Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c0b8faf-1fee-366f-9b5b-5f434e99eab8.roa
File:                     1c0b8faf-1fee-366f-9b5b-5f434e99eab8.roa (raw, json)
Hash identifier:          JU9TpYdAZGzRwR99TqZplnoAvZLpVhARwXnb3hPZB24=
Subject key identifier:   83:A7:41:4B:31:0C:BC:C1:13:07:95:7A:A1:2B:AD:E8:41:AF:D7:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3AC76B905BC4938A137600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c0b8faf-1fee-366f-9b5b-5f434e99eab8.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        24.13.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:c7:6b:90:5b:c4:93:8a:13:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7405b60c-bc52-4c59-87b6-d14c1a44ebc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:c1:b8:f2:56:00:61:fc:7c:0c:28:b3:38:
                    24:3a:82:0b:96:25:e3:3f:fa:c6:7d:70:43:fe:7c:
                    4d:a5:98:68:24:35:cc:7c:f9:df:77:44:36:d3:cc:
                    11:e2:30:ef:64:23:a2:e5:54:1e:5c:c7:cc:fd:05:
                    2e:45:cc:4a:4c:e3:af:1d:ff:06:a7:dd:a0:c5:96:
                    a1:1f:8c:a1:d3:e0:81:1a:12:60:d4:4b:b7:ab:19:
                    9f:94:38:14:46:e5:88:0b:ca:d1:b3:a9:31:2f:7e:
                    c5:b2:60:63:01:f7:fe:e6:ae:8a:e8:a4:1b:a9:9b:
                    12:18:90:9d:6c:3e:b8:ae:09:dc:90:23:08:ad:07:
                    42:75:ba:ce:a1:21:35:ef:a0:6d:f2:de:91:50:8e:
                    01:31:d4:d5:24:89:5a:94:62:c0:2d:8b:3e:80:d5:
                    ce:0c:d8:fc:9c:af:77:39:b1:5b:4e:95:8d:71:76:
                    3c:b6:e2:6a:0d:a5:28:22:67:d2:04:9f:cb:d5:e4:
                    98:3e:12:a8:bf:88:50:3b:15:60:ab:bd:2c:7d:92:
                    51:b6:dd:65:c8:95:f2:1f:33:83:10:d0:51:02:9e:
                    1c:b6:c8:bc:bf:ea:ee:2f:3d:bb:33:df:ad:df:2b:
                    15:a9:50:f2:1b:d5:f1:c9:85:67:b3:74:3d:2b:df:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:41:4B:31:0C:BC:C1:13:07:95:7A:A1:2B:AD:E8:41:AF:D7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c0b8faf-1fee-366f-9b5b-5f434e99eab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.13.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:f9:57:93:29:aa:b5:79:b5:d5:71:5b:14:41:a4:0e:b1:
         0f:fb:85:c8:40:2e:ec:e6:48:e1:42:38:11:1b:75:1c:d7:03:
         6a:e2:41:3f:bc:dd:fa:7a:77:01:1d:50:a7:d9:ff:30:e9:ac:
         de:2c:b0:ea:b6:9a:68:2b:2f:a8:0f:19:5c:60:25:2c:fa:d7:
         f5:8c:70:95:c2:92:fc:29:cb:b0:13:b2:1b:f1:9f:ec:cf:d9:
         2c:ef:4c:e0:0f:90:aa:de:6b:98:85:1b:96:37:a2:43:4a:f1:
         44:80:c0:6f:cf:02:2e:4c:02:5d:d8:73:4c:0c:24:7d:ad:0c:
         ae:01:bb:cb:05:41:0d:a0:1f:e3:58:99:8d:ae:13:41:81:42:
         42:0a:83:e2:66:6c:26:11:57:06:a1:54:1e:4c:bf:5e:1f:f1:
         cd:f1:3f:b7:b4:4a:cb:ab:9e:e1:74:ec:1a:1e:3b:de:d1:92:
         5e:72:2c:77:f7:a6:e0:fd:a6:3c:19:6e:22:56:17:3d:c3:b4:
         4e:d1:37:e5:9f:ee:16:a5:0f:6f:f3:4b:3f:ee:0f:6e:71:0b:
         1b:4a:47:a8:e6:2e:54:e0:db:cb:00:28:da:66:95:04:bc:0f:
         e3:e1:ad:2f:b2:64:67:70:cd:59:40:02:b7:2b:36:e3:59:be:
         e0:0b:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:04:22 2026 by rpki-client