Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416ceb43-f046-3881-a7fe-bb60587cfbc8.roa
File:                     416ceb43-f046-3881-a7fe-bb60587cfbc8.roa (raw, json)
Hash identifier:          wsDXwx6KywmJkInFw4BHQlx2Lu3BmSrO5tTG6O/j2BQ=
Subject key identifier:   84:79:58:94:BE:E2:DB:74:0E:FA:D3:1F:AA:C9:71:EE:2F:79:C9:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBBE650FE12DAD41BEEA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416ceb43-f046-3881-a7fe-bb60587cfbc8.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        24.34.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:be:65:0f:e1:2d:ad:41:be:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=ee209cdd-a038-4444-aef5-d1d7669cd672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:e3:89:51:8c:8b:18:58:d8:41:bd:04:ba:
                    c7:e3:c2:30:83:24:ae:0f:c0:18:c5:cb:68:6a:9b:
                    f0:6f:72:f0:66:84:bb:3b:09:df:cc:0c:c4:68:93:
                    d7:0d:7b:8b:30:4d:6f:4e:d0:0a:64:26:a9:07:59:
                    9f:a6:8a:59:77:46:e1:d3:d5:b5:84:e8:78:76:6f:
                    46:1f:90:63:8e:0c:cd:53:5a:8f:75:e4:fa:ce:02:
                    11:53:bc:5a:62:dd:7b:f2:21:59:01:e9:d6:82:0e:
                    7b:03:c4:c1:42:e7:84:40:fb:d6:bc:9c:76:d2:49:
                    02:90:11:d4:87:28:18:5e:57:a0:09:87:ff:e5:9f:
                    51:1c:5f:63:08:8c:4c:e5:08:02:92:13:90:04:1f:
                    93:47:31:01:d2:1b:54:a5:0d:05:aa:7c:8b:f5:f6:
                    20:6a:1b:d7:dc:01:4f:8b:5a:08:bf:48:ec:5c:06:
                    b4:2c:01:04:ac:03:52:d5:90:eb:5c:aa:de:4d:12:
                    4c:57:df:21:c9:a1:8c:00:55:af:f5:de:8f:d3:ce:
                    7e:94:7e:2e:20:79:a0:da:38:94:42:c2:10:3a:96:
                    3b:6b:52:c6:92:2a:8e:c8:d9:05:57:36:9b:e5:b6:
                    05:24:e0:c9:97:11:e4:a0:27:89:ce:c5:fd:2a:bf:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:58:94:BE:E2:DB:74:0E:FA:D3:1F:AA:C9:71:EE:2F:79:C9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416ceb43-f046-3881-a7fe-bb60587cfbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:07:ca:df:93:22:3a:f4:52:c8:12:eb:3c:da:4b:18:2d:
         05:42:69:1c:93:ff:43:a2:a2:23:66:2e:7f:56:85:d0:7c:a2:
         fc:43:a0:ea:2c:3b:f1:39:b9:5b:6e:8e:32:a3:5b:f3:6c:7d:
         e3:b4:56:f7:97:12:83:20:eb:7d:48:cf:50:6f:ea:71:eb:e9:
         20:c5:4a:d5:2a:9b:b3:22:73:f1:7b:00:10:08:80:e4:58:5c:
         68:ca:d5:62:58:7d:ff:a3:73:5a:87:02:69:3c:43:a0:90:e4:
         ad:9c:c6:ff:d2:38:1f:a4:1d:44:ef:f5:27:d7:1b:fe:62:4c:
         be:94:bf:81:78:a2:bd:8f:70:fe:72:eb:f1:c4:f4:81:75:23:
         d2:90:8c:11:f7:34:8d:4f:f9:c2:66:49:09:d5:24:53:99:a2:
         2f:31:b2:68:90:d7:2e:73:90:83:4e:dd:c0:4a:05:9a:9b:a1:
         8e:e1:68:be:77:89:73:27:b8:88:69:9f:d7:af:89:76:3f:49:
         69:1a:e9:bb:36:41:20:7f:77:98:21:e8:68:e1:0e:0d:4d:7e:
         d5:34:ed:af:51:da:ac:ca:07:43:3d:18:1b:d0:24:90:2b:af:
         01:a9:a0:7b:1e:01:5c:13:41:38:c1:1e:de:64:8e:3c:32:f9:
         55:6a:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:29 2026 by rpki-client