Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3740df2b-2167-33c6-81a3-51997dbac2a9.roa
File:                     3740df2b-2167-33c6-81a3-51997dbac2a9.roa (raw, json)
Hash identifier:          U9/2Af8NG+nnXmr+nwJmIerPyRbECte/98eBzkPYf7w=
Subject key identifier:   34:C9:7C:52:F4:1A:08:36:5C:E5:27:57:E9:4A:2D:D9:38:43:1E:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86229C477562F0FEBB49300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3740df2b-2167-33c6-81a3-51997dbac2a9.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        24.34.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:29:c4:77:56:2f:0f:eb:b4:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=a1fb23b4-58ac-48f2-94af-4478e90be117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:42:1a:07:f0:c5:71:5f:d5:09:9c:b9:e4:
                    22:e0:cb:59:f2:e4:19:69:3b:d2:ff:08:0e:51:c7:
                    df:60:64:7f:b0:a1:43:9e:ac:af:d3:89:23:c1:7c:
                    51:0e:09:6a:14:a7:39:29:66:34:b7:55:36:64:e2:
                    ab:e7:eb:42:00:5d:e2:c4:37:a5:ce:bc:0f:70:6a:
                    68:68:4b:3a:c2:d9:36:81:3e:7e:45:a8:e5:0e:7f:
                    10:98:b5:0e:e2:a5:4a:00:cc:ed:75:e1:9c:6d:18:
                    19:85:89:87:0a:31:7e:00:b3:22:e6:f9:dc:c8:fc:
                    d2:c9:40:a5:db:ed:f1:c2:c5:94:b6:cf:13:c3:e6:
                    c3:ac:b8:dc:08:c3:22:30:59:3f:e4:c0:f3:c7:4c:
                    1c:98:32:08:b0:c0:dc:56:3d:f4:bf:8d:68:23:39:
                    a3:c8:93:c8:c6:9f:57:c7:ff:c5:2d:ab:8d:19:00:
                    fa:d0:36:00:7a:cb:07:65:6a:0b:b1:94:8a:33:2a:
                    e7:33:74:89:32:93:2d:aa:7e:24:1a:15:6a:56:09:
                    8b:1d:95:79:d0:8a:12:d1:4b:c6:b5:97:92:c9:d2:
                    17:d6:c0:e4:b6:a5:4d:98:0d:24:39:09:d4:a1:83:
                    e4:a1:bd:cd:38:32:b4:df:84:b0:05:58:d3:38:d8:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C9:7C:52:F4:1A:08:36:5C:E5:27:57:E9:4A:2D:D9:38:43:1E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3740df2b-2167-33c6-81a3-51997dbac2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:f2:9e:a7:88:c2:f9:61:5f:7c:62:ef:8d:9c:ef:7e:d2:
         32:18:e9:24:a6:ee:84:d3:5c:13:51:ff:e3:fb:45:ff:c6:b6:
         17:81:58:d8:a4:7d:0c:59:33:b9:52:34:3d:f1:b5:3e:5e:91:
         8d:de:a2:5b:ff:c6:b9:68:f6:3e:dc:ee:1d:82:03:75:b2:48:
         3b:71:57:b9:a5:10:32:5f:28:82:8a:b7:80:6f:04:aa:01:8b:
         47:f2:ee:ad:18:8e:cb:3d:83:2d:16:8b:de:7f:11:e9:cb:07:
         8b:fa:cf:f9:02:70:5f:33:91:c0:3c:14:ba:8b:45:31:26:a1:
         70:37:50:78:b3:b7:8d:71:b8:6d:97:aa:b8:6d:6e:7f:04:72:
         87:b2:7b:77:5d:c0:4c:c4:b7:20:7f:8c:bc:f6:45:57:f5:ed:
         5c:1c:19:68:75:83:e0:a4:99:a5:ad:f0:39:06:0c:70:7d:d5:
         7b:7e:be:e3:60:ce:11:86:60:99:b5:0f:f4:a3:6d:6c:29:54:
         b4:f2:a3:7a:c1:90:e1:b4:83:89:28:3c:72:92:60:78:29:b3:
         a1:62:95:a2:96:80:94:0f:1a:fd:e7:f7:83:16:0b:74:a8:f2:
         56:d3:76:82:17:af:dd:74:f9:5f:5b:29:bb:ec:cf:48:2e:96:
         45:a7:89:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYinEd1YvD+u0kwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
YTFmYjIzYjQtNThhYy00OGYyLTk0YWYtNDQ3OGU5MGJlMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kZCGgfwxXFf1QmcueQi4MtZ8uQZaTvS/wgO
UcffYGR/sKFDnqyv04kjwXxRDglqFKc5KWY0t1U2ZOKr5+tCAF3ixDelzrwPcGpo
aEs6wtk2gT5+RajlDn8QmLUO4qVKAMztdeGcbRgZhYmHCjF+ALMi5vncyPzSyUCl
2+3xwsWUts8Tw+bDrLjcCMMiMFk/5MDzx0wcmDIIsMDcVj30v41oIzmjyJPIxp9X
x//FLauNGQD60DYAessHZWoLsZSKMyrnM3SJMpMtqn4kGhVqVgmLHZV50IoS0UvG
tZeSydIX1sDktqVNmA0kOQnUoYPkob3NODK034SwBVjTONiNKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTJfFL0Ggg2XOUnV+lKLdk4Qx7PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzc0MGRmMmItMjE2Ny0z
M2M2LTgxYTMtNTE5OTdkYmFjMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGCLYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH/8p6niML5YV98Yu+NnO9+0jIY6SSm7oTTXBNR/+P7Rf/GtheBWNik
fQxZM7lSND3xtT5ekY3eolv/xrlo9j7c7h2CA3WySDtxV7mlEDJfKIKKt4BvBKoB
i0fy7q0Yjss9gy0Wi95/EenLB4v6z/kCcF8zkcA8FLqLRTEmoXA3UHizt41xuG2X
qrhtbn8Ecoeye3ddwEzEtyB/jLz2RVf17VwcGWh1g+CkmaWt8DkGDHB91Xt+vuNg
zhGGYJm1D/SjbWwpVLTyo3rBkOG0g4koPHKSYHgps6FilaKWgJQPGv3n94MWC3So
8lbTdoIXr910+V9bKbvsz0gulkWnia8=
-----END CERTIFICATE-----
Generated at Mon Sep 14 21:33:39 2026 by rpki-client