Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a84550-2a87-3e4e-90d1-2ac4e6cea899.roa
File:                     f7a84550-2a87-3e4e-90d1-2ac4e6cea899.roa (raw, json)
Hash identifier:          qOVHihjLMrQNfjD3kaSNPBjFptWJ3pP9XUeyxsuKiPI=
Subject key identifier:   FE:90:26:ED:31:B7:3D:EA:DB:B8:75:A7:E0:69:30:0A:90:10:49:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144C56655CE63FFDAC99380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a84550-2a87-3e4e-90d1-2ac4e6cea899.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        24.125.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:c5:66:55:ce:63:ff:da:c9:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=269ce713-3e98-4db0-9791-11d52efccf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:99:fe:f9:b5:0c:e6:c3:a5:1b:80:16:4a:
                    b1:fa:e2:01:f3:29:1b:b9:50:a0:c2:f7:1b:b5:4f:
                    b3:90:72:b4:7d:88:f5:83:8e:4a:0b:85:b7:6b:b2:
                    b9:6b:e2:c7:86:85:03:01:02:19:17:37:7c:0c:f6:
                    80:ea:97:98:90:4d:40:7a:c1:23:7c:dd:74:fe:19:
                    03:13:25:b4:d3:ff:39:89:63:97:0c:cf:d3:33:f4:
                    e5:30:26:cf:75:f6:36:aa:19:b1:8c:f4:50:5a:97:
                    c0:2a:25:08:b2:ec:f0:10:7d:a2:d4:3d:0c:3b:7a:
                    69:82:4c:d9:14:2c:39:07:01:f9:2c:e2:c1:7c:18:
                    d0:f4:2d:04:20:e6:db:21:2b:c7:2c:6e:6d:f9:97:
                    83:c0:8e:ea:6a:78:e4:73:c3:a3:a9:e5:e0:14:b4:
                    7c:5a:ec:d6:20:b7:48:6e:e7:ac:b7:b0:52:fe:9f:
                    98:9b:9c:54:ef:fa:c2:9a:b3:43:55:93:e3:5b:cb:
                    f2:ee:2e:d4:6b:8d:4e:3c:6e:7d:f8:8c:b2:c2:48:
                    b2:85:83:1a:38:fa:68:64:a4:bc:ac:52:48:1c:eb:
                    1e:c5:9d:d0:39:f8:f2:a6:0e:e5:8a:1f:2f:38:3b:
                    61:be:21:bd:8f:cf:b5:71:1f:12:8f:f9:96:f6:93:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:26:ED:31:B7:3D:EA:DB:B8:75:A7:E0:69:30:0A:90:10:49:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a84550-2a87-3e4e-90d1-2ac4e6cea899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.125.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:8e:08:a6:ff:6b:6d:ad:1a:7e:75:4e:cc:77:c7:8a:8e:
         3a:c5:d2:e2:ae:d4:ab:38:31:da:f1:15:c5:9d:8b:d7:83:4f:
         d3:f9:c7:73:10:7c:98:14:a0:64:ac:95:74:4d:bf:b8:5f:9e:
         83:1c:e3:be:fd:22:ff:6c:e3:8d:a6:6d:f3:bd:18:1a:68:6d:
         7e:1d:a1:f8:a9:35:08:05:70:93:97:d9:18:bf:7a:25:64:3e:
         27:fa:97:a7:31:c8:f7:3f:52:7e:0c:14:eb:22:ac:cf:05:0e:
         23:94:4f:87:e9:56:7f:82:b7:d2:06:ca:75:d8:ae:00:82:5c:
         cc:2e:5f:c3:72:df:1a:91:56:15:73:b7:ce:5d:1f:1e:12:d1:
         ff:2c:06:db:eb:2e:be:cb:cf:7f:e1:ef:a1:73:67:bc:46:2f:
         17:f0:40:3a:ca:05:9b:ec:55:22:e2:f4:47:ed:66:d3:a5:53:
         68:07:25:41:8a:bd:49:5e:4d:81:4b:b2:61:39:29:0f:0b:8c:
         ac:28:43:e9:e3:2a:74:02:57:d6:f1:e8:31:c9:c0:d4:9b:d5:
         7b:cc:40:da:f6:b0:02:41:c3:ea:9e:7f:22:9e:91:da:01:3c:
         4b:c5:d6:98:cd:1f:66:89:bb:44:8f:c9:ea:a5:4d:27:3f:c7:
         bc:98:13:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:26 2026 by rpki-client