Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0aee32e1-5153-3895-a15d-e6449dd52052.roa
File:                     0aee32e1-5153-3895-a15d-e6449dd52052.roa (raw, json)
Hash identifier:          k1NqsNMUkaRVx9j2fJkJscBFNRjk+v2MsGx78z8MmyE=
Subject key identifier:   C4:98:36:B9:BA:0D:FD:13:1E:A4:84:88:40:C5:9E:AE:52:70:EC:F2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D82F8DF1E5378FFBAA3911D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0aee32e1-5153-3895-a15d-e6449dd52052.roa
Signing time:             Wed 15 Apr 2026 05:58:06 +0000
ROA not before:           Wed 15 Apr 2026 05:58:06 +0000
ROA not after:            Tue 14 Jul 2026 05:58:06 +0000
asID:                     22773
IP address blocks:        24.248.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:82:f8:df:1e:53:78:ff:ba:a3:91:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 15 05:58:06 2026 GMT
            Not After : Jul 14 05:58:06 2026 GMT
        Subject: CN=ae4270fa-78ae-4ed3-a4be-0a4daca1b9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:3f:90:06:35:8d:ac:4f:b8:4a:d0:3e:09:
                    a5:68:1f:de:64:53:ce:80:03:6c:34:44:7d:04:7d:
                    7b:37:a8:8e:da:02:58:d8:f0:5d:42:32:7a:8f:1b:
                    68:62:57:90:3a:91:b9:13:20:7b:13:15:1c:eb:6a:
                    d3:c5:1e:22:97:d1:e9:b2:63:f9:7d:95:7f:7d:f7:
                    02:be:da:d9:c1:af:03:6a:f0:02:bf:5f:54:30:82:
                    3c:70:bb:83:8f:ff:b8:d6:5c:2c:08:96:9b:07:f5:
                    d1:83:97:7c:09:0e:d8:c1:20:e2:46:0f:a3:fe:61:
                    d1:a8:68:cd:da:73:94:70:5b:0f:2d:35:39:f7:dc:
                    ec:24:b1:c6:23:6b:80:60:03:9d:fa:f4:c0:b7:50:
                    7c:36:58:60:58:08:b5:39:48:e1:1d:d2:15:70:e9:
                    04:57:b2:e6:d1:64:0b:d1:e3:4b:9f:18:f3:8b:55:
                    57:9e:cd:13:54:25:f7:3b:2b:92:e1:1f:53:bb:98:
                    16:8f:99:52:37:1b:5c:24:4c:b6:04:20:17:81:fe:
                    1e:b6:65:81:1d:9c:6b:ed:0a:7f:c7:c6:cb:c9:fd:
                    cd:57:01:c4:96:77:79:58:f0:a2:36:52:e7:92:83:
                    90:9b:0e:2f:5a:e0:98:e9:da:de:1c:6d:e1:e5:27:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:98:36:B9:BA:0D:FD:13:1E:A4:84:88:40:C5:9E:AE:52:70:EC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0aee32e1-5153-3895-a15d-e6449dd52052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.248.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:e6:bb:4e:a5:71:d0:4e:2a:e9:25:ad:1d:58:f2:25:a7:
         e4:b3:fc:ce:2d:18:1f:69:16:5a:95:24:4b:48:81:c5:22:c3:
         0d:65:31:b1:d4:ce:9f:0e:a1:36:a1:14:e6:15:5c:74:87:a5:
         46:bd:50:0a:89:07:ac:99:98:62:61:c7:f9:51:2f:b2:dd:ee:
         2f:fe:cb:6a:a2:5f:6c:4c:52:36:9a:84:72:4a:bd:49:80:06:
         d5:b6:37:31:1e:97:19:1d:06:c0:75:4f:48:b9:61:2e:b2:e4:
         88:f7:7d:12:80:33:6c:d2:90:b4:00:c7:ed:82:5b:5d:73:75:
         f4:f2:37:89:c4:50:28:28:43:92:e9:de:86:62:8d:ea:70:28:
         75:e3:7a:5b:19:56:d2:7c:82:fc:ec:1c:c4:99:da:da:55:31:
         82:f5:d8:50:b7:fb:17:2a:61:53:10:a2:de:78:7c:bc:6f:d1:
         f1:91:c3:dc:3e:fe:aa:be:43:37:e7:3f:75:f5:ed:4c:f8:40:
         65:14:35:31:a5:1b:70:c1:ec:0b:fd:2e:d2:aa:92:f5:67:4f:
         2f:11:11:a2:a8:1e:3a:d1:71:e6:62:f6:aa:2a:94:77:51:ab:
         2c:8d:fb:88:11:6a:1b:93:12:8f:11:b5:5b:63:f1:c2:f0:79:
         22:3a:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:55:14 2026 by rpki-client