Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa
File:                     d4a448df-629c-3de8-b3e6-c45c16d29639.roa (raw, json)
Hash identifier:          dP+1P19F9Zg+yPWRBP0V7xAH/lDEhJm6Acu+GReytdA=
Subject key identifier:   5B:95:FD:F5:BB:2D:10:49:F2:6C:7F:51:FB:85:A1:31:11:03:DF:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF256D850967717B131440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        24.20.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:25:6d:85:09:67:71:7b:13:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=16e08d8a-66c8-4376-8dbe-b63064f6a414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:a2:36:a3:29:aa:ab:a7:d8:8b:77:4a:88:
                    66:ee:f9:98:13:c5:40:42:0e:6b:2b:25:89:76:38:
                    50:cc:c5:7d:c7:fb:46:df:73:40:bb:a1:28:c7:09:
                    d8:2e:97:5f:fc:55:23:58:9e:ad:bc:62:d8:9e:77:
                    ec:9a:e1:59:a9:8a:d7:53:16:06:f9:a0:1e:aa:31:
                    14:d9:bf:79:ae:28:87:24:ad:0e:0d:f2:7f:57:c6:
                    e3:bc:10:8a:fa:c4:0b:6f:6a:8a:58:b4:02:5f:7f:
                    9a:8b:26:83:56:5b:57:33:8d:43:1c:77:1d:75:41:
                    b1:99:52:e5:64:27:3c:d3:25:10:2f:b4:f0:da:e6:
                    c1:5c:f9:5a:70:59:7e:07:49:f6:17:7b:e5:be:8f:
                    87:b7:2b:92:fe:58:9d:10:4b:9c:ce:dc:98:42:64:
                    58:e9:3d:ad:a8:3f:77:4d:ec:de:ae:c1:e8:0c:54:
                    9b:18:c9:d4:a8:ab:c8:d1:cf:ab:0e:76:51:8f:c0:
                    ee:f5:ea:e2:08:6b:f5:a7:76:f8:06:39:45:7a:ca:
                    5a:e7:00:0e:a1:3c:09:8c:bd:44:b4:dc:c1:5a:1d:
                    52:38:67:79:63:2b:cf:1b:d9:3b:12:39:24:a0:ab:
                    88:3e:ac:5f:10:31:13:bc:9b:21:aa:be:ee:16:d2:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:FD:F5:BB:2D:10:49:F2:6C:7F:51:FB:85:A1:31:11:03:DF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4a448df-629c-3de8-b3e6-c45c16d29639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.20.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:18:fd:e0:ae:4d:75:44:72:8f:c0:03:d6:31:e5:bc:b3:fc:
         98:8e:50:08:25:31:4a:93:b2:ae:50:f1:e1:e8:b0:b9:43:ae:
         e4:ef:33:b8:b0:65:e9:52:93:59:cc:96:a9:05:e1:4f:9b:24:
         df:62:59:66:c8:41:7e:ef:c2:1b:0f:d5:ba:6f:5d:eb:dd:1d:
         fa:bb:26:0d:79:47:5d:82:db:5d:52:c2:34:1c:ed:71:57:48:
         d5:a5:6f:32:c4:c7:7e:c9:c1:ff:90:c2:38:6f:90:01:08:15:
         c9:41:2b:1d:db:89:b8:c4:62:32:46:40:d5:54:cc:a0:75:ea:
         4d:d1:9c:fd:68:b4:34:d6:3f:09:6d:a0:44:8e:b6:ce:6c:90:
         ab:fe:5f:09:6a:9a:96:87:3f:0b:f8:19:3a:7d:6d:93:7d:94:
         a4:c6:85:b7:a4:3c:75:50:6c:9f:09:7f:8d:71:28:c5:03:23:
         08:de:33:6e:a8:a9:7c:03:f8:c1:69:e2:47:46:cf:2a:ed:a1:
         5f:69:b0:31:2f:ff:f4:ac:09:2e:2e:a8:c0:ae:be:83:b0:16:
         58:9c:22:9b:9d:c3:b9:fe:5a:f8:6c:fe:91:5d:0c:db:9e:b8:
         12:93:75:2d:21:bc:b2:7d:8e:71:62:87:46:9a:bb:d5:cc:af:
         42:7c:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:13:17 2026 by rpki-client