Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06c51515-7bef-3e44-a8e8-b1835e331747.roa
File:                     06c51515-7bef-3e44-a8e8-b1835e331747.roa (raw, json)
Hash identifier:          taB24sCSMl3Cn3FGuGCDoOhIIUyBWkqb3aNkzVDvGLo=
Subject key identifier:   C8:CF:0D:28:9D:1D:34:17:A6:02:5B:58:FD:00:1A:15:2F:1E:11:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E5126B49AAC8F50C80810
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06c51515-7bef-3e44-a8e8-b1835e331747.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        24.127.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:51:26:b4:9a:ac:8f:50:c8:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=ccac1c73-b2c5-4ba6-b135-aad2264184e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:d6:cc:88:55:78:cd:0f:ac:df:87:e2:9b:
                    45:19:65:46:4f:b6:a3:bd:59:be:61:52:a3:9f:3c:
                    87:3d:fe:8a:17:d9:1a:05:28:3c:d0:5b:e6:47:fe:
                    a0:26:c2:8a:39:8b:75:dd:04:5d:f6:dc:f8:7d:9d:
                    8e:eb:25:c1:e0:89:97:32:1a:bb:15:a1:29:3d:1f:
                    20:9c:85:0c:1e:6b:71:0d:68:a6:5c:8e:35:71:30:
                    16:7f:3d:f7:27:6d:94:db:4e:eb:0a:1b:b7:1d:53:
                    45:90:15:f2:1f:9e:ae:75:82:73:c5:da:69:b8:e0:
                    a5:a4:c0:f1:3e:a0:1d:c4:ef:27:e7:fe:53:c8:e4:
                    ee:a4:bd:55:a7:fd:8e:aa:66:d5:20:ca:39:ff:df:
                    b6:ef:ae:38:07:f2:0e:6d:a6:dd:57:3d:ab:b5:dc:
                    4c:08:c5:3b:2e:6a:36:e2:19:fa:d3:b1:57:1d:f7:
                    c4:21:b0:3d:ed:1a:a2:33:2a:d6:2e:e7:c9:f6:13:
                    2b:11:5f:45:5b:2c:72:26:dc:47:95:7a:60:98:9b:
                    a1:93:6a:ea:00:d9:cd:c3:ed:3f:09:f0:9f:f1:6d:
                    4b:78:6e:41:a6:5d:93:3a:c8:be:00:ce:26:5e:fd:
                    22:59:c0:1f:62:e4:5a:95:60:5e:ac:c6:e8:57:ba:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CF:0D:28:9D:1D:34:17:A6:02:5B:58:FD:00:1A:15:2F:1E:11:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06c51515-7bef-3e44-a8e8-b1835e331747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:8f:90:61:c5:3c:3a:fc:8b:3c:04:f9:30:7e:76:b3:21:
         a4:c3:a3:ad:b2:9c:db:d7:b0:22:7f:2c:b9:2b:b7:d4:f7:d2:
         8e:1b:a0:d1:27:bd:fd:a8:80:53:7e:21:ae:12:33:aa:e1:f9:
         10:7e:35:6d:8d:b6:98:ae:94:cb:28:ae:cd:0b:8a:28:bb:a5:
         69:46:f2:00:d4:3b:b6:ed:c5:d6:1c:77:2b:4d:73:14:f0:9e:
         0f:8e:d9:16:7d:32:3f:81:cb:ed:5c:22:6f:86:ae:8f:f0:b9:
         15:dd:56:8c:d6:de:c1:ea:ee:e3:98:69:fe:e5:6b:a2:4e:01:
         5d:f3:35:12:32:3e:be:37:f0:76:13:d3:c6:85:60:37:b8:5d:
         ed:7a:7e:69:d3:67:c2:a3:20:db:5d:67:ba:5b:5a:a2:d8:0a:
         fd:9f:0a:21:1f:5c:2c:c7:7d:ad:c1:89:56:d5:d5:d1:2d:0e:
         ff:6a:72:50:f0:83:f0:00:d2:ac:50:63:0a:be:c2:d3:6f:12:
         3f:a1:3a:ee:ed:f3:32:e1:83:f2:ac:99:01:4e:b5:a0:61:3f:
         d8:1c:53:c4:9b:38:12:f6:f7:46:e6:90:ae:2e:75:1b:41:31:
         af:df:ae:99:8e:72:2d:b9:06:bd:04:f8:83:3b:33:3d:90:2a:
         ee:ae:85:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TlEmtJqsj1DICBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
Y2NhYzFjNzMtYjJjNS00YmE2LWIxMzUtYWFkMjI2NDE4NGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4fWzIhVeM0PrN+H4ptFGWVGT7ajvVm+YVKj
nzyHPf6KF9kaBSg80FvmR/6gJsKKOYt13QRd9tz4fZ2O6yXB4ImXMhq7FaEpPR8g
nIUMHmtxDWimXI41cTAWfz33J22U207rChu3HVNFkBXyH56udYJzxdppuOClpMDx
PqAdxO8n5/5TyOTupL1Vp/2OqmbVIMo5/9+27644B/IObabdVz2rtdxMCMU7Lmo2
4hn607FXHffEIbA97RqiMyrWLufJ9hMrEV9FWyxyJtxHlXpgmJuhk2rqANnNw+0/
CfCf8W1LeG5Bpl2TOsi+AM4mXv0iWcAfYuRalWBerMboV7qPawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMjPDSidHTQXpgJbWP0AGhUvHhERMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDZjNTE1MTUtN2JlZi0z
ZTQ0LWE4ZTgtYjE4MzVlMzMxNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGH/8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7sj5BhxTw6/Is8BPkwfnazIaTDo62ynNvXsCJ/LLkrt9T30o4boNEn
vf2ogFN+Ia4SM6rh+RB+NW2NtpiulMsors0Liii7pWlG8gDUO7btxdYcdytNcxTw
ng+O2RZ9Mj+By+1cIm+Gro/wuRXdVozW3sHq7uOYaf7la6JOAV3zNRIyPr438HYT
08aFYDe4Xe16fmnTZ8KjINtdZ7pbWqLYCv2fCiEfXCzHfa3BiVbV1dEtDv9qclDw
g/AA0qxQYwq+wtNvEj+hOu7t8zLhg/KsmQFOtaBhP9gcU8SbOBL290bmkK4udRtB
Ma/frpmOci25Br0E+IM7Mz2QKu6uhaA=
-----END CERTIFICATE-----
Generated at Sat Oct 24 02:38:48 2026 by rpki-client