:b3:5f:36:34:fd:63:52:46:9a:de:f9:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:39:16:F9:75:88:47:B0:AB:99:8B:62:6D:CF:10:F1:8F:C0:D1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e882c9ee-2769-33f0-aaaa-0f7aeb4ae3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:de:4a:ea:fc:df:49:26:02:7d:c3:e9:8a:90:39:1c:be:
         b2:f8:26:39:91:44:ba:62:95:f8:b5:92:c6:91:ce:52:91:6f:
         d6:85:4b:5d:be:c5:be:a6:a1:f1:03:50:1c:76:4f:56:c2:77:
         8f:22:11:ae:66:a3:01:d6:0a:e5:b9:e3:fa:ba:da:a3:07:ab:
         16:5d:97:95:0c:e1:83:e0:d8:54:65:66:09:59:79:40:1f:16:
         66:13:04:83:fd:99:f2:63:d3:75:c8:e9:b6:a9:f9:67:b2:4b:
         29:24:3a:4a:39:31:82:b2:c2:1f:d2:a8:f5:90:31:1f:f9:c7:
         34:72:4d:4c:a9:81:7e:43:14:42:94:94:28:67:4d:df:a6:2b:
         a7:22:c6:e1:89:43:6d:03:74:d0:bc:61:2d:26:49:42:1a:d8:
         f4:8c:ae:3a:ed:e4:a2:70:7e:65:07:23:90:98:87:b2:bc:dd:
         38:98:7b:dc:f5:5c:1c:1f:35:3b:04:e6:00:2e:d8:6b:0f:52:
         74:54:da:bb:04:e7:10:75:01:ef:b5:e9:a9:2a:c0:ff:0f:77:
         b9:d2:39:39:8a:57:58:e8:19:c7:60:2b:08:c4:73:f4:60:aa:
         33:d5:d7:3b:7a:55:a9:d8:18:da:67:c6:70:dc:a5:5b:7f:a1:
         10:5c:9d:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/8nRYmaj4PxQWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
NTUxYTkyYjItMDZhMC00YjdmLWI3YjEtMjE2ZWQzZmM0Y2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEwEZtBtjWloVcTn26wFYMw2xNeW8sQCS2Qe
PPUYJ61o3mmlsbQft8NZHR+plWzr3PWKJV24ZWwglPmFS5QrzjVHfZY5zde3X0cc
DrUHH4zoT7tXiKC25dwSWAjmjgPtsXuY8vO35dPJRoGMccdlqHo5PK0u/X4qcZse
yK3l0lRBZuG7L/DsnOVVjCEWe0ql374kg9Oy/2ca1xBFHqjRke9kRWD9hmr7rDPY
24bYSVvmddaqIw5PIjZSh9SjLGuAMqLx7R9Sv9IMaDxry7eeNuatJf3dH31nBol3
cbaCAT0sA/ge1yD2PwcHU+6tWI4hrlh/s182NP1jUkaa3vm/nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDc5Fvl1iEewq5mLYm3PEPGPwNHjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg4MmM5ZWUtMjc2OS0z
M2YwLWFhYWEtMGY3YWViNGFlM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGH/5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7C3krq/N9JJgJ9w+mKkDkcvrL4JjmRRLpilfi1ksaRzlKRb9aFS12+
xb6mofEDUBx2T1bCd48iEa5mowHWCuW54/q62qMHqxZdl5UM4YPg2FRlZglZeUAf
FmYTBIP9mfJj03XI6bap+WeySykkOko5MYKywh/SqPWQMR/5xzRyTUypgX5DFEKU
lChnTd+mK6cixuGJQ20DdNC8YS0mSUIa2PSMrjrt5KJwfmUHI5CYh7K83TiYe9z1
XBwfNTsE5gAu2GsPUnRU2rsE5xB1Ae+16akqwP8Pd7nSOTmKV1joGcdgKwjEc/Rg
qjPV1zt6VanYGNpnxnDcpVt/oRBcnaA=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:32:40 2026 by rpki-client