Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/679be823-9b13-30fb-86ff-d38035d3b56a.roa
File:                     679be823-9b13-30fb-86ff-d38035d3b56a.roa (raw, json)
Hash identifier:          gu9Mxgl2j9ysc3D5hTqVKXaWu973KmeF/22EYuVFd8I=
Subject key identifier:   8F:EC:1F:36:48:AC:2D:7E:31:2A:95:F7:9A:C9:18:22:02:FD:BC:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9A0CBD221C035E9B58E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/679be823-9b13-30fb-86ff-d38035d3b56a.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.60.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:a0:cb:d2:21:c0:35:e9:b5:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e266897c-028f-4084-bd7f-b1636fa069c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:c2:0f:78:9a:b4:8f:76:be:4f:ca:d3:45:
                    d0:cd:0f:56:92:17:38:26:bc:62:a8:31:96:f1:f3:
                    31:df:06:aa:ba:cc:34:69:89:2b:d4:1a:93:c9:ef:
                    10:05:6f:d8:06:86:23:94:b2:3c:d4:63:ac:81:e7:
                    3b:7c:91:8c:d8:e6:90:a7:c9:4d:f1:f8:00:cd:29:
                    a4:3f:b3:b9:e8:a8:c9:b4:5c:68:df:f8:68:88:aa:
                    59:cc:3a:39:5c:6b:9c:7d:58:cd:68:83:26:c8:ee:
                    33:83:2a:4d:09:04:48:0f:75:3c:fc:87:38:2e:94:
                    47:42:9a:38:a0:c8:2e:9f:a1:33:0c:ff:29:37:7e:
                    54:18:e9:88:03:db:38:69:37:ed:d4:b1:82:9d:61:
                    ec:16:62:be:78:50:58:59:1a:f8:04:ea:8e:84:b2:
                    f6:2c:52:59:9f:07:45:3f:ba:33:96:b5:f4:08:ab:
                    2b:c9:fb:d8:2a:aa:d1:0e:74:a7:5b:43:07:79:65:
                    53:ae:3c:28:a9:96:0b:0e:84:e2:0e:fd:b3:f5:f5:
                    85:c8:12:45:48:a5:22:ca:7d:5e:bf:84:dd:53:aa:
                    4b:77:45:bd:27:d6:05:d0:f3:28:c5:d6:a9:2a:15:
                    c4:b6:1e:a2:dc:f3:be:0f:e9:38:fe:e2:74:09:2e:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EC:1F:36:48:AC:2D:7E:31:2A:95:F7:9A:C9:18:22:02:FD:BC:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/679be823-9b13-30fb-86ff-d38035d3b56a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.60.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:25:59:97:d6:ed:85:d1:76:82:e8:0e:40:35:50:19:7a:11:
         97:c7:a7:12:19:d4:70:32:39:95:78:a9:c6:3c:dd:4a:67:14:
         34:44:2a:c4:6a:f5:34:b7:35:61:17:73:14:38:23:8e:f1:42:
         13:53:f7:80:ea:0f:ae:53:4d:10:34:5c:eb:bd:bd:71:af:2e:
         a9:07:da:e1:ea:86:c1:2e:38:85:c7:dc:3c:f8:7e:e8:82:87:
         21:56:7c:db:28:f3:30:f0:eb:76:6f:75:f2:de:98:7c:ff:9d:
         c7:e2:8c:a7:c8:e2:a0:c9:17:08:d4:2f:21:46:c8:60:0c:5b:
         09:15:e0:cb:8a:04:cf:f4:46:e0:a2:ac:2e:1a:84:61:90:cf:
         53:53:7b:17:ba:be:0f:5f:ed:5c:03:a8:3b:09:a3:3b:84:71:
         2e:ca:13:ae:c6:f2:0a:15:ac:ef:ec:30:5c:77:6a:91:d4:63:
         5d:2f:73:92:16:58:1b:b9:47:66:50:da:d5:64:ec:84:cc:fd:
         0d:67:15:8b:e3:07:5c:2e:61:d9:29:20:ad:f0:88:92:aa:b4:
         68:1a:6f:ef:80:25:fb:d4:10:ce:0f:43:fa:cb:d6:bb:73:f9:
         65:18:a2:72:93:e2:72:9e:b8:24:c5:d6:c3:95:a8:2f:1e:36:
         93:6a:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:52:24 2025 by rpki-client