Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b68756-c9ca-3318-bd65-7860dbf38a7e.roa
File:                     18b68756-c9ca-3318-bd65-7860dbf38a7e.roa (raw, json)
Hash identifier:          4bd7jQxY9no69gVziy4yCshjwHp11OggmOwIyp00vhY=
Subject key identifier:   05:34:56:25:43:44:44:F0:9C:00:D0:56:50:5A:F9:29:1D:BA:F0:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144C9D7B1976C60D1A8C200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b68756-c9ca-3318-bd65-7860dbf38a7e.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        24.98.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:c9:d7:b1:97:6c:60:d1:a8:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=b686b54f-1b44-4cae-8f03-03c726389ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:b7:9d:de:11:cf:6c:c5:e3:1a:8e:f5:1c:
                    b8:1c:e0:30:bc:48:08:14:11:a0:47:25:56:9d:03:
                    1f:a2:5c:a0:1d:fc:65:bf:a0:75:73:af:b9:18:b9:
                    14:2e:08:8c:da:84:52:ac:02:60:00:88:d1:59:24:
                    da:56:38:73:5b:8b:cd:d8:19:74:ca:b0:a8:d6:0d:
                    d2:80:26:8b:93:fa:ca:f7:29:e4:63:ae:d1:da:2a:
                    d2:65:fc:96:59:8e:97:ec:f2:0d:e8:91:ba:12:05:
                    86:12:be:6d:80:9d:22:57:a5:79:29:e7:2a:f3:8b:
                    24:22:43:de:ef:82:1b:9c:e6:9d:d0:6d:ad:a5:43:
                    86:02:f5:7f:0d:6c:bb:67:db:84:58:28:f6:20:3f:
                    b9:0c:bc:d9:d1:19:a3:98:8c:34:e9:84:93:43:0f:
                    0f:19:f5:a8:09:4f:17:c7:07:58:94:ba:e0:b8:13:
                    90:23:0e:34:14:4e:e5:03:45:03:43:16:a4:ec:47:
                    61:e3:2e:23:ff:9b:db:e7:28:b7:89:3e:0d:f5:a8:
                    e9:d5:9a:bb:32:5f:f5:40:d6:52:20:68:80:9a:f5:
                    92:c5:86:9c:2f:9d:c7:95:8d:db:e7:7e:1b:11:1c:
                    c5:b9:98:9b:58:0a:8f:93:33:76:85:14:a1:e1:fe:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:56:25:43:44:44:F0:9C:00:D0:56:50:5A:F9:29:1D:BA:F0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18b68756-c9ca-3318-bd65-7860dbf38a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:b9:17:34:bf:2b:79:df:e2:34:76:66:37:9d:f7:50:e9:a8:
         36:10:ec:94:61:e6:e4:b8:1e:10:5d:b4:9e:0a:4e:2b:3a:e7:
         dc:72:aa:b9:58:0d:7a:95:81:35:a6:ec:c3:2b:15:e9:a8:1c:
         f6:8f:e9:3b:16:d3:2c:b7:f3:40:41:f1:17:41:a7:e4:ea:52:
         e2:2e:4e:df:34:fb:3f:40:0d:a2:56:af:4d:5f:3c:88:14:b6:
         20:c4:80:3e:1a:8f:dd:f1:79:08:b2:9b:00:81:c9:20:95:24:
         46:d1:d8:b2:90:a7:fb:55:41:23:ec:f6:0a:6a:b4:85:e9:6a:
         4f:a1:38:b8:93:b3:21:db:33:63:c3:2e:ab:66:25:7f:f4:3b:
         f2:9c:81:fe:57:0a:0b:5e:b5:2f:df:35:d6:2a:a9:b6:cc:9e:
         e1:84:d3:1e:d4:9a:a6:2f:d8:b6:8d:6f:97:cf:aa:d7:1e:33:
         c3:cc:0b:3f:b3:ea:be:2b:dc:5e:01:a1:6f:4c:16:6b:6b:61:
         b8:97:3e:cf:68:8c:ed:3c:00:f9:ca:f7:99:cb:e8:f7:51:ca:
         be:28:f4:9d:a4:71:19:4d:88:eb:0e:2e:b0:35:e5:12:be:d3:
         1c:63:d3:73:ac:26:2a:96:57:f5:80:62:52:cb:c1:ea:9a:84:
         15:06:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:35:25 2026 by rpki-client