Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b69850-2aaa-3e84-8083-8192f7b19a59.roa
File:                     78b69850-2aaa-3e84-8083-8192f7b19a59.roa (raw, json)
Hash identifier:          WuMhQORckGsU92mtJRgzC+9UI6NO6k39yO1AI40j6Hc=
Subject key identifier:   AF:E4:D1:04:E3:52:DB:2D:00:6C:00:6C:F2:B4:09:50:61:05:11:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF867C9F5959DCBC8D8DB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b69850-2aaa-3e84-8083-8192f7b19a59.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        24.7.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:67:c9:f5:95:9d:cb:c8:d8:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=d5801d9e-cfc0-4e38-83d0-65cdf895f05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:07:e0:b0:38:3f:fb:54:17:2d:ef:18:59:
                    be:ed:0f:5c:91:c4:19:78:26:d8:d5:69:0e:1b:8d:
                    0c:b6:cf:7e:41:4d:4f:6c:5f:b7:26:ae:1d:d1:66:
                    26:d9:5a:cb:2d:77:33:2b:c5:41:26:11:64:c7:ab:
                    4f:eb:9c:b1:05:14:aa:26:af:d5:53:5c:de:5a:4f:
                    00:eb:4d:03:cc:04:8b:6c:ac:2e:39:f1:9a:9f:74:
                    77:93:53:c1:42:82:0a:06:f6:94:3b:b2:0e:ad:ca:
                    d3:51:80:b0:21:d7:83:1d:da:95:4f:9d:fb:1e:00:
                    0c:a9:95:93:2f:94:56:00:9a:79:c4:d8:2e:d4:d0:
                    16:06:5e:8e:18:5a:16:cb:54:3f:23:4e:ca:5f:5f:
                    fd:08:89:22:35:ca:67:8e:0b:54:73:03:09:bb:3f:
                    b2:40:6b:8b:ec:81:cc:88:af:73:17:66:5f:f0:50:
                    a6:cf:00:8d:d2:0b:84:a0:88:99:3c:38:da:92:ce:
                    4b:3f:22:30:02:85:5c:b1:a9:57:34:a7:5a:ea:f5:
                    4a:38:d8:c6:b2:06:3c:21:7b:80:a5:91:6c:b7:3b:
                    56:a3:8b:72:1d:33:ce:1c:e8:4c:ed:2a:1d:c9:4f:
                    e8:cc:0f:34:ea:19:c3:1c:68:aa:f7:75:46:10:c5:
                    09:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E4:D1:04:E3:52:DB:2D:00:6C:00:6C:F2:B4:09:50:61:05:11:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b69850-2aaa-3e84-8083-8192f7b19a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:19:ab:da:9c:9f:e2:8f:7d:d5:ef:19:07:fd:82:ef:02:48:
         ed:da:b5:02:02:0a:43:c3:b4:3f:86:b3:87:57:bf:54:d5:b0:
         97:bc:67:0a:1d:1e:ed:d1:66:b0:0d:ad:dc:06:67:21:e4:39:
         20:8f:a4:85:02:47:c3:6d:77:dc:16:d4:d3:2b:fa:1e:b3:05:
         85:21:95:a0:a1:0f:5b:81:15:8b:fc:06:af:63:06:16:c8:de:
         6c:ba:af:39:e7:f8:4d:ce:52:d9:a4:d7:57:50:8b:03:6c:18:
         e5:ec:ab:d0:1b:67:19:65:f0:6b:5f:6e:3b:5b:17:d0:0d:89:
         d1:1d:44:72:bb:e6:f7:a8:9d:2f:16:0d:a9:ff:01:6e:0b:9d:
         37:cb:db:c1:7b:90:25:bf:49:34:24:79:61:7d:44:8d:c8:82:
         7a:cb:43:fd:19:2b:9c:b0:5b:79:0a:d0:30:1d:7e:a4:12:43:
         b3:68:fd:6b:1c:e2:94:b3:bc:8b:6a:b5:47:61:f3:45:0c:c6:
         9f:dd:c8:77:12:57:c6:48:f9:bb:c9:63:48:38:09:b0:4e:5e:
         63:b6:02:29:a7:0c:14:2b:eb:a3:96:ad:a9:05:1b:9e:6a:18:
         ca:55:28:76:56:50:ea:b4:2c:b6:bd:79:42:72:cf:d7:8e:7d:
         85:91:e0:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+GfJ9ZWdy8jY24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDU4MDFkOWUtY2ZjMC00ZTM4LTgzZDAtNjVjZGY4OTVmMDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJsH4LA4P/tUFy3vGFm+7Q9ckcQZeCbY1WkO
G40Mts9+QU1PbF+3Jq4d0WYm2VrLLXczK8VBJhFkx6tP65yxBRSqJq/VU1zeWk8A
600DzASLbKwuOfGan3R3k1PBQoIKBvaUO7IOrcrTUYCwIdeDHdqVT537HgAMqZWT
L5RWAJp5xNgu1NAWBl6OGFoWy1Q/I07KX1/9CIkiNcpnjgtUcwMJuz+yQGuL7IHM
iK9zF2Zf8FCmzwCN0guEoIiZPDjaks5LPyIwAoVcsalXNKda6vVKONjGsgY8IXuA
pZFstztWo4tyHTPOHOhM7SodyU/ozA806hnDHGiq93VGEMUJ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/k0QTjUtstAGwAbPK0CVBhBRE8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzhiNjk4NTAtMmFhYS0z
ZTg0LTgwODMtODE5MmY3YjE5YTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGAcYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMZq9qcn+KPfdXvGQf9gu8CSO3atQICCkPDtD+Gs4dXv1TVsJe8Zwod
Hu3RZrANrdwGZyHkOSCPpIUCR8Ntd9wW1NMr+h6zBYUhlaChD1uBFYv8Bq9jBhbI
3my6rznn+E3OUtmk11dQiwNsGOXsq9AbZxll8GtfbjtbF9ANidEdRHK75veonS8W
Dan/AW4LnTfL28F7kCW/STQkeWF9RI3IgnrLQ/0ZK5ywW3kK0DAdfqQSQ7No/Wsc
4pSzvItqtUdh80UMxp/dyHcSV8ZI+bvJY0g4CbBOXmO2AimnDBQr66OWrakFG55q
GMpVKHZWUOq0LLa9eUJyz9eOfYWR4LY=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:24:15 2026 by rpki-client