Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9916af5c-f062-31b9-9a76-835de09660c9.roa
File:                     9916af5c-f062-31b9-9a76-835de09660c9.roa (raw, json)
Hash identifier:          4bqD/C5CZ04Hc3gxvPwfK2D/ppmrm+0V7whB+eV1n4E=
Subject key identifier:   91:CC:9C:61:10:FD:FB:CD:E2:A4:EB:AA:E7:32:91:AA:D9:03:35:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE59789C1CAFB0D3D784E7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9916af5c-f062-31b9-9a76-835de09660c9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        24.0.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:59:78:9c:1c:af:b0:d3:d7:84:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=cea1b83e-5208-4fdd-aed0-d4f53bb5712a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:71:fc:60:5b:a1:03:a8:bb:4f:30:75:01:
                    aa:12:95:21:68:a7:60:40:2c:26:16:25:02:33:34:
                    de:86:0d:07:ac:f4:ec:b5:68:82:88:07:8b:87:d1:
                    59:1e:37:a7:ba:af:ec:a4:2f:09:98:fd:b3:f3:2c:
                    8d:cc:1e:6a:ab:0e:f4:67:47:f2:e4:4a:33:14:a5:
                    05:ed:59:75:d4:23:de:26:27:85:d3:68:e6:53:55:
                    62:98:42:5b:9f:e0:82:26:d7:e4:e3:37:40:22:4e:
                    ac:5b:70:09:a2:9c:f6:e7:a9:41:b6:85:b2:41:2d:
                    48:e0:a6:bb:a7:07:40:fd:f3:14:5f:69:c9:19:23:
                    d2:26:67:f3:fc:35:6b:d1:f0:3c:83:22:a8:00:ac:
                    f4:0f:78:71:69:f6:3b:36:9d:1e:79:0c:47:ba:01:
                    85:24:26:44:a9:f6:91:10:a4:39:9a:8c:47:07:4c:
                    10:b4:0e:d1:5c:b3:bf:37:d5:e7:00:76:31:7d:e4:
                    93:0a:3e:f5:51:7c:0c:ac:f8:3c:8c:fa:14:fb:21:
                    cc:2a:b9:c6:1b:8f:c7:d3:2b:b6:66:5e:74:05:93:
                    5a:4d:93:b3:04:e8:2a:12:d0:12:53:ed:82:19:b1:
                    55:a7:8e:b8:98:2c:7f:42:6b:28:4c:e5:77:70:b2:
                    b2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CC:9C:61:10:FD:FB:CD:E2:A4:EB:AA:E7:32:91:AA:D9:03:35:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9916af5c-f062-31b9-9a76-835de09660c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:bf:bf:d4:25:db:d9:72:bd:87:47:9b:6a:33:d0:29:ad:
         86:79:12:50:ee:24:6a:1b:bf:1d:b0:2e:29:ce:7e:43:5f:9f:
         41:07:e6:c7:65:64:dd:e0:a6:ea:d0:fb:de:1a:25:ca:07:18:
         09:b4:ec:22:18:12:78:8e:c5:42:9c:e3:17:aa:97:5d:af:0a:
         f7:c5:5a:72:59:2a:cc:01:11:4b:12:89:1a:83:87:5e:dd:25:
         4f:36:e3:db:01:e8:05:cd:e2:ce:7c:0b:d0:9f:6b:39:73:c6:
         47:41:5a:8c:ee:64:26:7a:b5:91:d6:af:ba:c7:b9:71:b3:40:
         59:ab:aa:a4:c0:40:96:5b:41:18:b0:81:cc:85:6d:08:fe:24:
         70:27:df:13:5c:64:81:42:dd:44:74:17:5c:ee:91:23:8f:9a:
         01:7f:27:a0:71:52:6f:60:1c:d2:e9:e3:e6:85:63:bb:07:32:
         31:f3:f2:fe:09:12:7d:84:78:7f:39:d9:0f:9e:39:58:ea:7e:
         79:68:fa:8e:7f:0b:d5:90:a1:22:33:37:48:03:ec:b8:21:59:
         a1:6c:fe:96:8f:4d:a3:59:4d:26:5d:e6:d9:9e:e9:2c:18:cb:
         70:af:cc:2b:d7:d2:6a:84:f4:b7:9b:90:6d:8e:20:12:46:30:
         f2:8a:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:40 2026 by rpki-client