Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7731da2a-e258-3cbc-a663-7b3eb3fe910d.roa
File:                     7731da2a-e258-3cbc-a663-7b3eb3fe910d.roa (raw, json)
Hash identifier:          /M/BVIcVw3b/e87rMuD7S7BESeG+7oUG8trBivHLqnM=
Subject key identifier:   51:C0:EE:0B:E1:6E:4A:55:AF:45:BA:21:4E:1F:93:C8:EA:A9:0F:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36007C38537B90F79A833880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7731da2a-e258-3cbc-a663-7b3eb3fe910d.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        24.34.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:7c:38:53:7b:90:f7:9a:83:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f1b868ac-2f63-4918-93e9-1b2589470f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:f8:f7:2f:29:fc:86:4c:94:42:cc:77:1a:
                    ac:dc:95:c6:fc:15:51:86:dd:30:a5:c2:2f:e2:e1:
                    5a:1e:d9:0e:86:bf:d4:26:e6:1d:d5:18:1d:cf:81:
                    69:19:1c:48:01:5a:a4:52:78:d7:f4:c6:7e:f3:05:
                    8b:fd:c1:71:54:77:12:c5:06:a7:04:3c:ad:27:4c:
                    3a:ef:ea:34:c8:8e:e3:87:b9:42:42:55:d0:54:46:
                    33:6a:69:e1:da:e2:36:5a:2d:ef:6e:3b:71:63:0a:
                    6e:98:cf:37:8c:1f:fb:8b:83:be:c0:45:95:bc:66:
                    aa:a1:c0:ac:8d:ae:b2:cb:e1:c6:31:42:5b:8d:88:
                    25:1d:1e:f8:b9:0d:85:03:11:50:30:57:25:af:7b:
                    89:cf:07:b2:51:00:3d:f8:39:df:02:c6:2d:41:23:
                    36:82:94:60:32:6c:1a:cd:c2:3a:22:ae:00:c0:3e:
                    5d:c7:90:fe:82:ef:08:2c:4a:2a:62:8a:cf:9f:ce:
                    c9:64:30:b5:88:c2:92:d0:e2:9b:21:36:00:25:91:
                    6d:3f:6e:53:7f:0a:98:7a:49:98:ed:8c:37:6d:25:
                    40:59:ce:9e:a3:62:43:fb:d2:d5:77:06:03:9a:5a:
                    2b:39:ae:a3:0c:8b:37:f4:02:4e:a4:bc:7c:32:b7:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C0:EE:0B:E1:6E:4A:55:AF:45:BA:21:4E:1F:93:C8:EA:A9:0F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7731da2a-e258-3cbc-a663-7b3eb3fe910d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:d0:33:81:08:e2:e1:2a:17:c8:07:e7:fb:f0:14:c9:41:
         7a:03:cf:df:40:9d:83:1f:2b:10:f0:d3:59:24:da:89:a2:2b:
         f7:85:16:8f:23:34:28:da:92:bd:d2:e3:ab:43:01:e0:a8:5c:
         ec:d4:30:aa:34:ad:a1:a2:ec:65:75:37:29:ed:96:2d:82:79:
         52:a4:91:c2:6a:5d:7b:51:50:21:59:9c:49:36:0d:37:30:96:
         be:9a:ee:1e:6e:3d:5c:2c:be:16:ef:07:e7:5a:69:f8:ae:3c:
         23:d6:9f:29:8d:08:38:8d:32:b5:d3:90:8a:f4:14:50:4d:0f:
         da:8e:b0:3e:03:1d:6c:ac:0a:a9:da:40:72:ad:75:a1:7d:e4:
         4a:9b:57:89:3f:57:04:c4:d7:e5:9a:79:63:43:85:df:1f:d2:
         20:cf:16:84:79:9f:ca:ec:01:78:3f:69:a8:cd:a8:04:dd:68:
         65:a2:29:53:2b:32:2a:2b:29:81:5a:fb:f7:6d:e3:e3:13:dc:
         38:9f:5f:c9:93:f2:6f:15:2d:a5:f7:9f:ee:10:77:36:d6:e4:
         53:fb:e5:51:c9:dd:9d:1c:51:86:5c:b3:f7:df:01:bf:be:29:
         b6:8c:98:94:c5:49:4a:d5:b9:95:c6:69:52:10:3b:3b:55:9a:
         1c:71:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:30 2026 by rpki-client