Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07abc33b-3f2c-36dc-b465-d8e92e85687d.roa
File:                     07abc33b-3f2c-36dc-b465-d8e92e85687d.roa (raw, json)
Hash identifier:          ntLsgDBbU5awwEdxjWR1qU7lZr/UZTAkD0QEfcDSHhs=
Subject key identifier:   E3:9F:3A:D1:5D:92:17:B9:68:AF:6A:64:B3:D2:F5:C3:B2:2E:02:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81000A5C8382A2616F189900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07abc33b-3f2c-36dc-b465-d8e92e85687d.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        24.99.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:0a:5c:83:82:a2:61:6f:18:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=0460ab92-7633-445d-8cde-a32cf1286efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:31:94:5c:8e:fc:24:4e:1f:3c:cb:2f:88:
                    e8:86:4d:f1:c5:73:0c:a5:a4:15:04:66:bd:df:9e:
                    ff:21:5b:81:5c:4b:18:6a:15:f0:38:ac:84:c6:94:
                    ca:97:55:85:a0:bf:87:45:db:8b:fc:a2:1b:b9:95:
                    19:57:fe:30:80:0d:f7:93:51:ab:21:70:83:c4:ae:
                    0b:c0:ea:f0:f6:c1:6f:20:99:d7:35:c9:8e:8f:2e:
                    b5:69:95:c6:ba:15:3c:58:18:46:b4:c9:2d:ef:74:
                    22:fc:20:8f:9e:20:2b:4c:67:00:a1:67:e2:bc:ea:
                    1b:21:39:6f:97:36:1f:d5:d9:f3:f3:be:c8:c7:37:
                    53:5c:ef:f6:5c:26:cd:e2:18:fb:3d:e1:70:40:30:
                    44:2c:51:d7:28:65:5e:fb:67:d3:1e:4e:1c:a8:5d:
                    24:95:ea:22:e3:56:b0:0f:3a:bf:f1:ca:43:c8:a9:
                    9a:dc:ca:9d:37:7a:07:17:0e:21:6d:80:9c:15:b1:
                    39:69:ef:68:57:75:9d:a9:b3:71:64:75:bb:2c:ba:
                    58:04:05:f9:8d:3e:dc:e1:63:45:97:f8:b5:1e:2d:
                    ff:bb:ec:ae:a9:14:e0:7b:2c:12:46:2d:5e:13:16:
                    88:1e:8a:f1:06:53:4e:f6:cb:9c:04:ee:19:13:db:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:3A:D1:5D:92:17:B9:68:AF:6A:64:B3:D2:F5:C3:B2:2E:02:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07abc33b-3f2c-36dc-b465-d8e92e85687d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:d0:9c:34:34:af:3d:8f:2e:d3:03:29:3a:d1:fb:1e:28:9e:
         08:23:00:39:d6:32:2e:db:2e:5a:3d:e2:7e:14:6e:72:8a:f0:
         20:d2:ea:05:7a:d8:f5:a7:c4:04:8c:5f:ec:9e:85:53:0e:5a:
         a9:4d:0a:7d:0d:02:2e:fa:6b:8b:e8:3a:c2:a3:6a:0d:e5:0f:
         89:db:bd:12:6f:f4:d5:9f:20:3f:6d:81:3a:2b:64:60:02:18:
         68:39:22:00:10:c1:68:b2:6b:4e:b0:93:2b:ad:7c:28:e4:4e:
         dd:66:22:06:7f:ad:a1:fe:ec:34:b1:0e:54:85:2a:15:b2:d5:
         13:74:ba:8c:f4:77:92:83:ea:00:3f:53:47:27:09:83:85:ff:
         fb:2a:12:65:1a:b1:c1:c5:a7:f5:ab:8a:93:8d:03:75:b2:3a:
         ba:24:f3:ea:4a:b7:1e:4f:76:bb:fd:ea:84:35:58:bc:56:7b:
         bb:38:01:51:fc:f7:13:01:ff:8a:f2:7d:fa:b2:43:93:20:a6:
         17:8a:be:6e:e4:35:aa:ae:3b:67:a4:67:34:0f:4d:1f:7c:00:
         a6:d0:de:d9:e1:38:73:ef:87:ab:c9:64:9b:8c:94:88:89:34:
         a5:19:8b:2a:b3:73:51:e0:f3:13:26:52:b2:ab:28:c9:26:0c:
         c9:cf:66:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAApcg4KiYW8YmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
MDQ2MGFiOTItNzYzMy00NDVkLThjZGUtYTMyY2YxMjg2ZWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWcxlFyO/CROHzzLL4johk3xxXMMpaQVBGa9
357/IVuBXEsYahXwOKyExpTKl1WFoL+HRduL/KIbuZUZV/4wgA33k1GrIXCDxK4L
wOrw9sFvIJnXNcmOjy61aZXGuhU8WBhGtMkt73Qi/CCPniArTGcAoWfivOobITlv
lzYf1dnz877IxzdTXO/2XCbN4hj7PeFwQDBELFHXKGVe+2fTHk4cqF0kleoi41aw
Dzq/8cpDyKma3MqdN3oHFw4hbYCcFbE5ae9oV3WdqbNxZHW7LLpYBAX5jT7c4WNF
l/i1Hi3/u+yuqRTgeywSRi1eExaIHorxBlNO9sucBO4ZE9tcCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOfOtFdkhe5aK9qZLPS9cOyLgJjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDdhYmMzM2ItM2YyYy0z
NmRjLWI0NjUtZDhlOTJlODU2ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGPKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMvQnDQ0rz2PLtMDKTrR+x4onggjADnWMi7bLlo94n4UbnKK8CDS6gV6
2PWnxASMX+yehVMOWqlNCn0NAi76a4voOsKjag3lD4nbvRJv9NWfID9tgTorZGAC
GGg5IgAQwWiya06wkyutfCjkTt1mIgZ/raH+7DSxDlSFKhWy1RN0uoz0d5KD6gA/
U0cnCYOF//sqEmUascHFp/WripONA3WyOrok8+pKtx5Pdrv96oQ1WLxWe7s4AVH8
9xMB/4ryffqyQ5MgpheKvm7kNaquO2ekZzQPTR98AKbQ3tnhOHPvh6vJZJuMlIiJ
NKUZiyqzc1Hg8xMmUrKrKMkmDMnPZv4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:52 2026 by rpki-client