Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8404e56-9917-3e7b-affb-ea70bc3c7256.roa
File:                     f8404e56-9917-3e7b-affb-ea70bc3c7256.roa (raw, json)
Hash identifier:          4922jGQBAMMjZEPgclS3sG2cAwE75TfTc5d9bLb5Mf4=
Subject key identifier:   6D:89:C1:B6:9B:EF:8C:64:60:7F:C5:2E:B7:B7:72:3B:BE:11:14:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE866C5163A4B81D52515680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8404e56-9917-3e7b-affb-ea70bc3c7256.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     13367
IP address blocks:        24.7.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:6c:51:63:a4:b8:1d:52:51:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=3d126529-3d60-470e-aafa-7e9d4424c52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:05:55:84:24:80:53:46:8b:c3:b7:52:3a:
                    87:bf:79:b5:54:81:71:32:68:73:af:62:ed:85:80:
                    6c:1d:37:b6:ac:60:1f:49:3c:fb:e2:fe:bf:9a:12:
                    fa:41:fd:d9:48:34:ff:c9:51:29:be:2f:13:3a:c6:
                    f3:ec:00:52:53:f4:83:6b:00:99:97:b9:ca:48:95:
                    f9:69:24:d2:98:38:bf:2c:c5:25:ba:6b:dc:eb:c7:
                    04:a1:b9:80:73:4e:7d:09:83:04:52:73:d6:d0:8b:
                    4b:ea:c6:1d:9b:d1:ce:b6:f0:c5:0f:8f:3b:43:ee:
                    a4:3d:36:ea:2d:33:02:50:85:e8:7b:c5:71:fc:ab:
                    ec:72:b4:93:d6:17:3c:0c:43:ad:66:3b:1f:9f:55:
                    7f:f3:53:14:e7:2a:77:de:8f:22:61:f8:79:58:37:
                    a5:a3:d6:fa:3b:af:85:d8:31:83:21:48:8f:5c:37:
                    e2:4c:96:34:fa:a9:5d:e5:09:ef:54:cd:21:5b:79:
                    64:c1:42:3d:e9:d7:9b:ab:3d:46:ee:9e:1d:e1:54:
                    77:20:30:96:75:51:5f:c0:35:79:61:1f:f3:56:41:
                    9e:fd:13:41:fd:bb:a0:bb:c2:d0:cb:dd:30:35:7c:
                    20:b0:8d:a0:2a:17:35:e9:08:01:70:04:f7:12:6c:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:89:C1:B6:9B:EF:8C:64:60:7F:C5:2E:B7:B7:72:3B:BE:11:14:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8404e56-9917-3e7b-affb-ea70bc3c7256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:24:3a:79:a5:7e:35:61:32:5c:96:6a:62:f7:28:cc:46:d9:
         91:2c:5f:c6:17:08:32:60:52:7a:b4:5a:fc:d8:e8:0a:a4:da:
         64:cc:fb:dd:85:78:23:e0:2e:36:3c:98:24:39:31:cb:63:96:
         20:f9:95:7a:42:34:85:a7:32:77:06:d9:3d:d1:6c:d6:f2:79:
         4e:10:ca:2b:3d:be:8a:14:4b:b4:11:42:42:b4:be:fd:5e:66:
         09:aa:ae:01:5a:e1:6a:d1:00:fa:d9:d9:e7:16:c0:9b:19:db:
         46:3a:78:56:bb:ee:96:a9:2c:42:fc:c2:56:dd:c2:c9:a1:e2:
         09:e5:91:db:07:ec:0e:8f:c1:8a:d1:f4:30:e1:fa:f1:d0:53:
         cf:db:ca:ca:d2:ba:3e:69:44:4d:72:20:14:a5:5d:3e:44:a2:
         fa:ff:d0:dd:f8:5c:24:67:4a:08:d8:5a:b0:cd:7a:46:8d:da:
         03:db:3c:31:5d:49:fc:ae:98:ea:ff:11:2b:18:60:80:53:59:
         d2:bb:5b:96:15:13:fc:29:ac:60:0e:97:c7:a3:5b:2b:6b:1d:
         c8:f9:a3:7c:2c:85:c7:e0:af:b5:f0:10:9b:a4:95:4b:76:6e:
         a1:e7:57:51:d3:fb:84:7b:60:c2:11:ca:ec:2e:46:1b:6a:0a:
         13:46:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:14:14 2026 by rpki-client