Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9e18a91-2d3a-35ca-ae40-173f7b713c79.roa
File:                     a9e18a91-2d3a-35ca-ae40-173f7b713c79.roa (raw, json)
Hash identifier:          mI7NP0czlTqyytrOtnsh9IiLEAT3XLt2rKTVeTLc/jQ=
Subject key identifier:   57:A4:70:BC:27:53:E3:FB:90:BE:2B:30:F8:A3:27:65:52:97:E7:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A79D545755872BEDEA5B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9e18a91-2d3a-35ca-ae40-173f7b713c79.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        24.125.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:9d:54:57:55:87:2b:ed:ea:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=dd1bd749-124a-45ec-a784-372a16be495d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:83:00:bb:01:7f:5c:aa:c8:fc:f4:6e:05:
                    a5:03:af:5b:67:56:6a:aa:ba:64:a3:84:05:85:d8:
                    be:df:1f:f1:11:85:03:01:43:ed:b4:db:b4:49:54:
                    03:40:45:37:24:ac:0c:ec:3b:2f:23:ed:5c:b5:8f:
                    e4:a1:2f:aa:52:ba:d4:88:f5:71:10:c4:ea:33:50:
                    7f:67:b4:4d:34:9d:d2:e7:97:91:7b:d3:11:f1:a4:
                    42:3d:0d:5b:f4:83:13:39:a4:a9:8b:10:9b:db:26:
                    79:6b:21:ad:bd:1e:cb:35:1d:3a:96:12:60:28:65:
                    bd:4e:4a:85:53:ff:e6:00:8f:5b:8a:7e:97:38:8c:
                    5d:14:f2:15:9f:0c:bb:0c:10:18:ac:63:b7:bd:b9:
                    1e:a6:62:3b:54:cf:2b:6f:22:6b:f3:47:8b:b5:7c:
                    74:dd:bb:7a:4b:3f:37:97:34:04:d6:ae:0c:83:0f:
                    14:d0:35:15:27:c6:aa:9e:bf:f4:7e:d7:66:c4:2e:
                    fc:ac:da:8c:f1:5d:dd:23:fd:50:5e:f3:2c:7c:a0:
                    2c:70:11:f9:7a:5c:bc:0b:d6:96:c6:2b:6b:dc:f1:
                    42:d3:b2:43:7f:d5:de:fb:8b:ba:06:13:4a:4c:ab:
                    6a:a7:4f:3e:05:60:3a:ef:d2:88:86:a8:ef:a8:9b:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A4:70:BC:27:53:E3:FB:90:BE:2B:30:F8:A3:27:65:52:97:E7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9e18a91-2d3a-35ca-ae40-173f7b713c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.125.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:77:73:11:f3:9d:01:93:b6:c6:c6:54:97:93:a7:70:39:cd:
         61:3e:39:e9:50:d0:c8:21:1f:41:04:cc:27:7f:c4:56:5a:52:
         46:15:f1:54:7c:ff:a0:7c:31:31:db:7d:33:6a:ab:24:b6:57:
         d3:43:d7:cf:7f:e7:89:40:4f:43:b6:a6:21:e0:3f:73:ed:bb:
         79:47:22:6e:05:54:21:3d:64:84:be:5b:44:c9:0b:66:79:0b:
         2f:19:dd:93:46:28:dd:5b:93:7a:b3:92:5c:e7:2e:28:67:36:
         1f:e4:b2:c8:03:fc:cd:a0:68:71:46:cd:37:3a:f3:20:1a:25:
         bb:07:3d:c5:82:03:8a:b2:00:58:d1:fd:42:88:19:ce:e1:ba:
         7a:3a:fa:11:ca:87:0f:c1:fc:06:c3:eb:d1:8f:5c:8f:a9:a0:
         ee:b0:f3:e0:e6:a0:ba:df:10:58:59:0c:75:85:9e:74:bc:e6:
         6e:53:c2:fc:94:c0:b1:8e:91:b7:69:78:d1:0a:26:5c:c8:70:
         55:31:a6:05:fb:35:d0:6f:87:3b:54:ca:05:ac:3c:5b:fa:4f:
         29:4f:d1:50:ea:f5:5d:fb:dc:ca:c3:0e:c3:3d:4a:9d:cf:f8:
         2b:70:e4:8d:16:15:ac:35:f0:af:5b:90:19:b4:55:b6:c7:81:
         91:4c:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:58:52 2026 by rpki-client