Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2203b85f-bceb-38cb-8f01-f6d8b55823e0.roa
File:                     2203b85f-bceb-38cb-8f01-f6d8b55823e0.roa (raw, json)
Hash identifier:          aIdrk6/ziUjMQnMlHXSv53r7dPRnxGiNfKl4GvlTMVw=
Subject key identifier:   F7:96:AD:3D:0B:FE:AD:B0:9A:70:4C:C9:66:27:B2:EC:18:C1:ED:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7FFC72696206CA7955C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2203b85f-bceb-38cb-8f01-f6d8b55823e0.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        24.99.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:ff:c7:26:96:20:6c:a7:95:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=8f548e81-4b34-45b5-8de7-3f2fe1ad9ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d4:30:b6:6a:18:6c:2f:92:fa:58:67:73:b8:
                    36:88:44:18:22:54:cb:a2:db:17:1b:3c:7b:62:99:
                    f2:14:6e:da:77:7c:1e:8f:07:a2:25:b1:74:30:5c:
                    44:51:ad:a2:7e:90:2d:55:3f:be:20:bc:8e:78:55:
                    1e:13:cd:9e:35:5d:f0:6d:23:33:5e:be:07:b1:c3:
                    de:78:93:3d:55:53:aa:f3:32:e9:6b:fe:4a:4e:43:
                    be:81:e3:3d:ff:d2:0e:11:cd:47:35:0e:18:70:29:
                    9f:32:76:7c:57:a1:c8:7c:da:f0:e5:40:23:d0:c1:
                    20:33:c4:66:6c:0f:41:c9:0e:ea:04:97:26:f0:4d:
                    77:4b:16:bd:b5:69:4d:71:ad:8d:e8:87:fc:db:5b:
                    ce:6b:c9:dc:6d:04:1a:1d:10:5a:ae:27:8e:2a:ee:
                    cd:cb:fc:c4:fe:8a:1c:a8:0e:7e:60:fc:35:aa:e5:
                    8d:28:bc:e8:8e:66:58:6a:7f:bc:8e:9b:0e:c4:d4:
                    5c:a1:8a:2f:d2:a7:30:e6:6f:33:44:46:5c:48:43:
                    98:03:bb:ae:11:9d:27:8a:e8:55:b5:3d:eb:2e:a8:
                    30:aa:d4:5a:22:6a:27:92:24:73:9b:43:14:a9:8d:
                    94:a5:31:12:49:70:13:8e:94:f4:53:91:74:25:71:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:96:AD:3D:0B:FE:AD:B0:9A:70:4C:C9:66:27:B2:EC:18:C1:ED:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2203b85f-bceb-38cb-8f01-f6d8b55823e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:f2:67:6f:63:99:e5:16:b8:da:64:2a:36:1f:92:47:68:
         4f:8f:3b:dd:33:59:df:21:ca:5d:33:7b:c8:a5:90:8b:6d:41:
         d6:54:6a:15:17:04:cd:6c:5c:7c:f8:97:0c:75:39:f2:0d:d2:
         23:7a:b0:0f:ac:bd:a8:77:70:ac:ab:d2:f7:36:87:63:78:88:
         62:0d:4b:40:df:cb:d6:c4:6a:a7:b8:a9:c0:69:b2:a5:87:81:
         be:19:9d:25:10:93:80:c3:51:27:61:73:0c:65:ba:5c:d9:46:
         8e:e8:0e:f2:c8:53:d6:1c:03:bb:1a:56:5a:d3:16:46:17:a5:
         f3:e6:c4:c3:ba:e5:f9:de:a7:56:98:5a:d2:7b:9f:ae:e3:9b:
         b6:29:40:2f:c5:38:d1:71:38:16:74:38:87:d4:d4:b2:32:bf:
         bb:0c:f0:b3:84:d3:d9:80:70:14:b3:11:2f:2d:8d:b0:73:08:
         e7:57:16:d3:7c:4c:e5:65:fa:6c:fb:0d:a1:1f:41:bb:77:4c:
         07:87:f6:45:a5:1d:f1:56:fb:a1:78:b8:87:4b:3d:ea:59:4f:
         6f:b2:b1:58:5a:c1:32:e9:58:43:64:eb:a2:42:6e:b0:75:fc:
         2f:dd:45:9e:01:14:a7:8e:50:cf:4c:31:f1:0a:62:91:f1:28:
         05:9f:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:48:48 2026 by rpki-client