Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f4a34a-9737-3e99-a030-7d61959abec0.roa
File:                     e4f4a34a-9737-3e99-a030-7d61959abec0.roa (raw, json)
Hash identifier:          D4x4IBQiYnzKO2FbVpq/k0hNI3EHinQXTK6JXOjmwlI=
Subject key identifier:   71:C8:1E:EA:16:EB:ED:F2:FD:08:48:6A:12:D5:9A:79:71:48:D9:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA46E492EE1FC2BFA66DFC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f4a34a-9737-3e99-a030-7d61959abec0.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        24.127.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:46:e4:92:ee:1f:c2:bf:a6:6d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=b1fbe896-97e9-40bc-aab7-804ba8a9292e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:34:9f:e2:2b:02:79:e0:28:01:de:01:a3:dd:
                    b3:05:cf:1b:a8:ec:0b:8a:c2:b1:40:8d:67:ba:9a:
                    60:e4:83:49:af:a3:23:72:09:a7:81:df:bf:c0:bd:
                    e5:df:09:89:a0:f8:d8:4c:cb:9b:1a:39:b1:ec:15:
                    79:1e:2c:7b:ad:c2:00:b7:99:ba:d6:0b:9f:05:d9:
                    ee:d5:30:35:b5:a0:3d:d6:e1:dc:50:b9:6f:cd:c5:
                    b5:13:93:d7:17:45:19:3c:cd:b4:90:c3:d2:45:87:
                    e7:c2:46:0c:7f:e4:d6:65:a3:a6:c4:34:fb:fa:7e:
                    d3:81:ff:2a:91:45:ef:46:79:22:26:de:0c:85:6b:
                    a6:8e:44:e6:46:70:e2:ab:37:44:fd:2a:25:30:b1:
                    2c:75:81:48:2c:9a:e2:a5:5d:97:3a:32:6a:e4:d4:
                    e8:fd:7b:bb:a4:43:d9:26:6a:32:ba:0d:42:dd:f6:
                    57:70:c5:16:d4:61:07:ed:48:6c:21:f9:cc:1e:07:
                    c5:ac:74:ae:0c:13:a7:be:22:72:41:41:86:ba:a3:
                    e5:04:f2:5c:5e:68:d0:21:9a:b7:f2:ea:81:4c:cd:
                    e1:86:da:07:78:b7:8b:45:64:e1:26:22:89:36:44:
                    b8:ad:bd:3f:86:73:5f:c9:76:5e:76:0c:1c:f7:19:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C8:1E:EA:16:EB:ED:F2:FD:08:48:6A:12:D5:9A:79:71:48:D9:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f4a34a-9737-3e99-a030-7d61959abec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:b2:51:a5:ac:bd:a4:95:62:e8:0c:02:19:65:fe:01:da:
         a9:87:64:17:62:de:08:2c:af:1c:18:eb:24:23:06:7e:74:e4:
         1b:ee:3b:02:6a:7e:49:b2:2a:a6:38:6e:c1:97:5f:33:b5:50:
         dd:0e:e4:96:64:1a:1a:ff:3e:e2:3b:15:90:a7:ef:f6:fd:15:
         c2:90:15:3d:aa:5b:52:72:a3:61:1e:43:7b:ea:76:eb:b1:96:
         3b:d0:72:60:16:74:1c:25:db:53:e3:d8:aa:12:09:d6:50:39:
         54:0d:73:6a:9e:4d:e9:40:04:13:43:cd:8a:c9:52:b7:56:03:
         3d:65:95:d5:7c:6d:d4:29:68:11:e3:e0:53:7e:f8:0a:ab:c5:
         35:4c:61:01:b2:d1:4d:b9:f7:7c:d8:f6:44:30:07:30:ed:80:
         18:2e:37:0b:6c:c4:b1:b8:a2:6c:a5:8f:91:b3:5f:18:9d:0f:
         e6:9a:85:f9:fb:c9:cf:9d:f4:47:8e:d4:74:9d:a6:99:67:3f:
         d4:89:44:4a:62:74:b7:bf:6b:32:52:ee:e9:6f:09:1f:8d:39:
         1b:46:bd:7f:15:0b:fb:94:b3:8e:fc:84:02:85:45:10:23:5f:
         76:a5:c8:8c:fa:be:f0:e3:ea:6f:4d:ae:b7:21:4d:c5:9f:24:
         ee:32:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:55:21 2025 by rpki-client