Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac159068-4b6f-3d68-8fa6-20dc65fa796b.roa
File:                     ac159068-4b6f-3d68-8fa6-20dc65fa796b.roa (raw, json)
Hash identifier:          Hi2xoLeVb9eACEf0ct3Nj8o5Ow2u9Y28Tw3olK6tuPE=
Subject key identifier:   DA:5D:C2:0B:5F:07:01:FC:BE:46:13:49:01:B4:4E:ED:87:DE:BC:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F11A0227F665D38988FE5C280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac159068-4b6f-3d68-8fa6-20dc65fa796b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        24.7.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a0:22:7f:66:5d:38:98:8f:e5:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=0307763d-dbcd-4659-b88d-9b5c5d0b1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:02:68:5f:8d:25:7b:22:84:1f:f6:d9:76:
                    94:b4:18:2e:64:92:43:34:7a:28:a3:d4:7e:c6:49:
                    b1:74:c3:bf:e3:77:3d:bb:8c:3f:ec:6a:d5:c2:5a:
                    f3:ba:84:79:22:71:f2:90:e0:b9:6c:51:4b:a8:46:
                    70:7e:d2:fb:14:9b:be:cc:40:b2:09:72:6b:23:9a:
                    f7:32:f5:e2:cf:14:07:e1:b7:7e:e8:9d:06:b2:1c:
                    ea:56:c3:bd:0c:2c:26:2e:72:07:1e:57:f4:cd:09:
                    02:8b:e5:ce:a5:11:99:bb:5d:1d:c7:2c:10:26:dd:
                    18:d4:89:34:81:27:d8:ea:9f:09:cf:52:35:e1:1b:
                    06:52:c8:13:6a:52:4d:3e:49:12:46:f2:e5:27:81:
                    97:25:60:89:de:bc:66:61:47:74:af:29:d7:07:33:
                    c9:a2:2a:52:9c:fa:5f:57:be:57:20:f2:b0:a9:fb:
                    a2:6c:65:96:ce:8c:20:96:69:db:5d:43:06:e2:d9:
                    05:c1:3a:62:f2:e0:c0:6b:ea:fa:31:bc:fe:d8:df:
                    bb:eb:09:75:79:1e:6a:5c:63:49:00:d3:f5:4d:93:
                    d1:75:cc:e4:7f:23:1c:a5:03:0e:d7:71:fc:cf:e5:
                    fb:78:2f:92:7c:52:77:be:e7:6f:97:90:96:03:b0:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5D:C2:0B:5F:07:01:FC:BE:46:13:49:01:B4:4E:ED:87:DE:BC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac159068-4b6f-3d68-8fa6-20dc65fa796b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:57:2b:0d:81:58:f8:86:ab:37:da:5f:41:50:47:ba:5c:
         d1:59:95:c8:25:a4:e9:2e:32:76:c8:4e:2b:77:99:b0:d3:54:
         6b:31:c3:de:ec:d2:42:fd:17:90:3f:56:69:fc:d8:e5:88:b8:
         6a:7e:3e:4d:3c:20:6b:06:10:55:67:0c:59:4a:be:e1:42:c8:
         b6:ad:37:f5:17:53:ab:b0:b6:5a:b6:c3:3e:b3:c0:00:30:db:
         9f:33:16:3a:fd:5b:c0:50:a8:dd:5b:05:79:66:e9:72:8c:e5:
         fc:34:e4:d7:0c:d1:ca:7b:9a:dd:39:ea:9d:df:bc:7b:7e:69:
         c0:9c:ac:40:c6:4d:8e:e4:00:44:d2:71:23:76:ee:9f:83:b7:
         3a:15:82:be:f1:71:ef:9e:ed:d1:3a:42:22:43:5e:e2:e1:61:
         6a:05:6f:cc:7c:50:c0:c8:bb:69:09:86:e9:ed:fe:93:50:92:
         4f:9b:97:d8:fe:5f:ee:60:e3:4d:fe:91:fd:e6:05:7f:8c:43:
         42:27:3f:26:3d:a2:5e:25:54:b1:12:5f:96:de:f8:14:4e:ee:
         f4:49:68:14:6a:39:91:9a:69:73:4b:11:86:b5:25:18:c6:4b:
         1f:5f:5d:58:40:45:c4:e2:98:4c:08:cb:d9:93:fc:2c:78:07:
         25:6e:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:28:09 2026 by rpki-client