Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7ccf91-44aa-30f4-afc6-c65caa4dceb8.roa
File:                     2f7ccf91-44aa-30f4-afc6-c65caa4dceb8.roa (raw, json)
Hash identifier:          C2blOK92HcS78U2jQijfLy9DRAnii0VBgONGm7zMgVQ=
Subject key identifier:   62:B7:B0:51:BC:D9:9B:24:47:EF:A6:87:7F:39:56:70:42:ED:33:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81005D8557FA7396FE763CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7ccf91-44aa-30f4-afc6-c65caa4dceb8.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        24.125.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:5d:85:57:fa:73:96:fe:76:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=0dcfc881-f489-4f90-8321-0c46fc9b6c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:a4:ab:32:b8:e7:c1:58:d3:f4:ae:63:2c:
                    17:18:05:a7:5b:a0:84:45:5d:9a:0f:9d:2d:da:d4:
                    5a:e3:24:22:24:53:09:31:45:55:b2:99:78:64:80:
                    78:9f:bf:c5:03:9b:66:8b:70:02:62:ed:41:59:6b:
                    99:18:e5:cd:a0:be:61:78:11:ac:38:01:b6:fe:6d:
                    96:c2:24:3f:b6:9b:26:cd:b4:9a:e7:a6:cc:21:2c:
                    bc:10:94:e4:b6:a0:e4:ef:bd:60:8d:0b:d0:1b:fa:
                    01:13:0f:a9:f6:eb:7b:02:a3:a7:e7:3b:4a:10:a9:
                    80:fa:9c:70:78:0e:14:61:6c:f2:5a:c1:96:a0:b8:
                    d8:10:ab:6f:56:8b:53:58:19:18:58:3a:02:cf:7d:
                    6c:1d:e1:c4:54:df:3d:b1:d7:d8:17:43:90:55:16:
                    a8:42:d3:12:13:f3:69:83:8c:c8:6a:d5:9e:dc:a6:
                    68:a8:7e:14:48:eb:78:64:b6:40:6a:14:54:bf:c6:
                    2d:76:05:f3:c4:9f:fc:d2:da:24:5c:b1:d7:c2:0a:
                    32:d4:59:59:84:64:04:18:7f:1b:41:15:e3:ae:92:
                    18:23:2a:0d:cc:67:e7:09:e5:10:19:f7:9d:e3:66:
                    29:ca:7d:0e:0b:07:d5:da:63:9e:94:81:f0:6f:1c:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B7:B0:51:BC:D9:9B:24:47:EF:A6:87:7F:39:56:70:42:ED:33:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7ccf91-44aa-30f4-afc6-c65caa4dceb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.125.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:96:57:89:75:fc:50:d1:ce:58:4a:be:bb:d1:79:cc:82:4f:
         0d:1c:d7:e8:38:68:80:db:9e:0c:6e:35:a7:e3:b9:92:85:7c:
         3e:12:11:af:21:6c:99:d0:7f:99:41:33:96:66:f5:38:f1:49:
         d6:45:5c:83:77:08:77:e5:13:d0:3b:77:37:8a:5e:f1:1d:b8:
         96:b3:8a:af:2f:c8:f7:40:3f:ab:c2:97:75:27:f5:5f:76:8a:
         ce:67:8d:a3:08:16:eb:ce:89:bb:72:99:35:69:65:9c:cd:f8:
         c6:90:6f:5f:c5:1e:c1:54:e7:70:30:47:e7:52:98:38:8a:58:
         a3:e7:f2:24:5e:4f:33:f0:4d:f2:88:03:6d:df:11:69:6a:09:
         32:db:76:d0:3c:bb:58:d4:8e:65:0f:53:fa:69:64:b1:de:cb:
         b6:0c:66:f2:70:02:24:4c:bb:a3:7c:04:4f:14:5b:25:dc:8d:
         b1:dc:56:88:5c:93:aa:bb:2c:93:70:ff:93:79:ee:13:e8:9d:
         18:41:b6:88:4b:ea:50:8f:0f:a2:de:02:7f:5f:eb:2a:72:a3:
         b5:6b:20:37:70:46:25:d0:cf:c6:f8:36:90:8d:12:b5:c8:fd:
         2f:d1:22:5b:9b:b2:df:77:fe:7d:64:2c:3f:f4:48:fc:93:6f:
         bc:5f:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:41 2026 by rpki-client