Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/495c5e3b-013d-3623-b76f-3480f0d06443.roa
File:                     495c5e3b-013d-3623-b76f-3480f0d06443.roa (raw, json)
Hash identifier:          3UyA5mbNvEx9e8p6Pjq2EpeHsDFYb2/HLtQBivTQMc8=
Subject key identifier:   2D:1B:C8:9A:23:E6:4F:B4:39:07:7B:49:3E:06:B3:41:4B:D9:35:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F11A01DFB0DE9961384BA5120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/495c5e3b-013d-3623-b76f-3480f0d06443.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        24.6.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a0:1d:fb:0d:e9:96:13:84:ba:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2beba5f6-801c-4a4e-aeeb-7d24c858b9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:28:33:2d:82:13:a8:56:d8:33:77:73:12:
                    54:14:3d:4c:ba:49:b0:9a:3f:04:88:af:b3:4f:7e:
                    8a:cd:69:4b:44:38:95:d1:5d:6a:58:14:74:25:dd:
                    3a:e0:7f:7e:8a:ca:c2:53:54:08:dd:79:15:aa:11:
                    ad:55:35:98:6d:fd:9e:f2:01:24:8d:3a:a2:6c:0f:
                    49:72:af:26:54:dd:a5:f3:cf:07:d9:4f:b9:29:48:
                    a1:e9:36:8d:43:4a:44:93:1a:42:2d:42:b0:b7:87:
                    91:f7:fc:0f:9c:46:fb:d0:13:55:38:cc:0a:a7:47:
                    c7:e1:af:0e:54:6c:03:a7:fa:16:a9:ae:92:5b:9d:
                    09:5d:3e:97:f5:25:68:de:fb:bd:91:e9:bf:7e:c4:
                    f7:92:5b:24:25:77:05:28:df:39:24:87:d3:04:b2:
                    fd:01:b5:f6:c4:02:bc:95:c7:ef:86:40:3d:53:f1:
                    45:de:b7:83:fa:16:d8:44:97:ff:f8:e2:a7:37:cf:
                    4f:b2:19:01:0a:e6:f6:c0:9e:ac:5b:e8:c5:17:1e:
                    92:5c:ce:c7:3b:c1:a5:63:d3:45:7d:b8:6b:b8:cd:
                    4a:c0:36:8c:4a:2f:69:d2:f7:1f:ba:9f:33:04:3c:
                    84:e4:a4:5d:b5:40:f9:e1:46:81:67:0b:ac:3d:67:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1B:C8:9A:23:E6:4F:B4:39:07:7B:49:3E:06:B3:41:4B:D9:35:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/495c5e3b-013d-3623-b76f-3480f0d06443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:81:d8:ab:cd:c8:7f:6d:27:d9:3b:09:68:86:ca:6a:e6:c6:
         3e:fd:65:0c:f5:31:cf:1b:25:d7:ec:5d:62:6c:6f:82:81:f9:
         0c:de:a0:09:c0:3f:40:05:69:9d:64:20:ef:9a:71:9c:37:7a:
         f4:63:06:35:dc:e3:7d:96:2f:ec:c9:73:59:90:df:ce:e8:9a:
         81:ad:87:8c:b4:a0:74:68:1a:ba:40:a3:a5:21:cf:1b:a0:34:
         cf:3d:17:ec:3e:65:20:64:53:77:5e:5d:99:cc:31:5f:16:68:
         0a:15:a1:d3:7e:d7:01:00:42:47:97:1e:a1:5b:76:26:63:1d:
         0c:c5:13:f0:bf:cf:1d:0b:a1:4a:90:00:6c:3f:40:bf:1d:d2:
         4d:3e:65:27:c0:28:50:41:0f:d1:61:94:04:3f:eb:e9:1f:dc:
         99:c2:08:e5:09:0e:06:a5:62:f4:94:88:3d:01:8e:e4:42:2c:
         a2:77:c5:c0:76:9d:2d:cb:62:1d:04:11:6d:dd:f9:2d:14:8a:
         81:d6:f3:eb:f6:0b:13:9a:1c:bc:3c:dc:40:7d:67:f2:f8:0d:
         dc:5d:e2:53:25:b6:f2:03:e2:12:02:aa:ec:62:66:68:dd:6b:
         8a:c6:4e:0e:2c:f5:68:e5:50:c0:8f:7e:70:76:d9:c7:42:35:
         31:a8:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:26:13 2026 by rpki-client