Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d65a40aa-754e-372e-97b0-1e2978962bd9.roa
File:                     d65a40aa-754e-372e-97b0-1e2978962bd9.roa (raw, json)
Hash identifier:          oDHH4wi0gsSsgBYZawDWEfTKvMwr0EykX5DoXfOquNw=
Subject key identifier:   95:81:2D:E5:5D:8A:98:AE:72:F0:3A:E0:18:2C:35:DD:17:F0:B8:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584C751E3442EF62567EAE7D4480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d65a40aa-754e-372e-97b0-1e2978962bd9.roa
Signing time:             Thu 08 Jan 2026 14:00:39 +0000
ROA not before:           Thu 08 Jan 2026 14:00:39 +0000
ROA not after:            Wed 08 Apr 2026 13:00:39 +0000
asID:                     7015
IP address blocks:        24.91.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:1e:34:42:ef:62:56:7e:ae:7d:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan  8 14:00:39 2026 GMT
            Not After : Apr  8 13:00:39 2026 GMT
        Subject: CN=979fd8f7-9877-4406-9751-7629b58854de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:e7:35:50:0f:b5:2f:4d:aa:5f:4f:68:79:
                    36:58:2c:5b:aa:21:61:03:dc:bd:d8:77:1a:93:8d:
                    eb:89:ce:6a:4f:63:e1:c9:c8:d6:d1:1a:71:ab:16:
                    ff:6a:ab:0f:87:8c:84:9e:4a:d3:20:82:c3:a2:0a:
                    57:be:b0:12:dc:b3:b3:f6:d7:1a:0d:7b:39:b1:70:
                    4b:71:b0:b2:53:2f:77:0c:f6:18:a6:aa:86:2d:39:
                    6e:55:56:f9:2b:25:89:79:bb:a0:57:ae:3c:dc:49:
                    79:77:5f:59:96:da:d0:9f:56:49:79:9c:90:57:ce:
                    27:23:0b:13:81:70:17:53:cd:64:b3:1b:cd:e1:f2:
                    3e:67:5a:a0:31:f8:ab:c7:34:cc:d8:bd:07:e4:52:
                    31:33:59:03:65:c7:d9:29:9b:69:1f:f4:84:08:ea:
                    5c:42:53:c0:1d:0f:bd:c1:7b:92:dc:29:88:67:d5:
                    62:4b:d4:e4:2a:15:ff:d7:56:27:e7:b5:fa:f0:f9:
                    20:3e:4b:a9:e3:7c:86:f9:db:4a:12:d6:b0:c4:d0:
                    66:54:45:57:1c:1b:79:2f:3e:7f:d8:06:25:24:ab:
                    81:a8:f6:15:0e:66:0e:a0:a9:e4:b5:b1:06:18:40:
                    13:e1:8c:31:d3:73:35:65:9c:a0:b2:a1:89:69:dc:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:81:2D:E5:5D:8A:98:AE:72:F0:3A:E0:18:2C:35:DD:17:F0:B8:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d65a40aa-754e-372e-97b0-1e2978962bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:1e:d5:e0:8e:d9:38:f4:4a:28:e2:e8:e2:93:e1:98:f2:21:
         09:98:2b:f7:19:2c:a8:b2:c4:18:ac:cb:f4:7f:a1:5a:8e:94:
         73:74:ef:ca:28:d4:88:24:a3:e7:f8:7c:bd:b5:0c:13:97:97:
         3e:a5:39:e0:24:7e:cb:ab:7e:b9:c8:6b:b4:f5:bb:33:c6:6b:
         52:80:ed:e7:58:74:eb:06:26:b1:25:2f:1c:14:52:57:f5:f0:
         8d:1a:07:48:a3:23:25:35:5d:dd:e2:4f:59:76:37:b9:04:3f:
         d3:99:cb:d4:e2:d0:a4:a9:45:77:29:1b:f7:0e:90:03:0c:28:
         ce:72:5e:88:94:10:04:b6:50:d9:4e:40:93:0c:bc:9a:ba:b3:
         c0:2e:77:6f:64:db:f9:72:51:fd:76:8a:7d:55:3b:d8:87:82:
         bb:17:19:18:fd:84:56:a7:b4:cc:19:b4:36:0b:60:e8:d0:58:
         af:08:bf:de:3f:66:eb:f8:9d:f1:a7:6e:9f:e0:b1:36:26:5c:
         cc:0f:12:25:28:8b:5e:2a:03:2a:80:66:e2:67:e0:b3:22:02:
         0b:75:47:16:ac:e3:b0:81:29:eb:39:ea:47:7e:88:80:14:ae:
         78:42:77:ce:73:50:fb:51:77:23:57:03:21:f9:22:7c:92:cf:
         8f:92:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:36:07 2026 by rpki-client