Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa
File:                     875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa (raw, json)
Hash identifier:          2QePGzpc+5+TEOz3vbQCEj2SmQ4fwmHPrhVlFH7igYQ=
Subject key identifier:   90:85:50:20:C0:75:E2:BA:96:88:E4:21:CB:D7:A3:E6:78:A2:C3:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF553EAF02EB1D55796740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        24.147.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:55:3e:af:02:eb:1d:55:79:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=fd44bd5e-c0ef-4933-92aa-d0835f4abe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:2c:08:a8:a6:69:16:ba:e2:26:e8:b8:9f:
                    c7:8f:1f:92:fc:59:b5:e8:ec:9b:4c:c3:62:e4:2a:
                    7b:0c:4e:aa:eb:ea:56:79:82:47:7b:7a:f5:b1:65:
                    d9:30:fe:5e:42:a9:ff:75:62:03:25:47:eb:6d:86:
                    4a:9a:a8:d1:ac:c3:28:c1:a5:8f:79:76:f1:d0:a4:
                    b4:21:07:dc:d1:7a:0a:00:c0:be:4f:55:b1:59:af:
                    d2:dd:7f:99:b1:80:f5:eb:ea:89:11:63:9a:38:83:
                    bd:f1:83:26:70:6d:bc:f3:6e:30:a0:fc:36:29:9e:
                    af:21:10:f2:08:8e:1b:43:e3:fc:da:7d:26:8b:6c:
                    8e:f9:89:9e:7e:0a:f5:e0:33:6b:09:36:8f:9c:bd:
                    03:42:59:47:3b:70:44:49:29:91:3f:e4:16:db:66:
                    ef:2e:c3:90:de:0d:09:48:c1:46:f7:f5:1d:a6:ca:
                    f4:48:6c:d1:7e:cc:66:e5:a4:0c:5b:5a:5f:3c:93:
                    e2:2c:e9:da:98:e8:b4:73:58:fb:f0:fc:55:03:f8:
                    4f:be:e8:ad:55:4c:54:b2:43:fc:b8:4d:25:74:fe:
                    9f:94:8f:88:31:76:a3:72:db:2d:f8:c0:d7:4d:a2:
                    ec:14:d1:cb:73:17:75:76:25:d0:66:37:bc:0a:ff:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:85:50:20:C0:75:E2:BA:96:88:E4:21:CB:D7:A3:E6:78:A2:C3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:fb:fc:db:9e:6c:c2:80:68:ca:09:f2:0e:74:a7:a1:3f:
         05:fe:f8:4d:25:79:cc:c9:68:f5:5b:76:fd:62:14:b7:5e:62:
         42:8e:d3:f0:88:e5:9e:ee:d5:43:4d:0c:5d:b9:b9:7a:ad:83:
         f3:35:0a:d5:db:7b:a2:b9:b6:02:18:e6:7b:49:23:fd:ef:48:
         aa:0e:0f:6b:d4:b4:ef:1f:65:ea:4a:d1:db:60:3b:42:12:27:
         fb:ec:6b:9b:e5:db:d5:07:eb:cd:a4:2d:5b:1c:62:c6:ef:0e:
         46:29:02:be:41:cd:11:04:9d:19:d8:58:46:be:0a:44:e9:07:
         9b:c2:12:f6:ea:43:79:01:b1:bb:ea:3b:c8:86:55:0d:32:55:
         e9:17:50:15:64:ce:3c:ff:44:3a:6e:60:67:24:65:30:51:ed:
         02:b7:dc:14:cd:3b:8e:50:51:95:f4:0a:63:fd:e9:44:8a:10:
         fa:c1:87:8f:fa:ea:ad:5d:d3:c2:b2:6e:95:be:b3:19:a6:2c:
         54:19:2e:38:ac:98:2c:2e:71:e9:9c:b1:51:91:c5:cc:cb:4f:
         de:65:ad:5f:5f:24:ee:58:c6:48:f5:ce:27:73:69:04:7b:83:
         5f:4c:a4:f8:b5:ac:6f:e4:6c:be:fe:4f:c2:c8:65:01:2c:27:
         84:07:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:00 2026 by rpki-client