Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8d37ce-99f4-3cc5-bc53-7a8a09f58c99.roa
File:                     2a8d37ce-99f4-3cc5-bc53-7a8a09f58c99.roa (raw, json)
Hash identifier:          /zJBT5ia3amU/1Z3kkvkXoBHptaeHpZTaDGpzwTG2mU=
Subject key identifier:   6C:70:C5:30:ED:9C:ED:EF:88:AC:47:2B:9A:3F:59:62:75:70:6A:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57ECF8A798A69C895F0B20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8d37ce-99f4-3cc5-bc53-7a8a09f58c99.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        24.1.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:ec:f8:a7:98:a6:9c:89:5f:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4db5b054-35a6-4bab-ab91-df1eafe63a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:6a:54:79:8a:ef:ba:60:ce:19:37:c7:4a:
                    64:77:a0:69:96:65:3b:e3:61:b4:0e:f3:f0:98:6a:
                    48:cd:7a:3b:ac:4e:28:2a:7c:09:b7:89:15:93:3e:
                    06:c2:65:0d:fa:06:ed:f9:93:c8:39:93:80:09:0d:
                    c5:6c:ee:76:71:73:89:d2:78:01:12:79:26:0a:d0:
                    8c:a7:55:1b:01:1c:a5:3f:bd:fc:3c:df:d7:58:51:
                    7d:75:9c:18:9b:d6:e7:fb:21:17:86:47:6f:b4:ce:
                    39:1a:81:f9:4d:5d:44:83:16:c0:89:98:b8:6a:98:
                    a4:54:21:f2:03:39:bc:45:1b:2f:0f:2a:f3:4d:46:
                    ea:ce:b6:b0:f7:e0:4d:d2:81:17:54:ce:d8:a6:86:
                    a6:36:61:9c:d6:1b:5e:cb:b4:97:51:67:24:86:20:
                    5f:ce:a1:65:81:b7:0a:50:e8:8d:e6:9b:59:e8:f2:
                    aa:70:2b:b2:bb:66:78:86:64:e1:ac:87:0e:8a:8b:
                    3c:a2:07:e1:90:8c:9e:db:4a:ce:6d:be:2e:bb:16:
                    22:17:a4:a2:9d:f1:32:6d:ab:a7:7c:dc:1c:a2:20:
                    dd:6e:60:38:5e:07:3c:3b:75:1e:93:44:6e:53:07:
                    53:d7:ff:e4:b3:21:84:9b:b5:46:b0:c0:f5:e3:dd:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:70:C5:30:ED:9C:ED:EF:88:AC:47:2B:9A:3F:59:62:75:70:6A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8d37ce-99f4-3cc5-bc53-7a8a09f58c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:59:01:12:67:41:95:e3:fa:c8:de:6e:0f:e4:13:ad:06:09:
         bc:71:94:89:01:47:7b:93:f9:4e:21:1f:fb:d7:68:6d:20:a0:
         a1:87:37:62:22:24:83:0c:df:0b:9b:ee:2a:94:11:e7:f1:db:
         f3:ab:bd:63:99:b5:4b:77:6a:a8:b9:82:e2:a1:18:4c:88:55:
         5f:96:c1:27:04:b3:95:42:36:ec:3f:a7:44:2a:ea:ef:95:36:
         f5:29:32:ac:c6:d5:88:ad:e6:f5:bc:8c:18:b3:f0:4b:05:58:
         09:18:bf:a0:f0:67:a7:8c:3e:d3:f2:ac:eb:eb:90:2c:fa:cd:
         8d:b7:fa:88:e1:d3:26:73:16:32:bd:87:09:86:03:f8:c0:af:
         df:fc:28:f5:01:80:25:2d:75:6b:d0:f3:f1:6a:9f:7c:6d:7e:
         5b:ad:ee:85:9f:9d:3e:ed:b2:1f:04:db:b8:7d:4e:27:39:42:
         c0:45:11:ca:88:47:4c:28:07:fb:7f:6e:ad:1b:a5:e4:39:81:
         3e:94:39:6d:19:83:0f:bc:9b:10:42:fa:65:ec:92:90:d7:6d:
         2f:6b:7f:9a:5e:77:de:83:f2:ee:0b:a1:f1:fd:b0:6c:6d:df:
         7e:5b:f4:aa:fe:a8:dd:23:a9:cf:65:bd:23:f2:95:41:07:f7:
         6e:1f:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:27:51 2026 by rpki-client