Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31c2f14b-178e-3fb4-8689-98b5fa718d7c.roa
File:                     31c2f14b-178e-3fb4-8689-98b5fa718d7c.roa (raw, json)
Hash identifier:          1eHN2xaREwLlG4paIVhP9q0tj0zPebofxlcQfB1ZoAc=
Subject key identifier:   59:F9:66:0A:F8:B0:97:C1:81:F5:38:26:D7:68:09:F2:AC:1A:2A:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36008100EA87F720EAB2CD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31c2f14b-178e-3fb4-8689-98b5fa718d7c.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        24.63.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:81:00:ea:87:f7:20:ea:b2:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=c5d4e22c-a2c0-48c0-a68b-ce9e74d269dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:88:a1:75:96:94:5b:be:79:57:af:f0:29:
                    71:12:38:15:b5:05:f7:ad:7c:19:23:c5:40:e0:3f:
                    e4:d3:3d:cf:2b:ed:37:8d:db:15:a9:b8:3c:5e:52:
                    75:cf:cd:79:bd:63:76:f5:8a:02:50:0d:2c:51:3d:
                    91:b7:99:79:b4:43:c4:f6:4a:64:ff:68:97:64:61:
                    59:d8:1e:e1:05:91:74:25:5a:71:5f:9c:2c:73:9e:
                    d4:5d:b5:9e:99:e2:f1:1f:38:76:5c:b7:e3:91:65:
                    cd:d6:1e:ed:91:fa:57:27:92:7c:bf:a6:7c:19:15:
                    0c:ac:de:75:3a:42:15:d9:c2:f6:b6:94:3e:61:8d:
                    22:94:83:a7:be:6e:63:1e:b5:95:55:66:1f:22:e5:
                    f3:8b:06:27:72:ae:5c:3c:67:d8:9f:bd:e6:c7:51:
                    08:67:02:3f:20:b5:0d:e1:ff:e6:e8:dd:81:24:68:
                    cc:7f:52:04:ad:c9:7c:a0:ea:d8:56:54:f7:0e:1e:
                    1d:40:87:20:58:7c:c5:6c:93:fe:4c:c5:a4:83:97:
                    4f:b6:a1:b9:70:63:e9:96:fe:06:91:64:1f:90:2d:
                    5c:e2:bf:94:93:d6:48:71:a1:11:54:19:34:63:21:
                    12:b1:96:97:0b:e5:6c:08:25:14:fc:0b:a5:6f:87:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:66:0A:F8:B0:97:C1:81:F5:38:26:D7:68:09:F2:AC:1A:2A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31c2f14b-178e-3fb4-8689-98b5fa718d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:85:6f:e7:f5:04:ff:78:4a:13:f6:11:8e:8e:de:fc:54:
         f5:85:ad:80:9b:d1:50:42:33:e2:92:1b:43:35:89:ad:c1:5b:
         ef:a4:6a:46:03:d0:8c:21:16:41:30:3d:52:b0:47:01:f7:43:
         c3:57:49:3e:1c:15:2e:f7:92:bf:86:e0:c1:72:77:87:02:df:
         b4:fb:a4:d0:00:da:06:3f:a9:aa:76:fd:3c:1f:43:6d:1e:03:
         8b:54:ee:53:44:8a:fe:45:d9:56:08:d6:27:2a:7e:8f:1f:0a:
         a3:82:9f:67:c0:28:eb:51:5a:98:b8:3e:4e:4a:01:2a:ed:32:
         a8:ae:ed:71:d0:9e:ae:fe:3a:60:43:c1:78:af:ba:a7:00:46:
         4f:b5:dd:69:eb:50:1e:31:b6:00:df:08:68:05:fe:d9:fd:11:
         94:86:bb:e5:73:e6:8e:e4:a4:ee:98:5c:6b:8c:ed:d5:7e:d8:
         d8:b5:61:76:f9:ea:a6:92:c3:48:68:46:af:23:30:15:43:01:
         6d:29:cc:a7:06:91:60:dc:81:7d:75:31:d4:53:de:6c:ec:ad:
         4d:60:56:da:f0:2c:15:35:dc:3c:83:8a:6d:c8:db:6a:66:8c:
         e3:19:c1:f5:53:18:5f:93:7c:76:e2:f5:c1:74:d8:ac:bd:98:
         d5:83:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:47 2026 by rpki-client