Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ad05389-728b-3db8-a110-7a7288590c17.roa
File:                     7ad05389-728b-3db8-a110-7a7288590c17.roa (raw, json)
Hash identifier:          QGTa49d3aY766v9i2pfx7fcYp6963xB+tQqIZoFPrcU=
Subject key identifier:   67:D6:F9:D7:4B:7F:1B:63:64:32:C7:EA:F1:7B:53:1F:2B:51:0F:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36007B44E7A8633EFFA2A2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ad05389-728b-3db8-a110-7a7288590c17.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        24.34.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:7b:44:e7:a8:63:3e:ff:a2:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=d77ae76c-ba42-4e78-b149-491b0cffd1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:11:dd:a7:f0:0f:4e:3d:09:ff:2c:c2:ac:
                    98:e2:b1:6a:b8:71:3c:c7:71:98:5d:f2:14:dc:b0:
                    32:45:07:6c:4e:c5:eb:1a:aa:84:dc:c2:99:71:f5:
                    30:34:c5:9a:e2:06:1d:5c:19:49:15:a3:02:32:70:
                    35:4f:56:e3:5e:b3:f2:61:94:1b:1a:f0:0b:e6:26:
                    bd:6d:f7:a6:0c:6e:c7:4a:89:c9:0b:91:68:1a:ed:
                    b1:1b:4d:f5:3a:ec:70:1c:c1:69:1d:d1:f8:f2:d2:
                    e4:f6:50:ce:18:eb:f2:91:1e:b2:0f:a2:9b:47:36:
                    62:59:87:90:bb:8a:1f:fc:e5:69:09:47:3c:4f:2b:
                    2c:fd:6e:e7:fa:10:21:af:56:74:bf:be:b1:7c:7e:
                    fa:88:b4:3d:6e:e2:bd:9f:9d:ff:01:2c:af:ca:71:
                    97:1c:8c:d5:d0:bd:04:91:33:5d:32:a4:fa:70:34:
                    9f:23:86:19:e4:42:d8:29:21:f3:d8:09:59:c0:92:
                    ba:d0:e3:87:fd:c6:e2:f0:e1:2b:46:af:a9:23:df:
                    b3:00:af:61:22:a3:b2:d5:0e:5f:22:ae:2e:31:14:
                    14:cb:6a:4c:2d:7f:1b:73:a8:df:59:63:40:68:79:
                    68:cc:11:2e:67:de:ca:a1:d6:8e:ce:91:be:f9:47:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D6:F9:D7:4B:7F:1B:63:64:32:C7:EA:F1:7B:53:1F:2B:51:0F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ad05389-728b-3db8-a110-7a7288590c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:18:c9:e2:87:fb:c7:19:88:bd:eb:0a:a0:92:de:97:d6:
         2b:db:79:1d:1d:50:03:24:b2:2c:29:6f:5e:dc:ca:06:a9:da:
         84:0e:df:10:36:0b:21:dd:a5:27:f4:5f:d0:4f:2c:8e:db:5a:
         f3:31:65:d4:64:0b:77:9c:cd:e7:d4:97:15:18:54:6f:a7:6f:
         82:92:05:7f:4a:1b:65:5a:ef:23:b4:7c:69:c9:e6:45:68:27:
         e6:12:da:06:95:a0:ca:2a:bd:18:0e:4a:93:d6:10:f5:37:6a:
         7b:39:19:e4:69:9a:ea:8a:e4:64:65:ca:c0:ed:c3:16:54:cf:
         3f:b6:96:b8:57:f8:3f:0e:70:ec:0d:b7:b9:0e:93:db:68:8b:
         17:03:29:ab:03:2c:1c:ba:64:f6:75:a9:39:bc:e6:b9:aa:ed:
         c2:88:7a:1a:d5:fa:58:97:65:93:68:a3:4b:ad:1f:f2:ca:6b:
         f7:fc:c6:e4:0b:2d:2a:06:7b:11:b5:3c:f9:4a:8b:37:fa:d5:
         3b:e4:22:6d:58:00:12:fc:3f:57:a0:55:6a:ed:15:66:4d:04:
         07:31:bf:36:9f:6c:99:3a:5c:ff:64:01:45:03:86:ed:8d:f3:
         da:ce:71:5e:98:2b:b8:74:c8:34:09:9a:ee:26:48:9a:5a:28:
         6d:82:14:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:54 2026 by rpki-client