Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293e3e0b-c3ed-3f3d-a349-e29fbfe85670.roa
File:                     293e3e0b-c3ed-3f3d-a349-e29fbfe85670.roa (raw, json)
Hash identifier:          J0iIXMGu0rcSlCEaavUPtoqT5qIy7xd4fWuL/4/oTig=
Subject key identifier:   46:90:3E:A9:EC:10:B8:48:FB:AF:23:0C:AA:7E:F6:49:F0:9D:CC:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584FB3A816C674A4375599044080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293e3e0b-c3ed-3f3d-a349-e29fbfe85670.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     33659
IP address blocks:        24.0.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a8:16:c6:74:a4:37:55:99:04:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=6f3bc88a-22e0-4bac-bf74-f04b7ab35f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:7a:dd:ed:99:6d:21:35:62:f1:0f:24:49:
                    86:72:81:9a:44:c8:e4:04:57:c9:4d:48:24:0e:eb:
                    80:ca:c9:89:d0:72:dc:2d:a4:b5:f2:92:05:22:12:
                    2a:6f:28:57:e6:f6:da:fc:1f:1a:f5:99:26:db:fc:
                    20:4b:2b:03:68:91:d0:61:1b:26:ac:6e:ba:b1:6a:
                    fa:36:79:87:c8:8a:aa:a6:99:69:8b:c3:c9:42:c7:
                    25:69:62:67:db:c7:3f:d8:12:fc:5d:07:2f:a5:7b:
                    f3:33:91:d8:1d:b4:87:c9:3f:ac:89:be:c9:ff:ec:
                    99:76:72:24:e1:46:98:c4:9b:50:8a:1b:2f:ad:e5:
                    98:48:5f:c0:26:6d:ae:4a:f7:a1:93:24:66:21:aa:
                    a5:50:cd:b4:03:3c:29:74:6b:6e:f3:41:98:29:03:
                    29:b0:0f:21:48:3c:88:c1:2b:92:a5:19:a1:fe:da:
                    79:c3:40:ed:3c:87:da:93:75:50:b5:c7:3b:7c:96:
                    c2:fe:25:b2:25:52:7e:57:41:f6:f0:42:46:4b:c6:
                    64:22:f6:60:7d:0c:1d:ce:37:8a:b1:89:d0:b8:78:
                    9b:ae:09:28:9e:b4:15:69:6d:5e:6c:75:d1:18:f4:
                    44:62:f7:75:7c:11:7a:24:d6:e5:03:c8:26:7c:22:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:3E:A9:EC:10:B8:48:FB:AF:23:0C:AA:7E:F6:49:F0:9D:CC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/293e3e0b-c3ed-3f3d-a349-e29fbfe85670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:5a:d7:6c:eb:d6:60:8f:40:df:29:9a:3a:cb:3c:a9:fe:
         97:7c:b5:55:a5:12:e1:1a:53:30:8f:f0:5c:b1:ed:ce:7f:7a:
         80:fb:b5:61:b3:b5:a6:50:c8:4e:ed:fa:d8:81:56:55:4e:03:
         12:71:65:01:fc:b6:62:4f:07:0c:4a:61:48:aa:8e:0d:ab:f6:
         b9:f2:dc:d0:82:c1:80:7d:2e:be:e3:ce:a5:d1:a1:b1:0e:a5:
         fc:34:5d:41:17:47:27:b3:93:2c:47:00:cc:90:59:0a:73:67:
         20:c1:a4:8f:7f:1e:27:a2:36:ee:b5:5d:d9:c8:f1:a3:70:94:
         3d:cd:bb:42:76:41:8d:d7:e0:4b:1a:72:6d:47:3a:9b:3d:96:
         fa:c3:e5:1b:63:3d:5e:55:ea:78:d0:ab:da:ac:82:c4:2c:c0:
         a7:a4:d7:6c:0f:8a:d5:42:48:4f:85:f4:d0:fa:27:9d:d4:e0:
         df:de:13:66:38:a4:b5:71:ad:7f:32:22:4d:60:b3:76:14:21:
         05:b7:f5:a2:f4:ad:4f:03:cc:72:74:f5:78:04:2d:39:f0:60:
         12:87:31:c6:36:77:40:62:ef:c8:fc:54:67:e8:2c:19:b6:8e:
         58:9b:07:47:a9:59:1c:16:b0:59:6c:b1:63:d4:8f:dd:0a:6c:
         30:57:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:20:45 2026 by rpki-client