Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd3d54e-0f11-38ff-b989-bec6daa8d4fe.roa
File:                     afd3d54e-0f11-38ff-b989-bec6daa8d4fe.roa (raw, json)
Hash identifier:          q/LTJFMY0h1QI9TWcqyk26oFj6AFa9XeXnLYWSIMh4Y=
Subject key identifier:   4D:95:42:73:DB:97:2D:42:7C:AE:36:C7:95:A0:6B:64:EE:B4:A7:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBC32AF25C4A93832F7600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd3d54e-0f11-38ff-b989-bec6daa8d4fe.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        24.63.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:c3:2a:f2:5c:4a:93:83:2f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=1cc28e1b-282c-4130-a8c8-28d977f1d543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:b8:09:7d:b1:d7:0f:e2:2e:51:a8:2f:14:
                    34:4c:09:d7:91:0a:fb:f4:dd:8a:b3:35:ae:0d:4c:
                    4a:68:a4:e8:5a:be:43:56:44:1f:96:94:49:ce:34:
                    b7:26:2c:50:ca:46:54:32:22:63:0a:26:e9:3d:45:
                    96:16:bc:2b:46:63:18:59:bc:f6:a5:f1:51:35:11:
                    dd:00:6a:b5:61:a0:70:fc:67:3a:07:d7:24:9b:4d:
                    5b:76:17:cf:49:16:36:32:9a:ba:19:05:93:97:a2:
                    da:8b:93:b7:5f:82:5e:1c:eb:fe:bb:49:75:d7:98:
                    6b:97:04:84:12:1e:f0:39:e4:96:d4:a7:1b:74:58:
                    4d:dd:6c:d1:7f:d7:06:1b:84:d4:e7:f2:4d:3a:90:
                    78:56:2a:ea:8c:e8:58:73:48:ca:cd:ac:72:7f:b6:
                    cd:11:e5:7c:02:39:32:2a:e5:21:37:2d:bd:0d:2a:
                    c6:a0:6b:2a:d5:3c:11:35:71:36:e3:12:59:66:90:
                    ad:a0:1e:14:7d:64:36:7b:c5:96:77:b9:c9:c9:89:
                    4e:5a:ce:8a:6c:b1:c9:b0:d0:da:37:00:6e:cf:a0:
                    09:68:4f:b5:5a:df:9f:69:5b:b4:26:84:b1:f2:31:
                    7a:0a:f6:1a:e7:59:2a:44:80:9b:11:c6:82:26:42:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:42:73:DB:97:2D:42:7C:AE:36:C7:95:A0:6B:64:EE:B4:A7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afd3d54e-0f11-38ff-b989-bec6daa8d4fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:46:88:62:0b:43:8c:b8:f2:83:35:14:1f:10:50:33:90:de:
         e5:47:94:93:2d:0b:ad:c3:3c:22:50:7a:b5:35:93:75:c7:37:
         6c:73:41:b2:a3:00:25:c0:cf:fa:fa:4d:2d:0c:3b:1a:77:d5:
         a8:a1:06:11:84:2f:f2:c5:d5:59:d9:8c:36:6e:62:e0:d1:49:
         31:59:b9:3c:38:11:0c:e2:70:d2:ed:46:f2:e8:70:48:fd:5e:
         f0:b6:3f:41:d9:9d:b9:48:99:ea:b3:de:70:6d:05:8a:f2:40:
         1b:3f:55:32:40:08:5a:9a:63:4b:c7:02:36:8b:8c:7f:6a:27:
         92:fe:d8:2c:eb:18:fa:c2:a2:87:9b:f1:57:e0:4c:e3:7b:dc:
         ae:02:ba:da:4f:93:6a:18:44:e9:a9:09:18:a9:df:9a:93:0a:
         c7:e6:56:d9:d6:8b:98:cb:20:a0:be:76:35:91:fe:99:60:d4:
         fb:24:ae:88:60:4d:10:60:81:20:2b:e1:ee:95:5f:38:b2:e6:
         a7:61:95:e0:5d:5c:34:4b:33:2a:e1:ec:a2:6b:9a:da:b8:bf:
         2b:43:c8:13:3e:72:f8:5f:51:39:2e:ac:18:69:3b:c0:73:f7:
         01:3c:e6:fc:69:5e:4d:87:df:01:e1:3c:ee:25:36:9e:68:16:
         6f:1c:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:57 2026 by rpki-client