Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60c29bf-fdec-356e-ae0e-034f0b335390.roa
File:                     d60c29bf-fdec-356e-ae0e-034f0b335390.roa (raw, json)
Hash identifier:          YzpCbEZkFrSgBNVNciI/Dd5cX86Ef8NRE9cyMGt3GlA=
Subject key identifier:   89:4B:70:A7:EC:7D:81:CD:19:25:5E:84:DF:67:C9:C5:8F:94:B8:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8794B85964C783B48F7480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60c29bf-fdec-356e-ae0e-034f0b335390.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     13367
IP address blocks:        24.118.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:94:b8:59:64:c7:83:b4:8f:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=f65a7e66-b981-4287-9319-0706cf7192aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:af:08:d5:8f:e2:24:8c:16:a7:39:58:ad:
                    67:db:47:df:76:73:c0:0b:df:10:b9:6a:24:ff:b0:
                    95:a3:04:8b:a5:48:af:0f:3a:05:98:05:59:33:3d:
                    06:26:50:ff:a5:41:79:5e:f2:cc:67:70:64:f0:60:
                    8a:38:5f:91:30:4d:92:80:73:39:80:ae:a4:4f:16:
                    2a:31:f4:ef:9a:97:29:28:f4:87:01:7f:c3:17:cf:
                    d3:ae:e2:5b:d4:24:d5:c1:1b:28:af:ff:78:b2:b6:
                    22:66:1b:70:d3:c6:40:4d:ca:9d:e6:61:8f:53:fc:
                    ac:01:34:71:ef:55:b3:81:06:e9:00:e3:f6:81:df:
                    ae:c2:aa:fe:f4:26:8c:84:fe:86:53:96:14:f4:d4:
                    ac:27:e5:69:fe:a8:d2:51:dc:c8:ac:c9:ed:b4:ed:
                    cb:d0:f5:18:b4:17:ef:25:57:c2:b2:0f:a8:cc:0e:
                    4b:2c:87:51:31:b9:f3:69:06:9b:ff:9a:0b:dd:3d:
                    82:cc:c1:44:70:40:f3:17:3c:cc:9b:80:5b:49:0d:
                    89:14:a9:db:72:24:f7:01:eb:84:7c:0f:0e:0f:4c:
                    a3:25:ed:b2:35:95:1f:69:a7:8e:ee:4f:c4:4d:5c:
                    c4:a6:5c:4b:17:7e:72:7f:c8:f9:3f:2d:53:9c:04:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4B:70:A7:EC:7D:81:CD:19:25:5E:84:DF:67:C9:C5:8F:94:B8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60c29bf-fdec-356e-ae0e-034f0b335390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:ec:67:5d:b5:b9:3f:f1:22:29:ed:31:61:1f:73:ce:2b:
         e3:d3:12:2f:d3:ed:81:ac:64:6e:d0:a3:4d:72:e8:24:4d:9e:
         18:39:52:fa:0a:cf:99:81:49:57:79:ec:02:24:b3:dc:af:53:
         c0:12:9e:22:a2:87:37:76:d2:f9:81:eb:f3:cd:76:75:a8:08:
         27:25:7e:b6:11:04:58:c8:09:23:54:26:1b:34:3a:fd:30:ad:
         de:20:46:f8:17:98:57:47:05:03:81:48:96:82:3f:88:35:0e:
         b4:c6:cb:dc:cd:27:e0:99:0f:16:41:cd:d7:7d:79:35:0c:53:
         1c:3f:bd:d6:3c:e2:f3:7d:ae:df:8f:9f:a5:a0:cc:d9:ca:d0:
         11:89:92:9a:57:de:fe:8d:b3:13:2c:19:ee:60:99:3b:bb:83:
         cd:6e:e1:06:ae:98:b7:ae:98:4c:92:c1:f4:93:bd:ef:42:b7:
         6b:a6:9b:3c:85:89:1e:81:91:bc:56:c8:61:11:eb:54:3f:21:
         a7:49:05:7c:f0:13:14:f2:b2:11:97:48:c5:c4:37:b9:5b:71:
         06:f3:08:e6:f1:db:f9:9b:9f:d9:98:0f:ae:b8:c8:e3:cf:9e:
         c0:56:24:c6:4d:01:2b:75:db:7a:2c:13:f1:22:9e:18:0a:5c:
         6a:67:bb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:38 2026 by rpki-client