Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7541ec5-7110-3355-b30a-3dcb18275c5b.roa
File:                     b7541ec5-7110-3355-b30a-3dcb18275c5b.roa (raw, json)
Hash identifier:          l0yzqw//SsOQrr/01cfCACF4U+m8vCyoorXR3cmpSS8=
Subject key identifier:   50:A1:20:31:96:EC:40:87:7C:80:13:10:07:01:57:DB:2F:04:02:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6A0D0D534417249C3E680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7541ec5-7110-3355-b30a-3dcb18275c5b.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        24.4.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:a0:d0:d5:34:41:72:49:c3:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=83cffbf2-3118-48a2-b6fd-b6f66bbe14aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:24:fc:86:a7:37:3c:3d:5e:41:71:4e:f4:86:
                    1b:7a:68:08:44:99:fc:9e:18:26:ac:a2:bd:7f:b2:
                    05:e4:3a:70:4b:97:df:53:3c:b3:a6:86:79:ff:13:
                    f9:ae:9e:3c:fd:54:d1:c3:45:42:85:b9:64:af:3a:
                    6d:a0:4d:4d:84:d5:28:ed:f3:da:9f:21:6b:77:62:
                    b9:09:1f:9b:32:4d:8d:a2:c6:7d:54:69:1b:ab:d3:
                    48:58:35:c2:f3:c8:c7:8b:b0:7d:fd:27:51:82:e8:
                    80:3c:cc:18:81:03:8c:c4:d0:3b:ff:d2:68:94:3b:
                    45:87:2a:24:42:74:e9:ba:d1:24:11:7a:a4:ac:11:
                    67:4c:74:c0:cb:f2:d1:6b:1f:4d:e3:30:96:46:72:
                    9d:7e:ca:ba:d7:3e:76:a8:2e:27:57:69:96:1d:2c:
                    06:62:74:b6:a2:4b:3f:14:24:b9:08:d3:ae:4e:6c:
                    7a:57:87:58:c6:f2:1f:9d:4b:f7:be:59:66:e4:64:
                    30:b9:20:40:91:82:77:5e:a5:a4:35:8e:74:b0:cd:
                    3d:76:02:3e:54:91:c7:d2:05:c5:96:96:c7:f4:d6:
                    1e:09:3c:a7:ae:c5:a5:4d:d5:ec:47:a8:90:5d:39:
                    08:63:f3:23:2d:27:67:61:e5:7e:e2:4c:e9:dd:e8:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A1:20:31:96:EC:40:87:7C:80:13:10:07:01:57:DB:2F:04:02:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7541ec5-7110-3355-b30a-3dcb18275c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.4.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:bc:f4:90:79:ff:b3:58:1b:72:46:58:1d:0b:c9:7a:c3:
         bb:f4:d9:be:8c:d2:9c:05:18:92:74:ba:92:0a:fc:6c:c0:ab:
         97:bf:7b:19:9c:e6:0b:09:42:49:ae:30:94:ca:86:d9:16:bc:
         6c:5a:44:f3:06:d2:c0:49:23:d7:5f:14:57:a2:ce:dc:8c:4d:
         4d:b4:df:20:98:ed:ab:ab:a8:a5:27:69:2c:27:5e:7c:94:4f:
         80:0f:1c:d5:66:35:0c:4b:80:c3:83:a1:7c:f9:ba:00:64:f1:
         bf:a1:c6:d0:20:da:ee:ac:c8:94:73:d2:fa:b7:b0:81:e4:b1:
         d1:ee:ba:42:55:be:36:75:10:0c:11:01:ff:a8:f3:3d:20:4b:
         df:6a:65:dc:f0:e3:29:cb:4d:96:e5:72:e5:66:16:fb:6f:bf:
         7e:bc:e1:52:fb:2a:5c:33:f0:68:d2:61:dc:7b:b2:e7:7d:60:
         42:ba:82:e3:6b:31:65:48:d6:1e:53:0d:33:27:89:cc:c5:fa:
         99:50:50:4a:25:67:4f:9a:0e:a6:0d:84:c1:13:a6:cb:73:5c:
         88:2c:c4:5f:45:fe:34:f8:bf:26:6b:88:08:59:7c:48:0e:76:
         21:c6:14:d7:ac:c7:31:ef:f5:d1:68:d7:7c:02:97:9d:14:04:
         f3:ef:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:31:04 2026 by rpki-client