Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439f0597-412c-3615-910a-5ff03d40baa4.roa
File:                     439f0597-412c-3615-910a-5ff03d40baa4.roa (raw, json)
Hash identifier:          yeKAlX62mMBLX+BT83zsBstlaOlrTCT0322k3oZAO7Y=
Subject key identifier:   83:29:DA:DC:2C:5F:D3:6F:8E:1E:B9:0B:CE:68:85:24:FE:C3:49:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497A769E610CEA46DE5065E8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439f0597-412c-3615-910a-5ff03d40baa4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        24.149.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:76:9e:61:0c:ea:46:de:50:65:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=81fe74f8-f45f-4537-84a1-d4f8e5ae9fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:fa:39:8d:6d:dd:40:c2:14:44:2e:6e:ff:
                    cc:6b:14:5b:9b:40:e8:dc:e9:31:7b:ed:77:d8:86:
                    d5:fe:bf:45:8d:41:81:76:e2:40:b1:46:4d:d4:4e:
                    51:98:b0:71:18:e2:8e:02:3b:3f:c2:02:40:5e:df:
                    f5:70:f2:da:f0:da:60:89:8e:d2:8e:fc:b6:62:dc:
                    c6:b9:40:9c:7d:ca:dd:bf:39:62:ec:bc:83:a7:ee:
                    d5:6f:4a:83:c6:7c:94:4d:8d:74:47:33:af:24:d8:
                    1d:47:f1:5a:15:0e:50:fc:71:05:e7:1a:41:60:ef:
                    76:80:54:83:06:6e:50:35:82:b7:5a:b7:6a:e0:54:
                    df:f0:91:0e:f1:49:cc:98:38:f2:03:c6:fd:ee:74:
                    58:4e:49:a2:24:4b:14:d0:d5:d0:6c:6f:5f:2c:e9:
                    e3:e3:d7:50:51:30:4d:48:db:99:c0:e6:a4:02:39:
                    26:05:e6:f7:e5:15:b5:2d:ed:34:3f:3f:bc:73:c7:
                    bc:9f:d3:2e:17:ce:b8:8b:bb:de:8e:07:82:16:7d:
                    9e:11:5f:75:3e:fc:5f:16:d7:57:6d:65:4b:ac:af:
                    e5:a0:ef:cd:3a:f4:4a:e1:fa:fb:95:15:36:a2:c8:
                    f6:87:88:8b:46:62:dd:c7:1b:2e:2e:b2:d2:36:6a:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:29:DA:DC:2C:5F:D3:6F:8E:1E:B9:0B:CE:68:85:24:FE:C3:49:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439f0597-412c-3615-910a-5ff03d40baa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f3:aa:1a:dc:41:9a:02:08:c5:92:6b:af:39:57:a1:9d:d9:
         ea:12:d8:8f:b1:e5:75:9a:3a:54:e7:7a:d4:06:8b:89:80:d0:
         fa:64:62:bc:36:1f:99:7e:2e:ee:dd:bd:78:ca:c9:73:ee:1e:
         2f:51:0a:c0:ee:f1:e9:8c:30:e9:4b:29:9b:5f:50:5c:3b:5b:
         0c:de:d9:4c:a5:a8:27:bc:a6:e3:d9:bd:a6:55:ef:b0:2f:75:
         f2:29:bf:c5:3d:0f:d0:72:1f:01:06:c3:78:db:5e:be:b5:13:
         e3:3a:7b:64:19:24:ce:50:8b:92:7b:f2:7a:f0:ed:90:5d:82:
         b9:29:2a:ec:e8:ac:69:6b:0c:9f:77:10:1f:48:bd:a9:b4:26:
         b3:27:cb:38:37:b7:f3:8c:8e:87:0b:20:2a:e1:c0:88:4f:bc:
         15:94:81:14:60:98:8b:04:83:43:4f:cf:56:4a:6d:7a:96:69:
         5e:7d:8f:6f:dc:51:4b:17:51:81:df:5c:7e:76:96:95:af:2e:
         e1:05:24:48:6e:dd:4e:74:3f:00:8c:09:78:53:ec:af:b7:0b:
         f4:72:24:3c:1c:24:e7:d8:ac:e4:c1:ea:f8:81:b3:ce:eb:6f:
         77:c6:a2:35:f6:07:f1:00:16:86:48:ac:ef:70:72:48:3b:6d:
         05:d3:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:06:39 2026 by rpki-client