Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda51e01-0ef2-3196-9e88-f13754f6c951.roa
File:                     bda51e01-0ef2-3196-9e88-f13754f6c951.roa (raw, json)
Hash identifier:          vY+U7NpCur5oSmY0i5vWOFoFUZDUabrRbNkVoQ0ZH+k=
Subject key identifier:   A7:11:CD:FE:AB:0D:F6:A8:5A:E3:34:1C:8E:59:12:E9:0D:AD:CA:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB899738114762E620F380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda51e01-0ef2-3196-9e88-f13754f6c951.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        24.21.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:89:97:38:11:47:62:e6:20:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=b29fad4c-29c2-46e8-9104-09025f863c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:ee:47:a9:91:b5:99:01:16:8e:9d:b9:4c:
                    e3:52:75:2c:23:55:21:05:46:48:cb:fb:c4:ee:0b:
                    19:85:1a:2b:f5:19:0e:35:fe:0a:dc:95:37:0f:e2:
                    76:04:3e:7b:54:63:f6:49:40:b5:d5:97:e3:e5:17:
                    b8:d4:8c:13:50:61:3f:8e:05:f2:4d:b5:73:47:83:
                    2a:fd:6d:43:9b:58:ac:36:71:7f:25:9e:ca:0b:90:
                    18:81:6e:c7:b8:09:56:f7:5c:28:ee:30:df:20:e1:
                    c3:29:29:da:02:2f:38:e5:0c:43:5c:06:1e:0f:6f:
                    e8:71:ba:70:a6:c0:d2:37:4b:bf:f0:c8:81:20:9c:
                    ab:de:d3:93:70:af:f0:30:6b:eb:6a:6e:1e:36:df:
                    f9:27:1a:6a:91:c4:cd:ef:2e:d7:85:f5:b4:20:9e:
                    8b:85:36:96:82:18:96:f3:cd:97:de:d2:a1:b9:53:
                    fb:b5:06:70:54:6d:fa:84:e9:8d:f9:a6:09:63:ea:
                    db:65:9c:eb:5d:51:bb:87:dc:21:69:62:53:73:bd:
                    50:b9:30:9d:93:e5:b2:09:f2:97:a7:ed:a7:76:e0:
                    a3:bc:ce:77:5e:91:71:41:53:cf:2d:bc:71:57:33:
                    b2:41:f3:a2:bf:97:37:b1:0d:6f:a4:ad:38:8a:5f:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:11:CD:FE:AB:0D:F6:A8:5A:E3:34:1C:8E:59:12:E9:0D:AD:CA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda51e01-0ef2-3196-9e88-f13754f6c951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.21.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c1:53:a3:f8:f5:22:bf:6d:16:a8:40:bb:4f:bd:1d:c5:67:
         23:1b:9f:bc:a2:a5:32:d2:4e:11:2d:26:4a:8c:b0:38:a6:4e:
         d5:3b:de:e3:99:1c:2e:93:47:8c:67:ff:50:fa:5d:de:d6:b2:
         86:7d:75:69:8b:aa:75:0c:64:47:cc:83:e0:b0:48:ed:d7:9d:
         b6:78:d6:e8:e0:a5:ab:28:ad:1c:22:77:24:c0:cb:37:fd:f3:
         b9:18:cb:99:eb:55:02:58:3c:89:f9:69:57:81:80:7b:62:10:
         01:54:c6:6a:2a:4b:4f:cc:f1:73:fe:e2:18:f5:a4:b9:fc:92:
         8d:2b:2b:7b:b9:54:ac:46:d6:45:06:35:4c:a9:c4:c3:c6:56:
         3d:ee:64:2a:e0:39:11:c7:0f:da:ce:4c:8a:ff:70:02:05:c0:
         aa:25:51:48:e0:c8:7e:2c:a3:5a:9e:b6:81:aa:cb:67:54:4a:
         72:34:12:f1:5d:73:af:c7:52:d6:ad:5b:da:76:7e:97:96:a5:
         8b:66:df:5b:14:73:7f:2b:13:6a:7b:34:d0:99:44:e2:6e:82:
         7d:08:1e:a4:67:8e:af:79:01:d0:e4:5f:de:30:5f:37:47:42:
         5b:3b:5c:3c:80:b6:93:b5:92:6c:8c:d8:c3:18:b2:90:bf:70:
         d0:bc:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:30 2026 by rpki-client