Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa
File:                     875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa (raw, json)
Hash identifier:          IMZZvNbnLUjBAgrq+NMSYPiqJeSyb/lRnqP8uSFHNk8=
Subject key identifier:   BD:11:8F:26:0B:61:62:A5:32:C0:CB:C7:C0:03:AC:09:6E:24:A8:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA818F558DD79CA62D8A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        24.147.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:81:8f:55:8d:d7:9c:a6:2d:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=66042b04-9879-423d-8531-79e2babded5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:4c:28:64:67:ff:d9:73:36:2f:09:85:c7:
                    36:0b:88:67:6f:ef:7a:61:02:5c:ed:b9:de:25:b9:
                    0d:1a:9a:2c:fc:2e:31:98:2f:ad:2d:0f:77:04:88:
                    1f:39:23:29:ca:71:a7:c8:10:32:c9:39:2f:7e:2b:
                    87:f6:92:41:b3:48:07:d2:af:dd:7f:1a:4f:bc:f0:
                    ad:83:5a:4f:83:ab:92:10:fe:92:80:fc:7a:c0:47:
                    ff:59:05:f3:ef:e8:ea:b0:25:35:14:59:0c:41:91:
                    0b:14:7c:b1:52:08:aa:fb:a3:7e:f7:0b:5f:d1:04:
                    80:c2:c5:bd:7c:fd:18:eb:92:42:df:78:fc:1a:88:
                    5c:cd:9c:de:72:b6:49:ea:41:74:60:1e:a2:b0:33:
                    83:3e:97:37:d7:00:51:7d:2f:10:90:99:94:02:d4:
                    b6:6d:51:7e:92:95:ba:f0:a2:21:56:83:0f:7c:4b:
                    cb:13:e5:57:d4:0c:c3:ba:26:ec:47:b2:0e:43:da:
                    92:91:a9:0c:c4:40:67:61:99:cc:f3:7a:83:0d:34:
                    3b:39:d5:09:2e:d4:5b:a6:c8:bf:83:46:8e:40:34:
                    17:cf:fc:21:7f:a0:da:dc:43:23:ca:7a:ca:3d:28:
                    a9:bc:8a:27:43:b7:c2:38:35:13:5e:4e:5b:bb:67:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:8F:26:0B:61:62:A5:32:C0:CB:C7:C0:03:AC:09:6E:24:A8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/875fdd1a-97d2-3c13-aeb5-add1b3adfafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e1:a3:ce:4a:86:60:74:fd:5a:b4:fa:2d:02:72:a7:1f:ca:
         38:98:de:ce:62:82:9e:14:22:d4:92:af:99:da:26:7d:68:5d:
         06:d4:a7:75:4c:bb:a8:5a:df:18:63:af:ca:bf:6a:ab:f2:28:
         a7:4a:a1:41:86:1e:34:5b:2d:78:8e:34:a4:b1:5d:4f:a0:9f:
         b9:ec:d4:9f:b8:c2:a9:39:74:28:70:0a:4d:e8:4c:ad:5e:68:
         a1:a8:80:b6:f7:db:cb:28:6d:dc:61:ca:ae:53:2d:7f:2c:1e:
         2a:3e:d5:bc:a6:84:cd:b9:cc:2e:8a:cb:05:86:f0:ac:a4:fd:
         2b:f4:64:1e:cf:5d:a8:97:3a:ed:5f:7a:b5:a0:2e:5c:23:07:
         e8:28:27:6c:19:d5:a1:14:c3:78:5c:c0:42:e7:f2:46:2a:65:
         b0:c3:76:c6:4b:f9:21:2a:4e:b3:1f:8b:74:1b:8b:2d:39:a3:
         cc:3c:7a:83:db:f1:7d:34:7a:b8:e0:6f:fe:7a:cb:2e:11:e2:
         33:ac:8e:e0:7a:51:fa:73:9d:fe:f9:29:09:84:53:c8:65:c2:
         47:a5:03:3f:cf:05:74:f7:10:c2:39:f5:d6:aa:36:cb:6d:fe:
         b3:7f:6a:81:18:8d:66:56:99:50:d3:77:89:3b:f7:44:c7:4e:
         d2:ab:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:17 2026 by rpki-client