Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0325aa34-361a-3c22-b0bb-d1f2b923b39c.roa
File:                     0325aa34-361a-3c22-b0bb-d1f2b923b39c.roa (raw, json)
Hash identifier:          4R84TN0g0cQZT9Fx0LVVYwJPEGAG2gJNt2MwVvsct/Q=
Subject key identifier:   E2:7A:12:E4:06:8C:7D:CC:79:EC:7A:B7:99:1D:95:C9:42:A8:2F:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7A3752A5DA4CE25DAF100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0325aa34-361a-3c22-b0bb-d1f2b923b39c.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        24.98.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:a3:75:2a:5d:a4:ce:25:da:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=a745171d-746b-4d9e-a0f0-ce360b45b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:21:3c:b4:64:b1:0c:00:b6:9f:8e:bf:4c:
                    4f:f1:aa:c0:7e:52:3a:d5:73:d6:d4:c2:e1:ef:55:
                    a8:bd:62:20:d8:67:91:0b:a0:ea:40:eb:d9:d8:62:
                    41:4b:4f:1f:2c:71:db:d3:5a:12:a1:5b:07:6e:56:
                    57:48:3b:0a:6f:84:67:17:f2:7c:2e:d3:8c:86:54:
                    55:ce:a2:d4:e7:05:5a:40:20:b1:76:8f:f5:54:60:
                    cc:12:f5:64:86:e8:b6:5a:fa:07:fb:2b:12:23:69:
                    4f:d6:40:d1:d5:ca:fc:71:21:19:c1:6c:da:f0:34:
                    96:d4:fc:e4:81:2f:2e:92:ba:d0:ef:34:be:07:a8:
                    c3:a9:86:27:f6:e8:0f:66:f5:16:69:79:ed:aa:aa:
                    4a:38:cf:3d:e8:82:08:52:52:dc:cc:a2:7d:c2:4a:
                    fc:eb:90:c5:98:15:de:a3:2e:9b:2d:a1:76:c2:9b:
                    0f:03:bb:d0:af:03:9b:d0:56:b4:ca:4e:72:d9:16:
                    8f:98:88:98:f8:a5:dd:91:62:fb:c2:55:0c:50:ef:
                    7f:32:d0:a0:ec:79:c1:5e:f4:64:ad:06:e3:7b:50:
                    88:74:75:76:b7:d7:9f:19:f3:fc:d5:96:94:88:64:
                    48:2b:33:48:3f:e2:98:14:7b:4e:e7:58:f9:9e:0d:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:12:E4:06:8C:7D:CC:79:EC:7A:B7:99:1D:95:C9:42:A8:2F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0325aa34-361a-3c22-b0bb-d1f2b923b39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:47:97:dd:72:55:c5:ad:dc:6d:41:df:06:59:ed:9f:06:f5:
         c8:e4:03:c4:6b:ee:f9:8d:ef:4d:43:45:b1:32:e0:1c:9c:a1:
         11:cc:8b:e5:73:9a:11:16:1a:ae:c2:89:14:f0:45:57:58:f4:
         be:ae:5f:5a:1f:a5:d1:ea:30:9c:6a:a8:ac:84:18:a3:5c:4b:
         d9:e7:c8:4e:e6:d8:cc:e7:f7:90:9b:2a:c1:bd:fa:96:cd:4f:
         9a:52:d2:4f:b0:08:75:a5:0e:ba:1b:09:8e:95:1a:83:54:17:
         bc:09:cb:cb:18:c1:7e:af:c0:d0:ed:a2:55:5c:14:2a:a3:9e:
         b2:86:24:c8:03:c0:2d:72:56:dc:c8:51:55:e1:4c:21:cc:1e:
         42:84:8e:97:cf:da:49:cf:4d:be:a8:2e:77:fa:e8:f4:21:a8:
         83:49:64:8c:fb:f7:50:03:67:c9:9c:cf:d3:2d:11:86:44:c5:
         73:58:be:48:6d:27:d0:49:c4:a8:d9:ef:bd:f5:88:93:c5:db:
         85:0a:32:17:ca:46:51:11:ce:5a:02:fd:58:f3:5c:72:1b:43:
         79:8e:d9:bc:f8:e4:32:77:25:e4:a5:35:2b:e8:bb:60:b8:ca:
         26:4f:d2:60:63:01:fd:47:00:7c:45:b5:81:25:6f:85:0b:91:
         0d:98:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:24:38 2026 by rpki-client