Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05414f93-299f-37f8-b4d0-c17022f29801.roa
File:                     05414f93-299f-37f8-b4d0-c17022f29801.roa (raw, json)
Hash identifier:          fG1CMnhF51DgBNd2vI4AoKv6Y8dleIUohEw3U/D12HA=
Subject key identifier:   B1:89:85:EB:9F:6B:48:3A:4C:AD:3F:6C:DC:77:8B:B6:C8:4D:FC:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF58E349A3120E76CC9B3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05414f93-299f-37f8-b4d0-c17022f29801.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33660
IP address blocks:        24.11.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:8e:34:9a:31:20:e7:6c:c9:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=b09e33f9-59c8-4c01-aeaa-fc8ef32a25b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:23:5f:e2:ee:55:e6:1a:df:b8:3f:a8:e0:
                    72:cd:7a:5e:17:90:07:52:c8:af:67:95:21:91:f5:
                    1a:a9:dc:7c:df:a1:d7:78:f8:4d:dc:18:44:db:73:
                    ac:97:75:4c:1f:a3:81:46:39:09:0b:90:1e:c4:3a:
                    f8:e4:05:09:70:92:8b:10:20:9f:e2:94:f6:24:82:
                    9d:29:ec:62:da:5f:06:52:20:e0:98:4a:9f:fc:a0:
                    54:b0:0b:8e:da:c8:32:07:b6:ea:66:21:f3:79:89:
                    59:0d:58:a9:f3:53:9e:ab:41:98:7c:c9:6e:01:42:
                    fa:d9:ef:6a:0f:2a:c9:ab:3f:77:6c:7a:8b:1e:5f:
                    5c:e2:80:f0:29:e6:13:cd:78:54:4d:51:77:61:17:
                    6e:3c:85:5a:20:8b:c7:ce:78:da:a4:0f:d6:fc:5f:
                    c4:cf:4f:cc:e6:5e:7b:dd:aa:62:c3:c4:02:ce:ac:
                    d7:91:cf:b5:c7:c6:4a:50:d8:ca:2c:02:97:32:59:
                    88:20:5f:17:7a:9d:d7:b5:37:fc:ac:c3:f3:82:99:
                    c4:49:17:a5:e2:0e:03:3c:ec:7a:47:67:df:d2:3f:
                    fe:cb:d3:9f:3c:42:08:1d:65:52:1e:60:51:ad:35:
                    a8:41:31:39:4a:8b:96:dd:0a:3d:85:7a:ad:3c:4e:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:85:EB:9F:6B:48:3A:4C:AD:3F:6C:DC:77:8B:B6:C8:4D:FC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05414f93-299f-37f8-b4d0-c17022f29801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.11.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:38:f0:86:f2:f5:6d:c5:20:36:a1:b6:4e:0e:10:2c:91:87:
         54:b2:ba:8e:d1:13:1d:27:a4:4e:a0:17:c0:7d:43:8f:e7:5d:
         1c:0f:6a:c9:cd:c5:72:94:b3:d8:fc:56:23:23:76:07:53:3e:
         52:27:d9:53:08:eb:0b:ce:8f:3c:61:66:7a:af:87:9d:7b:44:
         ae:b9:43:30:0e:65:f6:79:dd:1f:f8:58:e7:87:3f:20:4c:7a:
         12:b9:4a:5f:4b:0c:f0:c2:66:4d:69:c2:52:4a:81:f3:5f:27:
         0e:d9:60:04:e1:2f:79:d6:5a:63:1c:3d:51:ed:fe:ee:37:65:
         bd:bd:e5:83:5c:2d:57:1e:e2:d0:30:9e:11:98:a5:63:db:1f:
         4b:d7:9e:cb:00:9e:be:2f:70:7e:24:a7:14:f9:0a:a6:e7:f5:
         11:30:06:d4:d1:21:17:f0:81:94:0e:00:82:a2:40:1d:22:bd:
         a0:4c:1d:97:cb:78:cf:f2:be:13:2b:eb:3b:59:67:c0:06:ef:
         7c:7b:ca:f2:fc:9d:79:12:bb:1a:3c:c2:e6:cb:b1:76:0f:98:
         9a:38:40:03:a1:1b:d2:bf:e6:6d:d9:92:8d:0c:5b:1a:8e:0c:
         f1:97:aa:7f:bf:ce:d3:f4:7b:c5:af:83:d1:cd:4c:27:e4:3f:
         75:f3:db:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Y40mjEg52zJs8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
YjA5ZTMzZjktNTljOC00YzAxLWFlYWEtZmM4ZWYzMmEyNWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9gjX+LuVeYa37g/qOByzXpeF5AHUsivZ5Uh
kfUaqdx836HXePhN3BhE23Osl3VMH6OBRjkJC5AexDr45AUJcJKLECCf4pT2JIKd
Kexi2l8GUiDgmEqf/KBUsAuO2sgyB7bqZiHzeYlZDVip81Oeq0GYfMluAUL62e9q
DyrJqz93bHqLHl9c4oDwKeYTzXhUTVF3YRduPIVaIIvHznjapA/W/F/Ez0/M5l57
3apiw8QCzqzXkc+1x8ZKUNjKLAKXMlmIIF8Xep3XtTf8rMPzgpnESRel4g4DPOx6
R2ff0j/+y9OfPEIIHWVSHmBRrTWoQTE5SouW3Qo9hXqtPE7ybQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGJheufa0g6TK0/bNx3i7bITfzUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU0MTRmOTMtMjk5Zi0z
N2Y4LWI0ZDAtYzE3MDIyZjI5ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAsyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo48Iby9W3FIDahtk4OECyRh1Syuo7REx0npE6gF8B9Q4/nXRwPasnN
xXKUs9j8ViMjdgdTPlIn2VMI6wvOjzxhZnqvh517RK65QzAOZfZ53R/4WOeHPyBM
ehK5Sl9LDPDCZk1pwlJKgfNfJw7ZYAThL3nWWmMcPVHt/u43Zb295YNcLVce4tAw
nhGYpWPbH0vXnssAnr4vcH4kpxT5Cqbn9REwBtTRIRfwgZQOAIKiQB0ivaBMHZfL
eM/yvhMr6ztZZ8AG73x7yvL8nXkSuxo8wubLsXYPmJo4QAOhG9K/5m3Zko0MWxqO
DPGXqn+/ztP0e8Wvg9HNTCfkP3Xz26I=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:50:53 2026 by rpki-client