Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fa9bbf0-38fb-3a91-a5c2-83a142c37a35.roa
File:                     9fa9bbf0-38fb-3a91-a5c2-83a142c37a35.roa (raw, json)
Hash identifier:          9YXJNOGqZymh8vqVE/eWfW22Rb3gUR/1wc94f280wWg=
Subject key identifier:   EF:E6:31:88:9F:D3:E3:95:DE:F0:A8:D2:A2:C3:61:E3:D9:4F:F2:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F11A02303213CD2FAAD865180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fa9bbf0-38fb-3a91-a5c2-83a142c37a35.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        24.7.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a0:23:03:21:3c:d2:fa:ad:86:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=79b56332-acee-495f-bea1-04cff53363c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:43:63:42:fe:33:ee:16:ec:77:b7:ed:f0:
                    1d:2c:56:c0:31:9a:e0:74:e8:b6:b3:27:39:d2:40:
                    fa:fb:21:35:fa:b2:9f:ed:e1:f8:9b:48:ff:e4:79:
                    82:26:85:ff:0b:fd:d8:96:25:69:2f:4c:7f:37:97:
                    00:f5:da:8a:5e:67:64:7c:bf:0e:ec:e2:41:34:b0:
                    e5:44:a6:6a:fc:75:39:6a:14:2c:68:46:fd:8a:01:
                    59:7a:29:97:a4:a7:9f:d9:a0:fa:a6:02:30:61:81:
                    99:af:24:ea:37:b8:7c:52:89:e9:d0:17:4d:ab:77:
                    0a:de:09:58:65:95:5a:46:55:ca:8b:96:82:70:6d:
                    b2:c7:88:d5:c3:0e:54:52:60:1f:c1:ec:de:9a:ea:
                    b1:0e:99:c3:5b:31:22:e6:ee:07:56:89:04:89:35:
                    ff:b9:64:82:09:42:82:61:1a:3f:65:9f:62:b2:50:
                    25:2e:85:cc:d9:24:27:67:c1:56:3b:22:a0:89:ea:
                    a6:1c:d7:79:61:c6:20:27:b4:d4:b6:dc:a7:43:db:
                    94:96:fe:32:15:06:8d:1c:7a:46:a1:69:9c:37:ce:
                    d6:52:4f:8f:83:e3:51:fc:96:46:52:fb:7d:e2:8b:
                    17:b6:5a:bc:4a:a4:36:1a:3d:d7:53:0b:a0:9d:98:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E6:31:88:9F:D3:E3:95:DE:F0:A8:D2:A2:C3:61:E3:D9:4F:F2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fa9bbf0-38fb-3a91-a5c2-83a142c37a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:03:c1:00:0a:4c:d7:49:fa:08:d4:5e:ee:d2:3c:37:59:
         1e:46:3c:26:ca:ab:4d:54:2d:cb:e4:73:9d:75:79:9a:6b:d6:
         49:8f:fb:3f:ce:54:01:e3:fb:fa:0c:7f:6e:a1:b8:7b:85:cb:
         6d:29:ae:f5:41:fb:e6:4a:31:51:85:22:40:20:a3:57:e0:b8:
         68:8e:88:23:62:b4:08:c2:f3:fb:2e:14:a8:46:21:a9:b1:13:
         b3:1f:bb:84:f7:2c:f7:c4:07:ef:29:e4:d4:b5:66:95:70:6c:
         b4:a5:a2:2e:17:2c:d7:b7:95:ec:29:b3:96:ed:01:6e:a0:42:
         ee:39:4e:1c:f9:c6:aa:d6:78:60:ca:95:79:27:e8:69:e5:00:
         fe:77:05:16:5c:1c:24:b2:b5:1f:5d:82:87:9f:53:13:65:89:
         af:0f:ba:91:2c:63:34:1b:c1:86:73:93:03:b5:b8:b1:78:8f:
         a7:12:8f:10:da:3c:98:21:b2:81:9c:24:db:6c:d1:4e:f2:29:
         3e:29:31:0e:9a:ff:31:5b:b1:3b:22:05:d7:44:d0:61:16:a3:
         3c:ff:58:f3:83:21:ef:e1:84:c6:40:b2:5a:8c:ab:b8:9c:c5:
         5f:75:8e:4d:cc:dc:9a:5d:a2:34:22:9a:ea:9b:88:50:55:de:
         8b:1b:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:22:48 2026 by rpki-client