Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/282dd669-c1fc-3630-97d1-cf4d1fde6a0f.roa
File:                     282dd669-c1fc-3630-97d1-cf4d1fde6a0f.roa (raw, json)
Hash identifier:          Mtt1sIvpjPyJPzw3dB6W40jfEbvtcqSMW6qvgETQWaY=
Subject key identifier:   B8:07:7C:F6:DC:0A:2A:19:5F:EB:26:07:91:CC:21:FA:A2:70:54:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CA06254870490553CE4D0AF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/282dd669-c1fc-3630-97d1-cf4d1fde6a0f.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     7725
IP address blocks:        24.99.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:62:54:87:04:90:55:3c:e4:d0:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=3d07589a-d536-49be-ba87-562bda7e9364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:fb:53:f9:c5:d7:f6:e6:d4:42:b7:91:35:
                    0d:dd:26:55:e7:c5:fb:ef:61:bb:6f:e1:42:68:1c:
                    94:b9:06:6b:e2:6c:ff:84:81:0c:8d:01:5b:51:cd:
                    08:cc:ae:ff:8c:39:2c:31:88:bb:96:a4:9e:9b:61:
                    7a:13:e3:00:a1:26:31:8f:32:e1:e0:09:b0:38:34:
                    51:b5:6b:f0:bf:5e:1f:45:39:95:26:85:c2:87:f1:
                    bf:9c:63:54:61:56:2d:6c:06:95:bb:ee:b8:ee:25:
                    f6:3f:c8:de:37:2b:1d:09:23:78:4f:6f:58:13:fe:
                    2d:db:06:6b:8f:7e:3d:6a:80:fa:59:ad:3d:47:47:
                    a1:3b:e6:0c:74:8f:b5:43:3e:22:db:11:89:8c:0f:
                    82:75:ad:98:59:6d:a7:38:ab:5a:11:b7:23:0e:f8:
                    fb:b1:71:66:a2:d3:f4:9f:3c:00:50:9a:4e:e7:d5:
                    d4:55:49:4f:26:97:a7:e1:a7:b7:fb:b6:a1:a7:b5:
                    68:40:a8:0e:24:c4:f4:bd:1f:9b:a8:aa:d8:87:67:
                    be:49:e8:b2:4e:45:ed:95:b0:55:bc:62:3c:b9:61:
                    ca:ab:9a:05:ff:e7:ad:31:33:ef:f0:88:60:59:46:
                    c3:a2:e4:f1:3e:ea:f8:57:df:a4:51:09:a3:1c:4f:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:7C:F6:DC:0A:2A:19:5F:EB:26:07:91:CC:21:FA:A2:70:54:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/282dd669-c1fc-3630-97d1-cf4d1fde6a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:0e:ff:c0:a9:c4:c9:74:c0:79:dc:6c:7a:dd:f9:0c:02:
         63:f3:e7:ea:ce:d7:99:a2:50:8b:ad:eb:af:27:2e:79:a1:03:
         58:c7:fd:f5:2d:77:0e:2b:59:bd:36:76:3e:a1:0d:e6:34:54:
         18:0c:93:a8:80:17:39:a7:ee:87:ef:fd:70:64:fc:e5:0b:95:
         c6:55:bf:94:73:5e:bd:90:d7:3d:1d:44:bc:ea:45:9e:f1:e2:
         b2:00:d8:21:3c:4c:bf:88:d6:f6:47:ca:82:a6:5b:24:43:27:
         be:9d:fb:26:ef:e4:83:4b:d3:9a:59:c1:3c:75:fb:51:8d:17:
         71:f3:76:f7:2b:fa:bd:ed:52:b8:f5:d9:0c:0d:2d:8a:9e:b6:
         f5:90:a4:04:61:f8:45:a9:40:d3:90:2a:30:38:6f:8d:54:5b:
         55:c8:ae:9e:32:22:bc:17:2d:3f:df:e1:67:20:be:1e:e4:38:
         19:18:f0:c6:2f:af:75:de:ab:84:f8:e3:ce:be:5e:68:19:87:
         0b:c2:90:73:8f:78:39:1d:44:c5:82:90:44:48:0f:eb:1e:95:
         15:78:08:53:dc:80:fa:ea:41:39:7f:43:54:73:1f:ca:ea:fa:
         78:c7:ee:24:e8:c5:71:2b:fc:ff:6d:b7:3a:f5:6c:6e:83:23:
         84:e3:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:40:14 2026 by rpki-client