Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2e5390-e0eb-38de-b560-4d692f313aa5.roa
File:                     0f2e5390-e0eb-38de-b560-4d692f313aa5.roa (raw, json)
Hash identifier:          7d7lJyhAyNU38/DoRM/MRtLk6TBTMta+1y5zPYyTH5g=
Subject key identifier:   06:97:50:00:88:16:24:06:2A:87:20:17:87:4C:9F:00:3B:2E:69:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE83A3DBB343F552940CB40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2e5390-e0eb-38de-b560-4d692f313aa5.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        24.6.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:3a:3d:bb:34:3f:55:29:40:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=f7f9b002-36c0-485e-9553-88b432fdfd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1a:8d:d5:7b:7e:fb:68:49:d5:20:4e:e5:9f:
                    12:df:a3:8f:6e:5c:6d:66:00:e7:6a:a2:83:ab:c6:
                    4b:35:cd:83:f3:41:65:5e:5a:df:84:ef:82:65:ef:
                    d8:a3:41:d7:6b:a0:92:8f:f2:51:13:d2:4a:26:bf:
                    d7:04:d7:55:d0:47:c2:45:ee:98:ca:cd:72:ab:5f:
                    1e:1c:36:12:82:55:90:12:58:87:67:a4:1b:7e:95:
                    03:f4:81:96:56:41:71:03:68:31:19:7d:42:b9:56:
                    d6:25:0c:d8:2c:43:33:cc:f1:b0:5c:2f:3a:d6:8f:
                    24:95:1a:e9:0c:9e:79:5a:10:48:bd:6f:78:d5:38:
                    8d:b8:ce:d2:62:0d:bc:da:aa:5a:cc:4b:0e:ac:7f:
                    9a:38:8c:fb:9e:86:d2:29:bd:12:f9:ba:3a:cd:27:
                    ad:2b:12:b9:2c:e2:00:4c:5a:76:86:a8:62:ce:93:
                    a1:97:e0:80:23:1b:f5:a4:27:67:30:f0:5d:7b:45:
                    e1:60:2a:51:45:c2:0d:85:b2:38:ff:31:56:86:62:
                    22:2e:43:7a:1e:1e:da:0a:f8:15:82:c8:17:83:9b:
                    37:59:4e:72:fa:26:29:33:2f:f3:60:d7:24:ed:9d:
                    50:89:2d:72:74:ca:e6:e6:f7:59:b8:55:cf:f4:ab:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:50:00:88:16:24:06:2A:87:20:17:87:4C:9F:00:3B:2E:69:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2e5390-e0eb-38de-b560-4d692f313aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9b:24:04:e2:e9:05:7e:d5:38:07:d5:0b:ea:9e:d6:46:e8:
         28:df:96:76:f9:e4:e4:7f:21:61:ec:1f:ea:57:55:e4:c1:55:
         ab:7a:1a:8e:38:a9:f8:b8:82:02:c3:50:f6:c7:b8:2c:17:02:
         93:63:c6:9d:ef:ad:d5:25:4c:0a:d5:f6:9f:6a:a3:9e:8f:2a:
         84:96:7c:7c:52:3b:8a:e0:de:88:d8:bb:30:4c:c4:59:fe:b3:
         ff:62:85:55:30:36:03:82:3c:f2:ca:c7:eb:52:ed:88:25:9b:
         3a:d6:28:34:4e:da:5a:f5:01:2f:2b:d4:bd:ce:c0:08:e4:b5:
         d0:32:87:e0:02:f5:c5:e3:2f:11:7d:22:5f:a4:6e:aa:34:bb:
         49:1e:bf:24:ea:d4:c4:ac:8d:a6:92:72:2d:2e:aa:a4:29:9b:
         94:be:fd:cf:b6:e7:cf:08:1b:0d:ff:7d:19:8e:ea:40:61:7e:
         f5:72:e8:fd:d5:82:40:7c:c4:77:d1:4e:e0:fe:e1:17:e5:7e:
         2b:e4:ea:4d:e2:9e:15:b5:16:e6:35:d8:93:91:96:cc:1f:6a:
         4f:39:23:72:f8:5d:90:58:2b:32:e6:e8:a1:37:fb:8e:dc:bd:
         b9:1e:44:d7:a3:11:61:0e:14:bf:37:d6:58:92:25:27:a2:43:
         15:70:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:53 2026 by rpki-client