Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3618c73-438d-37d3-aca2-7a9c9e5163b8.roa
File:                     c3618c73-438d-37d3-aca2-7a9c9e5163b8.roa (raw, json)
Hash identifier:          rOK2BrU+ntRiyEJuDuUtaacgixaGjfmgRf8fgP3eI6U=
Subject key identifier:   17:76:76:36:D1:E2:5F:37:D7:99:9B:B2:67:65:78:D8:C4:2A:FC:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141C5086A00EFE347903DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3618c73-438d-37d3-aca2-7a9c9e5163b8.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        24.124.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:c5:08:6a:00:ef:e3:47:90:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=a4a9ef29-4373-4f54-9215-525e931d60bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:12:df:63:31:64:8e:04:0f:44:10:74:0d:
                    c4:93:b9:14:ea:40:a1:ae:57:ba:bd:65:e4:6d:c4:
                    43:39:7d:94:bc:99:65:aa:0a:20:48:bd:cf:bf:eb:
                    e2:b6:99:41:d8:ba:10:57:28:78:e0:4a:51:df:fb:
                    90:a4:dc:d4:7c:7c:8b:34:ad:47:06:88:ff:ef:f0:
                    5f:2a:9b:91:55:7c:b6:84:4e:99:fd:92:7c:3a:30:
                    2f:b1:dc:ec:df:a5:cb:db:94:53:ad:3e:23:d3:fa:
                    f8:12:96:42:78:43:12:c0:b9:60:f1:69:67:2d:80:
                    27:32:ed:1f:96:2b:c7:70:91:51:88:04:27:42:d0:
                    f5:6d:27:35:5b:6f:e3:34:ee:ec:22:6a:89:cf:63:
                    66:61:6d:58:01:bd:7f:cf:5c:ec:7c:f6:db:01:56:
                    3e:78:69:09:e3:8d:54:9b:7f:23:6f:45:68:26:64:
                    6d:dd:54:79:0d:ae:87:6a:22:eb:bd:ff:63:1c:0f:
                    65:9f:94:46:5f:5c:6a:a6:80:67:b4:47:6a:72:8b:
                    7d:23:13:af:b6:8e:e2:7e:35:b7:78:a6:2b:86:cd:
                    f4:a5:35:0f:1a:85:db:3a:ee:02:d4:dc:e2:cf:ba:
                    53:2c:4f:96:16:72:01:69:42:76:0d:ba:12:55:6f:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:76:76:36:D1:E2:5F:37:D7:99:9B:B2:67:65:78:D8:C4:2A:FC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3618c73-438d-37d3-aca2-7a9c9e5163b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:25:84:56:32:d9:47:51:aa:90:24:7d:56:e8:24:0d:96:f6:
         da:22:a1:d2:46:5e:e7:b0:b2:c4:28:2d:3d:bc:2d:09:23:87:
         ce:e4:6c:f4:c8:06:86:68:e2:2f:3b:bd:5a:6e:6d:bf:8f:6c:
         1a:f2:f9:dc:05:a4:3d:b0:63:14:65:d3:2a:b8:4f:af:3c:db:
         cd:02:d4:e1:90:5d:e0:b0:51:76:50:72:ae:87:d8:97:03:aa:
         5c:b1:bf:1d:84:41:96:c6:1f:e6:05:03:fb:ca:02:ef:4a:f0:
         89:63:9a:3d:a3:38:01:03:1e:01:9a:48:8f:5d:14:85:0f:98:
         35:8d:02:63:a0:08:63:60:84:c6:97:a5:4a:aa:e4:82:81:b6:
         39:3a:4b:7b:3c:39:49:8a:e0:ff:c5:26:2e:db:5a:8b:9e:a6:
         d6:bf:ab:c8:35:df:3c:dc:61:7e:41:7c:21:df:69:88:f6:c1:
         5c:33:b2:b2:65:0d:e3:44:c5:95:e1:96:88:41:85:e8:0a:5b:
         20:32:98:4d:af:1d:ee:e6:db:3e:cc:98:37:4f:20:09:69:5e:
         56:cc:9f:4e:7b:73:6c:87:54:6f:9d:e9:c8:9f:9b:2b:aa:59:
         82:03:e3:2e:cf:aa:f1:21:cb:4d:a4:4a:5e:3d:fa:ee:ac:d0:
         a6:68:ed:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcUIagDv40eQPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
YTRhOWVmMjktNDM3My00ZjU0LTkyMTUtNTI1ZTkzMWQ2MGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY4S32MxZI4ED0QQdA3Ek7kU6kChrle6vWXk
bcRDOX2UvJllqgogSL3Pv+vitplB2LoQVyh44EpR3/uQpNzUfHyLNK1HBoj/7/Bf
KpuRVXy2hE6Z/ZJ8OjAvsdzs36XL25RTrT4j0/r4EpZCeEMSwLlg8WlnLYAnMu0f
livHcJFRiAQnQtD1bSc1W2/jNO7sImqJz2NmYW1YAb1/z1zsfPbbAVY+eGkJ441U
m38jb0VoJmRt3VR5Da6HaiLrvf9jHA9ln5RGX1xqpoBntEdqcot9IxOvto7ifjW3
eKYrhs30pTUPGoXbOu4C1Nziz7pTLE+WFnIBaUJ2DboSVW80MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBd2djbR4l8315mbsmdleNjEKvzgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzM2MThjNzMtNDM4ZC0z
N2QzLWFjYTItN2E5YzllNTE2M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHyuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQlhFYy2UdRqpAkfVboJA2W9toiodJGXuewssQoLT28LQkjh87kbPTI
BoZo4i87vVpubb+PbBry+dwFpD2wYxRl0yq4T688280C1OGQXeCwUXZQcq6H2JcD
qlyxvx2EQZbGH+YFA/vKAu9K8Iljmj2jOAEDHgGaSI9dFIUPmDWNAmOgCGNghMaX
pUqq5IKBtjk6S3s8OUmK4P/FJi7bWouepta/q8g13zzcYX5BfCHfaYj2wVwzsrJl
DeNExZXhlohBhegKWyAymE2vHe7m2z7MmDdPIAlpXlbMn057c2yHVG+d6cifmyuq
WYID4y7PqvEhy02kSl49+u6s0KZo7Qw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:49 2025 by rpki-client