Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b74ead1a-8c78-377b-93bd-58fe09bc66bd.roa
File:                     b74ead1a-8c78-377b-93bd-58fe09bc66bd.roa (raw, json)
Hash identifier:          WWlKCF8S6K4dlcMY9A4mOM3Vg2izrZ4aLuBjukgJmx8=
Subject key identifier:   E2:BA:DE:FD:ED:E2:C8:F4:93:63:4D:F8:A6:F3:C8:50:93:FE:A4:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF7772A6FB9757DCB718660
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b74ead1a-8c78-377b-93bd-58fe09bc66bd.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        24.13.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:77:2a:6f:b9:75:7d:cb:71:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f3f3b9e7-994e-42be-96e7-c26ce0809f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8e:09:a6:0f:81:70:8a:b0:13:a0:cf:e8:ee:
                    fb:0d:47:36:a0:15:12:d1:13:ef:29:a9:f8:0f:c8:
                    7e:05:8a:9c:b7:41:4f:61:76:08:b0:ea:5c:0f:9c:
                    8a:ed:06:11:11:9f:b2:e7:17:c8:ce:b3:8a:d0:41:
                    c4:71:c0:02:78:0e:b2:84:f0:6e:47:9f:a7:26:d9:
                    77:c6:ef:86:da:c8:d2:be:f3:68:2d:68:26:c8:f5:
                    df:d3:1e:fc:41:bc:d7:c6:2b:b7:53:6a:26:cd:4f:
                    17:9a:6c:6b:37:98:0a:7a:7e:6c:e0:39:ac:2f:b2:
                    20:f6:a4:ab:ba:0b:b6:12:e3:14:f1:97:57:f1:68:
                    32:2a:bc:39:01:68:19:90:e1:75:04:52:19:7b:24:
                    84:ae:05:3f:06:e9:6e:b5:74:b3:77:d1:53:19:85:
                    0d:ce:da:42:09:1a:ad:6c:14:19:e1:1b:61:f0:c9:
                    fd:df:47:0a:70:63:5c:0b:da:9f:c6:be:31:90:b1:
                    0b:e5:2b:ff:05:b2:a3:7b:e4:b3:57:53:74:a7:3d:
                    b8:74:e6:e0:b1:92:90:1f:63:15:35:9c:bb:60:d2:
                    04:46:7d:ee:3f:fb:f5:8c:3e:be:7c:74:7a:e1:43:
                    98:93:2a:d2:38:e3:97:6b:de:61:60:83:59:a4:19:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BA:DE:FD:ED:E2:C8:F4:93:63:4D:F8:A6:F3:C8:50:93:FE:A4:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b74ead1a-8c78-377b-93bd-58fe09bc66bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.13.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:da:4a:b8:16:60:b6:a6:8e:ec:4d:19:76:4b:d9:77:48:08:
         ed:3d:56:67:7a:13:46:5b:20:96:2c:15:50:12:1d:07:fd:dc:
         5c:3e:1a:ad:36:af:98:ca:c4:21:c1:fa:23:ed:b1:ad:38:40:
         fa:3c:0d:79:3e:78:77:1b:0a:e1:a9:59:d3:81:c3:24:f2:36:
         d1:11:84:88:ac:48:1f:bf:82:6b:c8:a2:45:1c:4f:0f:71:38:
         88:2d:3a:ff:a9:fe:6b:c5:a6:e6:e1:b6:ce:41:b4:2e:00:95:
         ee:fe:80:34:c4:62:ad:3d:8b:c7:a8:8e:01:43:3c:39:05:55:
         c3:b3:89:f7:72:ae:c1:f2:e7:13:43:41:27:12:18:a8:4b:2b:
         49:6d:a2:29:dc:24:8e:99:07:1f:8a:90:4e:ed:e1:69:35:82:
         a7:b6:5e:51:cf:5c:39:bb:9c:a7:1c:e2:b4:8f:58:d8:e9:39:
         2c:35:b7:ee:f4:44:21:0c:69:98:a8:6d:75:a5:6e:c1:0d:be:
         29:71:03:30:7e:ce:ed:65:42:03:0c:22:22:70:75:b9:39:00:
         af:67:aa:6d:3d:b0:fd:34:2b:26:d6:56:4a:80:68:e3:53:8a:
         81:8f:40:45:b1:13:6c:31:de:7d:1e:b3:84:87:0c:71:e5:fa:
         64:6f:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:25:25 2026 by rpki-client