Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f53bd62-986b-3e26-91ef-255cf6f55caf.roa
File:                     2f53bd62-986b-3e26-91ef-255cf6f55caf.roa (raw, json)
Hash identifier:          RXR6IpRQ7ZncmYVQJDAMjAlL/fQUJtj5DMD60YUxFMA=
Subject key identifier:   DB:EB:16:1B:4F:BE:DB:34:15:49:FC:17:7D:23:48:76:E6:57:FA:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D87890D498D72E2969A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f53bd62-986b-3e26-91ef-255cf6f55caf.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        24.5.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:87:89:0d:49:8d:72:e2:96:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=298426fd-58aa-4284-b2e4-c42a791372d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:7b:64:34:02:bf:ec:2f:0a:48:a7:67:33:
                    65:11:f2:00:9f:4e:2e:f2:42:5b:1c:2e:93:c5:ef:
                    be:58:fb:38:d5:9e:83:ef:86:b3:47:f5:be:c8:34:
                    e2:48:65:91:ce:79:b0:f6:e9:e9:3a:ff:78:ba:ba:
                    f9:2f:ce:45:21:b2:8f:c9:7f:38:a9:e0:38:0b:b7:
                    71:80:61:36:bc:be:e3:cb:d7:ce:d6:8e:54:31:22:
                    9d:0c:37:ac:07:7f:d0:c2:3f:1e:89:cc:70:3a:c0:
                    ea:2a:57:00:1c:b3:ae:64:63:f8:fd:33:b2:b5:56:
                    0e:2a:35:ae:d1:99:88:b6:a3:12:81:1d:bd:f0:fd:
                    36:05:9f:8a:61:f9:20:00:1c:2c:70:6a:a5:8e:91:
                    dc:a9:48:ee:5f:cc:15:b7:9e:57:24:01:07:92:39:
                    3d:92:1a:db:89:17:fd:17:f6:c2:07:47:21:1a:14:
                    f8:b3:7c:9f:46:bd:5c:07:3a:80:3a:0e:a8:8d:5e:
                    94:1a:33:44:fb:f7:1a:55:79:f5:dc:d8:35:6d:a8:
                    6e:c0:1c:53:75:4d:cf:50:ff:7a:2c:33:99:bb:b5:
                    d0:42:30:3d:91:a9:16:4d:84:fd:ec:03:10:92:a3:
                    d2:f8:ec:23:50:c9:e1:22:24:46:a7:93:95:a8:27:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EB:16:1B:4F:BE:DB:34:15:49:FC:17:7D:23:48:76:E6:57:FA:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f53bd62-986b-3e26-91ef-255cf6f55caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:99:90:d0:e7:da:ac:be:ba:db:66:20:1c:63:d2:26:e6:
         7e:94:53:c4:0a:e7:ea:a7:8b:66:88:d3:e1:7e:11:b6:8f:95:
         e9:f4:02:2d:be:0d:56:30:8b:80:c8:5e:6c:82:37:38:8b:a2:
         20:79:39:66:8f:ac:a5:e9:5b:cb:a1:cc:6d:59:17:51:29:74:
         c1:90:7c:a1:d0:b7:b8:af:45:1d:55:c1:01:37:fe:2e:43:0b:
         51:15:32:f1:98:16:34:44:9f:06:f2:bb:37:3a:75:83:5e:7d:
         ac:fb:31:28:39:7c:88:21:f6:a1:37:f9:fb:5c:52:85:d1:c0:
         7d:c1:13:6e:96:8f:04:62:59:85:7f:a2:62:9a:cb:fc:1e:1d:
         17:14:52:88:d6:ca:e7:b4:f3:a3:d1:9c:4b:4e:75:21:85:f0:
         e9:80:9b:fc:c9:83:c2:06:af:96:13:ac:98:3e:6d:74:2c:5f:
         b2:cc:57:39:21:88:74:e4:9c:57:37:be:1a:55:dc:ca:55:fb:
         db:82:12:cc:a6:f4:03:5f:62:a3:5f:db:dc:fc:24:b7:0c:46:
         a3:57:ca:ce:01:9d:86:2a:3e:4e:1e:57:c6:8a:c9:89:85:b9:
         3d:a3:38:a2:ef:c2:24:41:51:0d:08:5d:13:12:2c:67:ff:48:
         ee:d3:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:05:07 2026 by rpki-client