Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bc02e50-95f8-3483-a78b-eabf0a8f3272.roa
File:                     6bc02e50-95f8-3483-a78b-eabf0a8f3272.roa (raw, json)
Hash identifier:          0gwqTyIksp2spc3iHVLK2mv20yIKs5gfW83Xb+hXtTU=
Subject key identifier:   98:C3:17:C8:38:C7:D5:9A:88:17:79:62:FA:E0:04:A1:A1:EE:35:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E92C7D9316478A63AB000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bc02e50-95f8-3483-a78b-eabf0a8f3272.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        24.0.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:92:c7:d9:31:64:78:a6:3a:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=dc37ca51-7219-44bb-83df-ea5188251b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:dd:24:64:36:1b:da:b9:0c:73:f1:b3:35:
                    3d:fd:42:4f:6d:97:93:15:b5:e7:f3:3a:e2:46:8b:
                    48:42:c7:a3:96:ac:21:ad:86:c5:88:92:f4:c8:f3:
                    b3:3c:79:96:07:2d:07:91:5b:18:9a:80:ee:95:6d:
                    a5:08:23:57:cd:8f:3a:86:70:8f:6b:c0:85:3e:5d:
                    ab:b3:ec:b3:27:95:47:4d:83:4c:46:a6:21:9c:72:
                    e4:f4:e0:61:11:20:e7:cf:e5:56:db:45:87:c2:9e:
                    e4:29:28:ae:f0:32:c3:a2:da:d5:c6:bb:f8:25:2f:
                    01:d9:3e:b9:b8:b2:92:da:05:fc:ff:87:7e:44:ed:
                    bc:ba:ce:5f:2d:2b:d4:a9:af:61:7b:aa:6b:52:52:
                    77:d7:54:c0:87:9b:f9:a0:d3:c2:e4:fd:43:81:9b:
                    ad:db:0c:e8:11:e5:e9:cb:e7:c0:17:bf:8c:68:7b:
                    da:54:7b:d3:5b:52:20:a0:64:e9:b6:f1:fd:99:f4:
                    c1:c1:f2:45:84:6c:ff:19:1e:1b:b9:0d:de:27:ae:
                    7d:8d:7b:e5:da:de:4b:d2:17:10:90:8f:a4:dc:da:
                    68:47:96:de:b3:c7:8c:ec:62:bd:e6:4d:1d:dc:77:
                    f3:7a:eb:9c:0d:73:d8:23:99:a1:d9:76:44:2a:c3:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C3:17:C8:38:C7:D5:9A:88:17:79:62:FA:E0:04:A1:A1:EE:35:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bc02e50-95f8-3483-a78b-eabf0a8f3272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:f7:1e:be:7b:f9:49:c7:c4:c3:99:b5:c8:6b:0d:f8:ce:
         b4:d6:7c:a5:71:de:44:75:3d:d3:cc:27:2c:c7:2a:21:b7:7b:
         8e:a4:b5:02:c3:55:df:bb:67:b3:85:0f:e0:2b:97:74:28:4e:
         cb:65:37:ad:80:e7:88:0f:bb:61:3e:fb:55:6e:51:88:6b:ce:
         12:b5:ec:36:3b:db:63:c4:1e:94:fd:d2:dc:d6:be:17:0c:5b:
         33:42:22:88:b9:40:39:9b:f5:68:fb:68:67:ea:3e:4e:65:be:
         53:04:e8:6a:85:5d:9d:c3:b4:4a:d7:cd:ae:cd:5e:cb:16:ef:
         5b:ef:d1:9f:01:84:0c:20:fc:72:c7:98:75:e2:35:ee:67:00:
         9e:97:f4:47:96:3d:5c:2a:50:02:d0:a1:8a:62:91:1e:9d:a9:
         5c:89:13:c6:9c:b4:a0:ac:c4:79:03:ac:24:11:fa:28:ec:d9:
         5f:6a:b4:73:b0:8a:8f:51:b8:b5:0e:3b:e9:59:75:d6:e7:18:
         ed:75:4b:7c:84:56:79:67:de:b5:48:af:6f:5e:9e:2d:a7:3e:
         69:08:bb:35:8f:dd:67:1f:90:f2:8c:8e:ef:6b:e3:0a:42:1a:
         92:4d:d9:9b:ea:2b:50:c9:0a:70:04:00:85:47:e8:96:90:20:
         a2:34:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:59:51 2026 by rpki-client