Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1592fd41-ab38-31a2-b0e3-45bfad596a70.roa
File:                     1592fd41-ab38-31a2-b0e3-45bfad596a70.roa (raw, json)
Hash identifier:          V6hu1FH6E0JJnYYKxUeZFktlslJvRzSJ2a8AkjnNgc4=
Subject key identifier:   99:1E:D7:35:88:3A:35:BC:E6:58:F6:B9:25:45:53:D8:81:E5:A6:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF59D8AE5A46B8E1E7DA40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1592fd41-ab38-31a2-b0e3-45bfad596a70.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        24.34.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:59:d8:ae:5a:46:b8:e1:e7:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=683adc61-23d9-499d-942a-645c6937c4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:27:74:47:d9:7f:9a:49:1c:6d:7b:6d:62:
                    26:a0:46:cb:3d:88:33:57:fe:fd:86:07:0d:3f:f1:
                    a3:58:04:26:aa:18:e6:a3:bf:de:4f:92:e4:06:03:
                    f9:41:b4:4c:31:12:6e:3e:66:a9:98:e3:d7:af:3b:
                    cb:2d:75:1d:15:e0:e0:f0:c4:6b:2b:ac:b2:75:0d:
                    79:ef:26:75:ad:d3:bb:48:f9:4e:0a:91:25:da:9d:
                    a6:bc:06:5b:39:68:6d:af:d4:ab:f4:ce:c6:fb:18:
                    4f:ec:1c:a3:be:6f:de:29:44:59:f5:68:f0:a0:af:
                    9d:3a:0c:39:d3:c4:1c:ac:11:d4:fd:53:0f:7d:5d:
                    e5:77:5a:a8:c4:f6:8d:da:94:3f:c8:9f:b4:58:fc:
                    9b:ab:e2:c1:98:75:fe:06:9f:e4:30:e9:fd:62:39:
                    15:de:e7:e6:5d:8b:39:3b:00:51:28:c2:08:9c:64:
                    5d:7e:63:17:cd:9b:e7:cb:9c:a3:06:b7:b1:c4:dc:
                    c8:56:20:22:44:e5:6a:21:8e:05:19:f9:77:86:20:
                    6c:4f:ee:bd:1a:7f:96:dd:89:20:98:d5:3d:5a:5e:
                    5f:7a:d6:e6:1e:50:ed:40:5a:b5:e2:91:ba:07:7b:
                    41:68:08:4e:ad:ae:ed:6b:9e:f3:cf:85:b1:75:90:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1E:D7:35:88:3A:35:BC:E6:58:F6:B9:25:45:53:D8:81:E5:A6:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1592fd41-ab38-31a2-b0e3-45bfad596a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:bf:11:63:03:d4:a1:96:24:fa:cd:bf:bb:5a:80:67:23:31:
         db:49:27:d5:eb:4d:44:03:8a:9b:dc:73:73:f6:de:60:16:25:
         c7:cf:f2:7b:07:11:cd:45:4a:e1:e8:f9:a9:1c:26:1f:11:43:
         2a:64:a7:2c:8d:39:15:fe:cf:96:43:22:66:52:18:23:b3:a9:
         98:29:e7:d8:11:20:80:6c:c8:b2:5f:03:2b:55:af:cd:1e:75:
         41:e4:e2:03:c9:ca:fe:1b:86:7c:ac:2f:86:56:2e:42:57:ff:
         91:17:7f:bc:c2:d5:d1:c6:86:3f:6e:60:fe:9b:c5:5a:f1:ce:
         75:06:0f:e4:ed:a8:b5:da:3e:55:6f:4d:4d:d1:40:31:3e:55:
         4d:7e:da:88:7d:f6:d8:fb:a5:64:2e:0a:97:5e:99:db:7a:8d:
         f7:df:c7:bc:db:80:a0:54:15:77:12:95:c7:06:76:ba:bf:06:
         b5:07:84:de:03:43:dc:eb:cb:dc:83:28:f5:22:3f:2e:05:ba:
         34:50:98:57:d2:39:a2:d1:1e:0e:23:72:83:e4:87:d4:53:a9:
         43:ea:d5:19:84:ac:57:9a:67:88:fc:93:fd:8a:ea:20:7d:9a:
         75:c9:b4:ad:25:00:1a:9f:9c:fc:a6:86:b5:63:36:f3:b8:84:
         3a:40:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:01 2026 by rpki-client