Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3eb67d9-dec7-383f-9ee4-645015ae0dc9.roa
File:                     c3eb67d9-dec7-383f-9ee4-645015ae0dc9.roa (raw, json)
Hash identifier:          wmVBKaQnK1QjWHi7+dNnG9JDv3+kknqVLcY5H6GVlEQ=
Subject key identifier:   0C:65:BF:98:81:62:A3:3C:0E:01:0D:BD:75:66:F8:61:FC:A0:8C:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA532DB054F84322647640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3eb67d9-dec7-383f-9ee4-645015ae0dc9.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        24.22.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:53:2d:b0:54:f8:43:22:64:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=13086f75-1554-4ea8-b2c1-144b344bb15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:d4:50:fa:ab:b4:6f:c4:c8:2c:2e:04:e3:
                    09:f4:ca:36:c2:0c:14:e3:d6:ab:1c:a2:e0:32:59:
                    9b:ca:c9:8e:ad:01:48:2d:e1:1f:6e:af:3b:9b:86:
                    c1:62:9f:17:dd:65:fd:21:30:7e:61:b6:a6:c9:18:
                    d3:7f:93:0d:13:3d:74:6a:d4:df:43:fa:36:a9:c2:
                    be:23:ab:65:92:23:00:e6:09:c0:00:41:17:dd:7a:
                    6e:f2:29:26:4b:d2:01:13:6b:e9:a5:e6:d2:99:0d:
                    7f:4d:c4:38:6d:49:c0:04:62:fd:78:ba:a6:f3:e2:
                    2f:ed:1d:ab:18:9e:0d:9e:55:d4:88:f2:9d:fb:56:
                    e6:d3:63:44:e0:b1:73:4b:e8:57:38:63:70:61:20:
                    74:9e:02:18:bf:fb:03:f9:50:06:73:d6:56:8f:54:
                    7f:49:61:15:76:ee:e0:b8:0c:0f:21:f9:4d:5a:32:
                    34:31:65:a7:fd:ef:e8:74:93:73:04:ff:9a:a6:4b:
                    2e:96:1f:f5:9c:e2:a9:01:dd:eb:c3:70:19:b3:ed:
                    8d:44:77:04:2a:2a:92:92:2b:f1:06:30:3e:c4:1c:
                    dc:b4:f0:70:89:42:80:2a:71:84:7a:38:c2:ef:67:
                    16:14:04:c4:f2:65:fd:f3:2a:26:0b:ce:25:0d:98:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:BF:98:81:62:A3:3C:0E:01:0D:BD:75:66:F8:61:FC:A0:8C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3eb67d9-dec7-383f-9ee4-645015ae0dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:df:21:92:94:d7:40:1b:1a:56:20:53:f6:5d:9c:f2:b9:d9:
         e3:2f:1d:b2:36:47:6c:12:57:5d:97:71:25:ac:27:ff:f2:cc:
         52:53:5a:e6:00:1e:3e:e3:71:eb:84:f4:55:83:0a:2e:0a:2d:
         06:8d:7e:0f:4e:0d:60:d3:56:f5:de:9c:c6:73:1e:df:db:ba:
         6e:c1:6c:dd:35:da:30:72:ab:71:89:8f:c2:0b:72:7c:f1:77:
         cc:d9:e8:ab:8c:c0:73:46:c6:2f:c6:00:9d:54:15:e4:c3:19:
         ff:34:81:ef:04:d2:5b:7d:12:a9:d4:d6:bd:a4:b6:80:5f:8a:
         7f:9d:86:e6:e4:7e:9a:75:5a:05:29:00:05:eb:77:94:8c:17:
         a1:a9:22:cc:f5:4b:99:08:fd:d3:3a:93:e7:bf:fa:14:16:94:
         91:7b:c7:66:cb:37:4a:27:22:86:0e:6a:35:f0:81:5c:e8:4d:
         52:3d:e0:99:fc:17:0c:1c:1b:33:5b:d9:82:03:4f:b9:54:7f:
         38:e4:e8:e0:01:d1:97:3c:95:b6:51:19:16:c1:aa:d6:ae:a1:
         60:75:de:85:11:8f:70:0e:90:47:3d:7d:cf:c0:8d:6d:45:ba:
         26:09:8c:fa:86:93:db:dd:7d:93:12:d6:5e:e6:27:9d:61:35:
         7f:40:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:25 2026 by rpki-client