Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33fad9bd-bb5a-388d-822b-e7b802233f81.roa
File:                     33fad9bd-bb5a-388d-822b-e7b802233f81.roa (raw, json)
Hash identifier:          8xxcsVjKO5T1chR+S8UlrtjZRCO8bhjvzjoLtx9hj70=
Subject key identifier:   B3:BA:8E:97:B1:66:45:88:F2:93:1C:47:18:F3:9B:89:D3:7D:DD:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81004378EFA0B3512031A340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33fad9bd-bb5a-388d-822b-e7b802233f81.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7015
IP address blocks:        24.91.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:43:78:ef:a0:b3:51:20:31:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=6dc276c3-09e1-4dcb-93e3-1e2aa8106ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:57:48:68:73:5b:c9:d8:b8:8c:08:9a:99:5b:
                    53:62:f2:0a:be:aa:38:90:b7:d5:27:ba:ed:d7:97:
                    27:fe:1e:d2:ce:d8:bb:da:a3:dc:79:05:08:8e:84:
                    6c:94:52:21:67:58:1f:fd:43:4d:cc:79:06:c7:48:
                    a8:ef:b7:f6:a2:48:8c:b9:ec:64:ee:b6:b4:3b:13:
                    cf:12:f1:69:8f:12:a3:f3:d6:66:2d:3a:50:bc:5f:
                    11:52:57:2a:ce:5f:8e:64:19:06:fc:44:1a:08:f4:
                    2d:33:5b:eb:e4:a9:06:af:ac:b2:16:80:37:f5:2d:
                    2a:37:ad:02:fd:77:fa:a1:c5:a7:2d:03:3b:b1:14:
                    c0:1e:e0:b6:d4:be:5e:e2:87:24:e6:bf:47:ec:83:
                    ab:1e:a8:d0:49:b5:26:82:80:c4:9f:f2:16:6c:f5:
                    ec:b6:31:c7:e0:15:b1:d4:ef:64:e0:31:2b:72:97:
                    6f:7c:5b:bc:c3:17:f5:07:43:9e:14:91:66:82:62:
                    39:07:4a:34:1b:5a:c4:b6:1d:b5:26:d8:14:4e:e0:
                    88:d2:f1:a7:46:1e:9d:fc:29:8a:32:4a:44:ef:ca:
                    b7:90:0a:68:01:ec:da:ab:20:1a:36:09:15:3b:bc:
                    31:8a:c4:07:0b:38:8b:44:a1:12:9c:cb:61:1b:0d:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:8E:97:B1:66:45:88:F2:93:1C:47:18:F3:9B:89:D3:7D:DD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33fad9bd-bb5a-388d-822b-e7b802233f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:25:bc:e4:db:35:f3:16:58:26:2e:20:f6:45:51:fb:4d:ab:
         3d:db:df:0d:65:5d:55:04:34:09:ff:58:4a:11:aa:2d:f9:0a:
         bc:07:dc:a1:b2:74:7f:e9:9a:04:60:c1:fb:55:9b:70:97:ae:
         99:41:87:fd:b2:66:3f:d9:24:53:f6:e3:0b:76:db:1c:af:d7:
         16:df:08:b8:5f:e5:74:a6:67:d4:7e:ee:84:3e:da:1d:96:39:
         40:c2:88:02:4d:4e:0c:6b:eb:be:b2:29:13:94:da:30:4c:e8:
         fc:c2:ce:d1:cb:8f:aa:9f:69:80:4c:c4:53:0c:4d:fb:e7:34:
         cd:43:db:5c:66:cf:01:4d:81:67:77:4e:13:ba:09:e1:9e:2c:
         e5:64:d0:80:4e:7b:57:3a:fb:5f:8a:33:dc:1e:98:6a:f9:26:
         56:73:3d:5c:e6:9c:aa:14:46:ea:cc:61:ba:d0:e3:ad:75:bf:
         96:01:4b:d7:ea:05:e3:f9:40:5a:07:aa:b7:90:3e:49:f7:90:
         c9:e7:e1:06:3a:a5:16:0e:65:f9:44:4f:bc:af:80:46:99:af:
         01:b4:13:b1:aa:5a:3e:63:ea:ae:76:cd:51:91:93:58:35:03:
         3f:d5:04:71:8c:c9:9f:9e:f6:7a:b9:65:18:20:78:ec:23:bc:
         0e:86:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:25:54 2026 by rpki-client