Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66bb9250-e512-398c-ba3a-2d37ad891055.roa
File:                     66bb9250-e512-398c-ba3a-2d37ad891055.roa (raw, json)
Hash identifier:          eeVNeFeBupB7QYaNLNU/p0YG40t06j6+jU6S0RPCr7E=
Subject key identifier:   9E:96:C6:2D:C4:47:61:7A:10:F9:F5:69:DF:57:CB:1A:E7:85:5B:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5B4B0DD2E89963B0987D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66bb9250-e512-398c-ba3a-2d37ad891055.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        24.1.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5b:4b:0d:d2:e8:99:63:b0:98:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=cb427a7b-4c0e-40d7-a7ed-cb798612fe04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:79:fd:10:b8:2e:21:0f:3c:c5:58:a2:49:30:
                    73:a3:f4:37:6e:a2:da:aa:1d:e7:22:d0:bb:33:23:
                    2b:d5:bd:b0:52:c6:c7:28:bb:7a:72:3c:52:62:91:
                    97:d2:04:f8:c7:a5:35:81:3c:1e:2e:e8:77:7d:30:
                    44:f2:31:b5:1e:9b:4b:39:21:f4:fc:b2:55:76:7c:
                    26:44:7a:d2:6b:97:6a:a8:0b:a0:61:ec:a5:be:9e:
                    73:b2:64:c7:e1:7f:4e:8b:ca:31:e4:90:d5:87:b4:
                    ab:b4:bb:a3:1f:22:80:b1:0d:2e:01:d8:65:7c:81:
                    64:fb:f0:bc:11:e2:43:75:6c:f7:e0:be:93:b6:a2:
                    02:3e:58:1c:ce:76:4c:b8:de:35:16:aa:92:21:7f:
                    ed:31:3a:c4:a1:9f:3e:0a:71:5b:c4:d1:63:dd:f9:
                    56:18:ff:3a:e1:cb:9a:aa:c4:78:bd:6b:99:94:4c:
                    36:08:8b:e5:4e:ed:1f:c3:d5:38:83:05:29:aa:b5:
                    7f:72:3e:6e:24:15:3d:87:6c:bc:57:6b:ed:b2:47:
                    ec:f0:85:31:38:2e:51:78:64:f0:e0:75:d3:4a:e0:
                    14:eb:27:31:a5:df:93:bd:a8:02:e5:c3:cd:13:1f:
                    ca:5e:39:51:40:4a:23:31:39:7d:04:5c:34:8b:88:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:96:C6:2D:C4:47:61:7A:10:F9:F5:69:DF:57:CB:1A:E7:85:5B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66bb9250-e512-398c-ba3a-2d37ad891055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:72:fd:bb:01:8a:f9:d2:2e:8d:f5:de:ca:19:5f:90:34:
         bc:ff:a6:7d:9f:60:ca:10:36:22:7e:65:50:99:14:f5:a4:79:
         5f:c0:8b:7e:f3:e2:8c:25:52:a1:d8:d0:9e:22:58:ac:db:99:
         d8:cd:d4:cc:ff:98:9c:28:59:54:93:81:88:1a:b5:8d:31:02:
         dd:29:83:7f:e8:0a:59:2a:39:87:23:13:29:28:6a:c6:5e:a6:
         56:81:d7:c9:b1:cf:15:47:12:63:a0:6a:81:32:6f:f4:e2:6c:
         8d:c4:61:50:ec:fe:7e:c0:d3:58:77:76:61:d8:e5:b6:12:46:
         b5:49:f9:9d:ad:b9:78:69:db:f1:72:f1:4a:2a:bc:2d:ab:04:
         cf:e2:3d:08:60:f9:90:60:51:06:3d:7e:ac:a5:39:3f:06:ff:
         01:7f:be:df:c0:8f:bc:08:dd:8d:78:c9:11:8f:3a:57:c8:a7:
         9f:bc:0a:28:05:e5:d5:68:77:05:dd:5e:f6:10:ed:d0:75:ab:
         8d:92:3e:42:d2:e9:e1:a1:14:f2:ec:0b:91:52:39:7d:e6:4a:
         e2:f2:49:74:27:9b:97:a4:1a:91:40:a6:d9:1a:0f:15:9f:21:
         31:8c:fa:d0:11:df:74:aa:e1:26:4f:60:61:0c:99:1b:9a:b0:
         11:ea:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:38:06 2026 by rpki-client