Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88aa3195-b8c6-3011-a63f-517ad2002b47.roa
File:                     88aa3195-b8c6-3011-a63f-517ad2002b47.roa (raw, json)
Hash identifier:          rAGKWO70H3ArudZKpSfcBuT+FZFeoXRj3pEzPtJLoUU=
Subject key identifier:   A7:9C:60:43:84:37:A1:12:00:C7:63:2A:EE:3F:2C:66:E2:AC:20:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497822E715CDBF00C6BBE000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88aa3195-b8c6-3011-a63f-517ad2002b47.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        24.99.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:22:e7:15:cd:bf:00:c6:bb:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f2f726cb-633b-484c-9fae-e399fb14515b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:fb:ba:4c:d4:86:e9:48:21:ee:c6:11:3b:
                    53:d7:b4:ba:61:4a:50:da:86:db:f3:ad:99:01:93:
                    eb:fc:2a:32:df:b5:09:66:2a:7c:d3:07:b1:c9:97:
                    aa:8a:13:ab:08:b9:6a:f0:12:0c:20:e9:85:57:f6:
                    c3:35:41:aa:f1:b0:50:c8:f7:3a:76:b4:a9:3a:bb:
                    54:ae:45:22:c3:48:d9:1c:bc:54:04:f2:68:e4:02:
                    e7:82:6f:d4:38:86:41:66:43:d6:25:5f:f9:aa:17:
                    07:e7:81:9c:5c:5a:5d:80:07:88:42:76:61:1c:5e:
                    79:63:82:35:bb:a1:d5:d9:f7:22:28:18:e4:6b:01:
                    7f:81:b0:44:cc:6c:c8:26:31:75:54:43:a0:9c:76:
                    a9:45:50:ae:9d:87:0f:23:43:0c:78:56:ce:67:58:
                    25:1e:2a:0f:04:33:d0:c6:fd:b7:06:e7:11:d8:a0:
                    fc:ad:51:39:8d:a2:43:31:98:05:29:09:63:95:7a:
                    b1:40:6e:8c:4a:2e:68:7a:27:cd:aa:a5:0d:8a:0a:
                    9e:a5:a6:2f:fe:04:bb:0d:b2:21:e7:4e:b4:11:6e:
                    f3:8b:5f:67:78:d0:84:3d:b0:19:1b:56:45:a4:d8:
                    d3:cc:91:a8:1b:c0:89:a1:4b:22:12:87:d7:99:6c:
                    92:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:60:43:84:37:A1:12:00:C7:63:2A:EE:3F:2C:66:E2:AC:20:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88aa3195-b8c6-3011-a63f-517ad2002b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:48:72:5b:fb:02:d3:26:4a:47:07:15:f4:20:de:a5:47:
         f2:53:6b:85:08:09:7b:ca:14:2d:13:1e:3d:8f:84:d0:e1:ca:
         b3:2c:81:4e:c0:df:b4:de:63:77:37:96:db:97:00:2a:9c:a9:
         1c:61:a5:9e:ea:28:95:72:c8:3f:d7:0d:49:62:fb:95:93:25:
         6a:b3:ae:e4:5a:b2:ef:43:3f:8a:8e:b2:fe:fe:3a:49:7e:5b:
         e5:54:74:27:63:3b:c9:d1:f2:1c:b5:06:22:18:d3:a1:6d:c4:
         de:d8:06:6d:5c:33:29:dd:25:d1:3e:90:62:8a:6e:cb:55:8c:
         22:6c:db:c7:64:2b:50:3f:e5:3f:00:c2:50:c4:b2:2c:b9:2c:
         a7:59:39:97:9c:48:15:95:5e:d6:54:dd:56:77:cb:24:80:8b:
         c0:f3:d8:5c:2d:16:19:48:9a:ec:88:81:ce:3c:cf:02:55:11:
         e2:be:ff:b6:10:75:13:d7:cc:13:6d:7b:1c:30:67:af:ac:0e:
         0d:24:08:09:72:ec:89:9b:ac:b1:ab:a1:07:6e:4c:91:e4:52:
         f1:21:ca:39:98:14:09:57:bc:2e:25:d3:fc:06:72:c7:fb:c3:
         f2:48:e2:90:e3:5f:8a:be:75:e4:c7:ea:12:b1:26:44:81:f4:
         77:c5:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:52:03 2026 by rpki-client