Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88aa3195-b8c6-3011-a63f-517ad2002b47.roa
File:                     88aa3195-b8c6-3011-a63f-517ad2002b47.roa (raw, json)
Hash identifier:          Noa7zjc7bI1NBOlcXFLOfRbM24KxH/28Fzfr+gbm9DM=
Subject key identifier:   88:6E:62:B1:4D:84:0F:59:E7:F5:E6:0E:19:35:97:D3:28:32:9B:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE860E02E3AADCBB22DEBBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88aa3195-b8c6-3011-a63f-517ad2002b47.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7725
IP address blocks:        24.99.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:0e:02:e3:aa:dc:bb:22:de:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=7dbfa6a3-0ee6-4ca9-beca-4e0f993a829d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:a4:df:b5:b7:f4:55:9a:ee:40:8d:be:c0:
                    08:96:5b:c8:8a:9a:18:77:97:bc:8c:c5:b9:43:2b:
                    bd:4e:48:aa:3f:90:7b:3f:60:e1:87:cb:78:59:52:
                    db:d7:6f:bb:91:6f:6e:54:51:be:85:d1:4f:e1:88:
                    37:b2:26:06:5a:ae:c9:6d:c3:e4:ab:3b:1a:e1:ac:
                    a7:bf:51:ae:c4:e0:54:c4:9f:a7:49:66:55:31:2e:
                    79:09:5a:51:cd:57:81:96:7e:33:30:55:d5:bf:3a:
                    91:86:a2:b8:a5:a6:e6:2f:56:e6:a8:b5:98:3f:c7:
                    ee:68:b9:1e:b4:4b:83:a5:22:85:fe:64:8c:f0:94:
                    dc:bb:41:23:70:d8:36:fc:99:68:b6:ac:c5:5b:21:
                    34:45:2e:24:a7:77:59:d4:59:be:d9:cc:12:f6:08:
                    b5:95:bc:98:9f:c3:2f:e1:37:fe:6a:1e:0e:05:bf:
                    b7:0a:fc:84:53:8e:d7:f3:cc:a1:36:54:26:bd:6e:
                    fd:20:c4:07:86:0b:4c:fb:fa:2d:b2:c6:b3:c6:4b:
                    f8:62:9a:3e:12:be:a0:25:ac:ca:9a:91:b7:49:cb:
                    f6:ae:df:96:4d:eb:dd:94:9c:d3:40:17:7a:fd:9b:
                    1c:91:1f:79:12:83:83:97:8a:fd:4e:e3:4d:36:a2:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:62:B1:4D:84:0F:59:E7:F5:E6:0E:19:35:97:D3:28:32:9B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88aa3195-b8c6-3011-a63f-517ad2002b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:5e:5d:fc:31:01:b9:63:23:78:21:e2:8d:3c:83:9c:b0:
         79:ad:34:f5:80:47:a8:e8:f8:3c:9a:7b:ba:6a:37:65:bf:b6:
         ac:3f:3b:c7:6d:1b:ca:32:22:e7:a1:d6:31:46:f5:df:df:07:
         28:1f:79:29:6f:78:fd:a3:3b:27:c8:a1:4f:37:bb:3b:69:21:
         e4:f0:8f:85:9d:8a:f4:0c:ad:22:84:b2:7c:19:2b:71:2a:2b:
         b7:f8:32:37:bf:cb:24:5c:b5:9c:98:44:9c:69:23:73:7b:e8:
         cc:7d:dd:bb:1f:e1:06:fa:82:1c:1f:51:2b:8e:e6:1d:ed:ca:
         f0:35:eb:20:d8:f2:6e:01:a3:89:c6:bb:96:24:83:1a:d4:cf:
         31:0e:0d:22:c5:71:c1:8e:54:9f:16:a2:18:ef:eb:53:9f:08:
         a2:75:29:3f:77:f3:5b:d3:b1:f9:4c:3b:9a:b1:aa:55:24:78:
         f6:15:88:b5:96:d5:fe:7a:56:83:47:2d:f4:86:2a:78:9a:56:
         a2:63:2b:24:46:0a:29:cd:73:80:0c:51:c8:f2:30:ab:29:9f:
         4c:ae:c6:14:83:33:1c:f9:f2:b8:0c:7f:9f:d5:d8:6d:e7:da:
         7a:99:b3:bd:30:e8:b0:d3:0a:9e:73:97:e8:4c:92:cb:31:89:
         86:3e:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:00:07 2026 by rpki-client