Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e944a51d-f7e7-3a61-a0cf-2e8a09c1a7e4.roa
File:                     e944a51d-f7e7-3a61-a0cf-2e8a09c1a7e4.roa (raw, json)
Hash identifier:          XA0BzCTg231AgUiDmU4mTJZXVxD5UF3Up92/qDdiX9E=
Subject key identifier:   1F:06:AF:2B:95:CC:F1:EB:BB:90:83:84:FD:0A:20:8A:3B:D1:E0:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D810061C21320B64FA7D5BD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e944a51d-f7e7-3a61-a0cf-2e8a09c1a7e4.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        24.30.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:61:c2:13:20:b6:4f:a7:d5:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=fbbaa6ca-83c8-4049-be51-4215f7506eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:75:9c:c3:e7:a3:7b:b1:20:8f:17:70:2e:
                    6d:df:e7:e2:a0:61:58:26:33:fe:bc:bd:fd:1d:2f:
                    e9:9e:bb:6e:bb:39:a1:90:e6:2a:83:4d:b6:00:22:
                    d4:a7:a7:fe:10:84:e1:72:93:31:3f:5b:bb:3c:cd:
                    bb:c0:4b:fb:18:0d:ee:77:a7:53:3d:da:0e:70:81:
                    34:73:52:e7:35:3e:06:70:ec:de:d2:bc:a3:2a:e1:
                    b8:96:54:f0:ea:ba:de:99:da:69:4b:97:aa:60:b3:
                    ab:b6:5a:3d:29:4e:44:60:99:8b:64:e7:ca:2c:30:
                    29:33:66:f9:23:e9:71:e0:47:7f:a0:bc:97:c9:29:
                    f8:ab:28:ba:d2:69:57:1c:4b:a9:c6:4d:18:eb:4a:
                    78:6f:b9:a1:bb:ce:a0:c5:22:33:91:89:24:2f:3c:
                    78:40:26:0a:5c:f3:4f:ee:d9:fe:57:d5:09:dc:e1:
                    51:d3:af:44:a1:92:3b:0a:b8:ca:b5:7e:82:c6:57:
                    1a:5c:63:7b:eb:3b:0a:4b:52:f6:5a:2c:39:9c:cc:
                    73:04:a8:e5:d1:93:45:f6:9e:4b:e7:b5:25:12:7d:
                    7c:d3:73:b3:ee:e9:f9:26:86:97:00:4f:7d:95:9a:
                    58:d6:53:86:aa:e0:29:67:f9:fa:57:cf:bf:57:ab:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:AF:2B:95:CC:F1:EB:BB:90:83:84:FD:0A:20:8A:3B:D1:E0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e944a51d-f7e7-3a61-a0cf-2e8a09c1a7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:94:df:59:32:27:0d:6e:14:c6:77:7e:47:a0:65:a8:c4:8a:
         3c:a4:c6:57:0a:14:e6:ff:92:1d:b7:50:74:4f:35:bb:28:fc:
         17:f6:a8:d2:e5:3e:dd:58:a1:99:2b:19:98:99:18:e8:82:a0:
         dd:9e:35:dc:47:55:86:15:4d:85:f1:44:78:ea:67:2b:11:ce:
         9b:b6:f0:c8:a0:4d:5d:d1:68:30:d3:bb:23:65:bb:2f:78:42:
         c3:2b:d9:30:59:77:85:04:33:3f:7b:af:13:3e:0d:41:f0:01:
         62:a4:37:be:e1:19:a6:5e:62:bb:b8:44:53:98:23:0c:36:25:
         c2:3c:06:0b:e4:18:61:3e:27:fa:d3:2c:6e:99:70:6e:29:b0:
         46:8d:6d:2c:77:ed:60:b5:44:04:e0:75:24:c5:b7:f6:91:51:
         0c:33:e0:b6:d7:a8:a8:18:d1:7d:0c:29:6f:60:b5:aa:c9:0b:
         42:f6:bc:27:94:d8:e5:9f:d6:8c:af:c0:91:0d:5c:1d:eb:53:
         c7:19:de:d3:28:08:31:e0:f4:eb:ea:df:25:f9:fe:8c:38:c8:
         1f:e2:76:aa:55:06:5a:29:be:04:1a:a5:f2:c6:1d:53:6e:1b:
         a7:d7:76:28:cf:08:10:de:cb:31:d5:0c:b3:ed:85:dd:8e:ea:
         87:24:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:30 2026 by rpki-client