Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa
File:                     95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa (raw, json)
Hash identifier:          cDt1/jFa3taJC6uE4zquob31/dxiYvuWQoi1Lp+c12s=
Subject key identifier:   0F:05:43:3A:91:E6:FA:4E:DB:2F:74:1F:4C:E9:4F:4A:A6:23:DB:E8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EAFE6F6050CBE3ABC024D3340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     12271
IP address blocks:        24.90.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f6:05:0c:be:3a:bc:02:4d:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=7a348051-76ee-437a-9977-d6086830c5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:88:42:80:58:cb:06:07:7a:e3:7b:46:91:
                    74:59:4a:2f:ac:83:02:3e:bb:b8:d7:64:f6:2f:d3:
                    76:0d:08:3a:fa:0d:66:60:3d:d5:32:7c:42:f6:f4:
                    c1:40:d4:0d:8c:ac:d3:96:82:d6:f9:c1:6c:81:da:
                    4d:59:1f:ca:67:5c:34:0d:36:f2:3b:ce:ba:c3:19:
                    76:d3:c2:34:0c:81:19:30:91:99:5b:ba:19:8b:66:
                    d7:e8:e1:b7:b4:18:2f:f2:c6:ef:52:0e:0c:23:cc:
                    ac:d3:7a:96:c2:d4:c4:5c:00:c0:c0:33:3f:fb:58:
                    2f:cf:38:1c:10:b0:85:98:62:c3:5c:d3:a1:10:eb:
                    26:28:9e:d1:58:af:d1:fe:1b:57:ea:38:67:00:56:
                    59:cb:2c:d2:6f:4a:cb:19:09:d4:ad:3c:24:21:2b:
                    a2:d6:14:ab:3d:e4:27:5a:b0:ec:7a:73:2b:ec:aa:
                    83:1c:3e:ac:e7:b6:af:84:2f:ea:37:9f:4e:6b:fd:
                    ca:e8:be:eb:2a:d8:b4:fd:7f:75:de:4d:47:e8:4b:
                    72:e4:7a:ca:8a:24:2e:dc:ee:2b:5f:7c:dd:b0:e9:
                    3a:41:4b:e5:cf:db:cc:80:71:d6:c9:33:84:86:bb:
                    04:1c:48:86:04:8b:e9:04:40:54:b2:87:d9:09:ec:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:43:3A:91:E6:FA:4E:DB:2F:74:1F:4C:E9:4F:4A:A6:23:DB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e4:70:9a:88:f9:50:c2:b6:53:f0:26:ee:1a:10:41:1d:b9:
         5c:c5:70:3c:a9:88:3f:4e:fe:68:75:4e:7d:c0:ff:ab:50:54:
         9b:b2:65:a8:2c:7b:25:bd:30:b3:3d:82:32:14:bf:d7:02:14:
         a7:94:35:90:83:15:f9:60:fe:2b:7e:f1:9e:38:71:95:f3:65:
         1e:6b:f4:f1:04:39:e0:a5:ae:36:a8:b2:f7:99:7e:e6:ec:81:
         58:9d:e1:05:8f:66:fd:4a:38:f0:f2:14:ad:8d:44:bb:70:d3:
         91:c1:1f:89:d9:c5:fe:69:ec:6b:fc:34:b5:21:24:67:ec:af:
         95:be:b1:ca:87:36:4e:de:07:d9:6a:c1:7d:43:d1:1c:d6:21:
         02:cd:21:e4:9a:e2:e7:db:17:31:99:a3:df:5b:c8:44:73:29:
         60:7e:55:97:d7:a3:4e:23:15:29:30:dd:c1:5f:b2:c6:8d:3c:
         96:f9:cb:88:a4:93:27:c6:ac:a0:88:21:66:89:7c:fe:50:f0:
         46:99:64:2c:b3:04:7e:d5:02:3c:ac:2f:46:d8:4d:61:de:c2:
         3d:0a:1a:2b:c8:65:5d:4e:37:f0:7b:3e:15:a2:01:95:31:03:
         30:3a:d6:fb:d0:81:fa:b1:39:87:13:59:23:e7:f3:65:e1:ca:
         e7:aa:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:58 2026 by rpki-client