Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8465c79-f621-3f9e-af7a-7a5f4c3b7c3f.roa
File:                     d8465c79-f621-3f9e-af7a-7a5f4c3b7c3f.roa (raw, json)
Hash identifier:          qJJr+y/OblvPTrh3fTL2WdK43+q/W3T5aZcsZpGHfn4=
Subject key identifier:   48:CB:D0:F2:14:BC:01:B3:36:15:1B:DF:C2:1D:C2:E9:94:8F:D3:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A79D6D3FBC92EA11C2C140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8465c79-f621-3f9e-af7a-7a5f4c3b7c3f.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        24.125.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:9d:6d:3f:bc:92:ea:11:c2:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=73ec5f57-6c37-4a0e-9234-4eed7adfc0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d9:ed:18:4f:db:e8:02:14:7e:da:bb:5c:f9:
                    2c:38:29:db:63:50:b0:94:53:99:cc:fb:cf:e2:c3:
                    42:6f:26:c1:e3:98:e7:42:69:ef:ba:17:ac:f4:e8:
                    a3:a7:ee:34:3c:51:07:d9:c5:47:77:7b:c9:83:06:
                    63:41:f7:1b:bb:f5:62:6b:2f:47:79:3f:c9:de:03:
                    27:a6:bb:f5:05:42:3e:93:21:0e:7b:83:3b:d3:27:
                    dc:6d:f0:14:3a:e1:67:38:9d:23:88:a3:1d:d1:07:
                    58:f5:cf:df:02:97:e9:c1:25:a6:25:91:b0:26:ea:
                    47:0b:10:9a:58:fe:cb:3d:0f:dc:9c:73:61:d2:a2:
                    bb:6a:af:61:fe:38:b6:4c:d0:71:e6:be:49:c3:73:
                    36:6d:9a:00:e9:b5:ae:3e:e4:45:b6:87:8e:f4:7d:
                    8b:56:db:bd:21:4c:cf:3c:ad:56:9d:e4:88:2b:51:
                    5f:b9:ec:48:f6:82:9d:dc:a2:82:d8:16:1c:54:81:
                    3f:f6:e1:c0:41:f6:46:1a:3e:8f:8d:43:5c:07:ab:
                    03:37:c6:da:5a:b3:ee:03:72:eb:32:c9:ab:5a:05:
                    93:e5:94:6a:ca:76:aa:ad:70:b9:6e:18:7b:68:9a:
                    6a:9e:58:7f:4f:07:b1:38:d3:02:d0:0f:cb:f6:bd:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CB:D0:F2:14:BC:01:B3:36:15:1B:DF:C2:1D:C2:E9:94:8F:D3:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8465c79-f621-3f9e-af7a-7a5f4c3b7c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.125.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:11:a9:36:4c:90:66:e1:9a:db:a8:b4:ba:58:92:90:92:9b:
         98:c5:4b:27:47:4c:48:81:40:2d:39:7e:f1:b6:b2:7a:02:79:
         18:c3:a6:c0:cf:66:2a:4c:0a:54:c0:f0:52:34:db:6a:06:5e:
         4e:aa:cd:13:fa:85:32:ba:9f:b4:35:2a:c9:87:d6:33:2c:2c:
         3e:52:28:ac:9f:1f:24:db:fe:83:e3:6a:00:b9:6f:70:2f:79:
         e0:aa:32:f6:29:4e:56:31:06:8f:83:a1:b3:83:43:2b:a8:70:
         e7:12:c7:1a:41:58:5d:2c:52:9d:d3:1a:5f:6d:48:b5:5c:fa:
         b3:28:6b:60:6f:2b:41:d1:09:54:51:ad:2a:42:7d:52:0f:1b:
         73:a4:5c:77:4d:33:10:b2:df:c3:9d:35:c7:92:ab:6e:e6:28:
         67:61:17:c8:b1:06:36:8b:d5:7f:c6:95:0d:90:49:65:74:22:
         b0:27:8b:f7:f6:08:bf:e8:76:e4:b9:2d:4e:ed:a9:af:58:5f:
         2a:66:02:17:c8:b2:01:ef:5c:41:11:47:4e:d6:80:6c:9f:de:
         9c:9c:a3:87:88:a2:5b:b4:45:a8:29:68:29:2a:ea:b3:2c:59:
         ca:06:83:ca:a4:25:1e:ae:1b:5d:cd:81:be:a0:15:89:26:a9:
         39:3a:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:24:42 2026 by rpki-client