Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ef12939-52c5-38fc-9be3-92dc6250d807.roa
File:                     9ef12939-52c5-38fc-9be3-92dc6250d807.roa (raw, json)
Hash identifier:          lo+hir5ljG/4w3A9MkB1D3pS05JV4cSovUlQI+d7mIc=
Subject key identifier:   4D:C2:7D:C8:3F:0F:83:A0:B7:40:ED:D5:4B:B4:43:A9:39:29:EA:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243606C1D59292E6A579500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ef12939-52c5-38fc-9be3-92dc6250d807.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     13367
IP address blocks:        24.245.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:60:6c:1d:59:29:2e:6a:57:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=d683c151-26c8-487b-9fbb-2973d91e1ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:6e:66:d2:7c:0f:ef:36:36:1f:db:e5:7f:
                    8c:fa:7b:8f:56:5b:80:06:f6:0a:5f:39:44:4e:30:
                    13:e6:d6:93:8c:64:b3:bf:8c:94:9b:fd:aa:d2:6b:
                    04:92:b8:85:e7:5c:a7:e3:b8:03:14:1e:97:9f:26:
                    d6:91:bc:2a:f6:3d:3f:c6:c4:18:97:c0:d1:0b:3b:
                    2d:ae:0f:a5:d7:ab:4a:13:f2:ba:47:d6:75:bb:34:
                    a3:14:5e:1e:9d:4b:cb:f9:15:4f:e8:a1:e4:bc:a5:
                    07:22:5c:43:a1:44:d3:8a:22:7c:95:68:97:bf:b5:
                    cd:7c:92:4f:54:71:8f:22:87:ea:e6:a7:03:95:a5:
                    bc:ba:6f:f6:ac:c0:e1:eb:2a:d4:d5:cf:c5:b3:86:
                    00:2e:ee:a8:6d:34:08:59:63:c0:d6:a7:8a:e0:db:
                    53:b3:97:02:70:bd:f7:32:d2:6e:88:7f:ee:a3:f5:
                    c5:ea:e5:bc:3b:7f:5e:60:29:70:23:8d:c3:bd:51:
                    94:3c:98:e9:27:12:64:59:bf:cc:47:d0:dd:47:18:
                    e5:9c:7f:35:82:c7:0d:76:c2:ea:cd:ba:56:0f:ff:
                    4e:49:f1:76:74:af:93:fd:1c:18:ea:51:59:ee:f4:
                    0c:23:d9:43:1a:dd:1f:65:68:41:6c:03:ae:f8:ad:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C2:7D:C8:3F:0F:83:A0:B7:40:ED:D5:4B:B4:43:A9:39:29:EA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ef12939-52c5-38fc-9be3-92dc6250d807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:96:b1:31:94:2f:9f:98:cc:e9:07:65:da:3e:33:fa:c0:89:
         b7:f5:ef:fb:c5:fe:1e:2a:c7:a2:41:52:88:8b:24:cf:a9:85:
         46:b8:6e:4f:e4:d8:63:8d:7d:a0:62:ca:d3:e2:1c:89:dd:38:
         b7:64:e6:1c:3e:1e:5c:36:53:87:64:1e:0d:3f:38:b6:c8:d2:
         f0:77:90:e5:b5:74:6f:ea:fa:12:ba:e9:4f:01:a4:69:da:c2:
         f2:22:2c:c7:d3:93:06:07:9d:00:c2:41:16:e0:60:7c:e6:e1:
         74:d8:0e:60:4e:9a:ed:3f:75:47:a7:5c:a3:44:74:9d:93:30:
         55:0a:f7:1d:fa:fa:3b:d5:61:4b:76:c6:17:92:cc:69:42:5e:
         13:19:99:7c:64:ef:c5:83:38:50:57:d0:a8:df:9d:d7:5f:2b:
         38:0f:5c:32:2c:97:77:fb:3b:d3:64:4d:c8:35:b6:5b:59:5b:
         12:63:bf:19:29:1c:dc:37:e0:0f:9c:3f:d2:e7:da:5b:e0:14:
         88:24:b5:3d:2f:0c:dd:fe:49:c7:a3:e8:b2:dc:54:42:eb:31:
         86:c0:44:8b:2f:cd:b0:b9:d8:97:39:e1:7d:9e:19:06:4b:ed:
         72:f2:91:83:a0:a9:9e:c0:8d:8f:ad:7f:c9:64:45:32:e0:31:
         4e:60:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:13 2026 by rpki-client