Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
File:                     bb344849-76d8-36a8-801c-c856e304a3a6.roa (raw, json)
Hash identifier:          SjlZVO+kOOGu4XBY8tr4XA+MNeDjdGrc10+C4vNRITc=
Subject key identifier:   B6:B1:0C:D3:C6:14:AE:93:88:BB:68:D5:60:53:F1:38:96:EC:ED:4F
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584E1E444D91D4413374BAB3D780
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33141
IP address blocks:        24.38.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4d:91:d4:41:33:74:ba:b3:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=dded3621-e486-4390-8884-fee96ebb3bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:2e:81:2a:d2:74:f2:7b:f8:f7:0d:15:b3:
                    8b:4c:41:dd:f5:55:4f:4c:9b:20:db:02:62:e5:33:
                    fd:43:53:e7:6c:72:e8:c1:b6:79:04:24:83:32:bd:
                    27:f7:78:90:13:9b:0d:f4:24:da:eb:77:02:4f:42:
                    76:d8:3c:7e:2a:8a:26:cf:4c:c5:86:cf:0f:cc:78:
                    49:ff:ab:6d:8b:68:64:69:d0:26:54:7b:89:53:50:
                    24:76:06:16:aa:c9:0a:d0:fc:08:b1:6e:9a:7e:d5:
                    97:8f:4e:95:a4:a5:11:0d:50:46:8d:60:cc:a0:e7:
                    99:1d:4f:d8:7d:8e:4e:d2:a5:91:ea:b0:fc:64:f8:
                    76:b1:78:1a:c7:90:f4:46:67:4b:d0:71:20:0e:06:
                    83:50:5a:1f:0b:79:8e:06:cd:26:37:f5:01:ee:be:
                    73:8e:b3:0e:23:3a:10:4c:9d:11:5a:f2:c2:f2:bc:
                    79:27:6e:df:0f:d0:82:66:7b:bc:d2:ed:d5:0f:16:
                    c2:80:d8:81:cb:83:f0:34:f1:7e:88:3e:d4:65:b1:
                    45:da:6e:81:bb:64:96:44:9d:95:ee:ca:da:b5:32:
                    1a:25:f0:f1:e0:bb:32:91:35:57:80:e8:65:32:bd:
                    90:05:2e:78:35:b6:8e:80:9a:e1:69:85:d4:f2:13:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B1:0C:D3:C6:14:AE:93:88:BB:68:D5:60:53:F1:38:96:EC:ED:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:30:65:db:21:c9:22:c7:2a:73:39:0e:c3:38:28:d8:50:32:
         d3:e8:56:a6:eb:46:81:16:86:50:15:c2:3f:09:44:35:06:54:
         2d:11:e0:e5:3e:34:88:14:17:a6:a6:45:de:75:fc:23:de:fe:
         fa:96:f7:f1:6b:d4:46:4c:d5:ff:4c:e7:06:32:c5:25:c3:fa:
         69:30:72:8c:2f:0e:27:92:e1:32:70:c5:eb:b7:20:cb:37:ed:
         f9:74:d4:e9:aa:c1:e2:98:d2:d3:63:bc:f4:70:bf:2c:98:9a:
         cf:a5:48:a3:ad:bb:20:ed:80:04:bd:bd:3b:71:b8:98:4c:9c:
         bc:e3:c9:8c:68:8f:f0:40:79:0b:56:04:eb:41:a9:3b:f1:de:
         c4:ab:2e:13:b2:0a:ff:de:72:dc:6d:6a:cb:47:2a:91:09:e0:
         22:a1:89:b7:e2:e9:ea:d9:e1:5d:80:3c:5b:8d:b4:d8:3d:95:
         63:71:6a:3c:91:fb:29:bf:43:46:36:7e:5a:14:9a:a4:14:f6:
         61:84:ba:e4:65:4e:00:cb:c5:21:8b:01:53:3c:29:1a:a8:b7:
         78:13:53:ca:62:ef:f1:83:30:e8:e9:29:e2:ef:8e:8a:a6:16:
         d6:bd:fa:4a:e8:f3:86:5e:44:1d:63:8b:05:0e:62:c1:39:0d:
         94:e3:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:49:54 2026 by rpki-client