Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/015a2688-392e-341b-8af6-5451e65c3096.roa
File:                     015a2688-392e-341b-8af6-5451e65c3096.roa (raw, json)
Hash identifier:          TcB0Im4syCLt6q3F3GbVhHP+OX36lUVB4j8Y6LHVuew=
Subject key identifier:   41:43:FA:50:EB:8E:0F:3D:A3:09:CD:15:66:AF:9C:36:03:5B:6D:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57ECDBF018BF18FE287180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/015a2688-392e-341b-8af6-5451e65c3096.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        24.1.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:ec:db:f0:18:bf:18:fe:28:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=0b91298d-13f7-45d2-a4ea-3402e562d176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4f:0e:f7:e1:94:13:9e:a5:50:0f:b4:79:c4:
                    76:45:a2:31:44:28:3c:c0:51:21:64:6e:b7:e3:66:
                    9a:c1:d7:f4:fc:45:77:3a:fe:8d:80:af:12:b8:57:
                    ce:a4:2c:47:ae:6a:be:0d:ae:87:fe:44:59:23:42:
                    b0:6a:80:26:f1:9d:e6:12:60:62:ff:6a:4a:2d:83:
                    9f:c1:6c:bd:f1:dc:1f:47:4b:37:f9:63:86:77:6b:
                    81:c3:8a:a2:b3:45:ef:94:76:37:b6:28:2f:8d:b5:
                    73:8c:72:84:5b:52:6d:86:7c:ce:4f:64:a0:6e:23:
                    6c:bf:11:fa:c5:de:e6:25:2a:3c:37:7b:de:69:b2:
                    78:6d:22:d7:1d:a3:a0:0d:4e:38:41:9b:3b:a4:fc:
                    cd:1d:ce:77:16:60:a4:df:8d:17:eb:fd:6f:5d:90:
                    f9:e1:c4:21:ce:d7:81:61:54:e9:c2:96:23:87:d9:
                    05:80:ca:6f:f1:7b:8f:6f:1e:61:9d:57:4b:d0:52:
                    37:a3:2b:1c:0f:b9:49:1a:fc:db:09:5e:eb:90:5f:
                    ad:4d:d8:f4:8b:e1:2d:f7:f2:0b:39:2d:aa:dd:21:
                    dc:c6:50:ec:4d:e6:ec:bd:d2:2e:63:f9:24:33:ff:
                    2a:9c:b1:5d:c1:f3:73:12:d5:e7:22:25:9c:5c:25:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:43:FA:50:EB:8E:0F:3D:A3:09:CD:15:66:AF:9C:36:03:5B:6D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/015a2688-392e-341b-8af6-5451e65c3096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:cf:5f:76:da:94:ff:bf:86:c6:de:9e:cb:bc:43:16:bc:
         61:02:f3:3b:07:a4:d0:7c:52:91:eb:81:c4:ea:f5:98:f8:49:
         fe:b6:fe:5b:e0:34:25:75:35:2d:da:80:73:c3:ef:55:27:fe:
         76:bb:d8:bd:94:af:e9:48:5e:31:1b:e9:d4:75:6f:b7:63:f1:
         78:19:98:d6:53:31:6c:3b:12:7e:f6:c5:93:0a:14:fa:fe:f2:
         86:72:2e:e9:10:09:15:1e:84:1e:71:53:01:03:ce:aa:f3:20:
         cb:e7:7c:69:62:8f:e4:24:1f:37:a3:c4:2b:e0:2b:07:9f:ef:
         e2:98:7d:47:f4:c9:82:2b:a9:30:ce:68:49:b8:8c:fa:8a:a3:
         4b:09:77:eb:3d:53:db:e9:54:2f:86:95:c7:81:50:5b:a1:7c:
         f0:c8:71:06:e1:b6:cf:53:cb:89:2f:f3:4b:78:f3:48:25:cb:
         d2:fb:1c:a4:71:97:53:90:88:ed:19:70:aa:14:f0:96:2e:67:
         97:7b:f6:1c:60:e9:48:98:42:8a:e9:e4:77:e2:02:58:d9:35:
         23:f9:10:69:d1:53:57:c7:15:04:80:62:fc:ca:97:3d:a2:62:
         e7:58:82:89:e2:f7:cb:44:35:a2:ee:e1:8e:3a:5d:ec:28:dc:
         b2:02:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:08:03 2026 by rpki-client