Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff930e39-55ff-3d97-a33b-6d69e623d24a.roa
File:                     ff930e39-55ff-3d97-a33b-6d69e623d24a.roa (raw, json)
Hash identifier:          AA5McqGXJ6UFO49y8826dVVAfJq/KfSTH0WxHBHaZD8=
Subject key identifier:   1B:4D:ED:6A:0F:A5:E5:FE:E7:E4:48:BF:95:62:C2:07:F0:CD:59:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF608F7481E3774AE9A2DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff930e39-55ff-3d97-a33b-6d69e623d24a.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        24.1.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:08:f7:48:1e:37:74:ae:9a:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=cd1ca949-d4ee-4fe2-9ec7-64eb7233a1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:53:63:5e:cf:0b:c8:5d:c9:3c:e7:32:9c:
                    47:21:70:ee:88:a0:11:32:f1:3b:b1:70:12:09:e3:
                    2f:45:a4:b9:4f:85:03:ed:10:4f:76:05:33:63:f2:
                    52:8c:bd:11:3a:f1:9f:65:12:17:6d:d8:b7:92:e3:
                    30:3c:16:5b:e2:ad:b1:b8:53:82:d4:af:4c:76:89:
                    a3:57:3f:21:82:fe:7e:7f:f5:93:8f:00:42:ee:1b:
                    c9:fd:b8:96:94:e1:8e:d9:4c:d8:8f:85:ae:6d:de:
                    07:77:53:95:55:1f:da:38:a1:7e:92:e0:ec:a4:a8:
                    c4:89:cc:4a:7f:0a:34:ba:a8:f4:1a:70:be:b9:71:
                    b3:f8:b0:29:0c:2f:db:e5:0d:b1:9a:59:f0:d6:13:
                    8c:76:42:39:0d:35:75:e6:01:00:d7:5d:f2:79:42:
                    93:b2:e1:cc:86:cf:d8:4a:d8:28:f9:6a:16:ab:ac:
                    68:62:8d:38:86:2f:1e:90:ff:ad:fa:a6:47:f6:56:
                    3d:ef:01:fd:99:5c:8f:4f:08:2f:8e:04:a6:1e:ca:
                    f2:a9:c2:0d:19:e9:53:48:6a:6b:ef:8b:1c:2c:59:
                    e1:8f:8e:99:1e:e6:54:f9:20:56:f9:43:8b:34:37:
                    61:cf:c8:7a:ac:3e:75:49:01:53:2c:06:71:85:d0:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:ED:6A:0F:A5:E5:FE:E7:E4:48:BF:95:62:C2:07:F0:CD:59:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff930e39-55ff-3d97-a33b-6d69e623d24a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:bc:fb:21:65:df:87:e1:65:49:74:5a:f8:f3:78:51:fa:69:
         5f:c0:9b:0b:72:15:78:90:42:01:77:8b:d4:bd:0c:7f:10:43:
         76:56:40:30:f1:13:9a:fe:ef:5e:be:18:8d:f4:82:81:b7:c0:
         df:9b:f7:a8:ed:4e:57:3d:85:b0:4a:d8:0c:f6:bb:1e:d9:e3:
         31:dd:16:b9:76:99:f2:e8:85:f4:00:6a:16:fc:87:3e:cc:ff:
         bb:50:1a:42:a4:e9:8c:90:2f:ad:ef:03:37:25:90:c6:d2:9d:
         50:e1:56:0a:49:08:8d:48:e0:d8:e9:c9:56:d6:ff:7e:ec:2a:
         0e:b7:82:68:96:59:48:11:f7:9c:49:01:eb:c0:e9:68:d4:34:
         d1:6d:e4:6a:a2:3c:1d:a1:e9:da:34:38:6e:86:25:c3:16:73:
         dc:87:a3:09:9b:36:9e:53:74:a7:34:bd:f1:95:dd:b2:b0:e3:
         21:36:98:76:0d:a8:22:6a:10:4e:1b:62:0b:3d:cd:8c:2c:bf:
         53:fb:24:16:f7:a7:10:1a:67:f5:70:b7:5c:6a:ff:97:19:c4:
         0e:af:e2:28:bf:00:50:bd:bc:b9:04:6c:8b:11:fe:73:16:dd:
         75:0d:d4:3d:e0:9e:c0:74:81:00:c7:1e:69:b2:dc:8f:8f:80:
         c6:30:b8:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9gj3SB43dK6aLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
Y2QxY2E5NDktZDRlZS00ZmUyLTllYzctNjRlYjcyMzNhMWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueNTY17PC8hdyTznMpxHIXDuiKARMvE7sXAS
CeMvRaS5T4UD7RBPdgUzY/JSjL0ROvGfZRIXbdi3kuMwPBZb4q2xuFOC1K9Mdomj
Vz8hgv5+f/WTjwBC7hvJ/biWlOGO2UzYj4Wubd4Hd1OVVR/aOKF+kuDspKjEicxK
fwo0uqj0GnC+uXGz+LApDC/b5Q2xmlnw1hOMdkI5DTV15gEA113yeUKTsuHMhs/Y
Stgo+WoWq6xoYo04hi8ekP+t+qZH9lY97wH9mVyPTwgvjgSmHsryqcINGelTSGpr
74scLFnhj46ZHuZU+SBW+UOLNDdhz8h6rD51SQFTLAZxhdBbrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtN7WoPpeX+5+RIv5ViwgfwzVlvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmY5MzBlMzktNTVmZi0z
ZDk3LWEzM2ItNmQ2OWU2MjNkMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD68+yFl34fhZUl0WvjzeFH6aV/AmwtyFXiQQgF3i9S9DH8QQ3ZWQDDx
E5r+716+GI30goG3wN+b96jtTlc9hbBK2Az2ux7Z4zHdFrl2mfLohfQAahb8hz7M
/7tQGkKk6YyQL63vAzclkMbSnVDhVgpJCI1I4NjpyVbW/37sKg63gmiWWUgR95xJ
AevA6WjUNNFt5GqiPB2h6do0OG6GJcMWc9yHowmbNp5TdKc0vfGV3bKw4yE2mHYN
qCJqEE4bYgs9zYwsv1P7JBb3pxAaZ/Vwt1xq/5cZxA6v4ii/AFC9vLkEbIsR/nMW
3XUN1D3gnsB0gQDHHmmy3I+PgMYwuKg=
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:10:44 2026 by rpki-client