Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28932e1-6d2d-3b11-8071-ee99531c0c50.roa
File:                     a28932e1-6d2d-3b11-8071-ee99531c0c50.roa (raw, json)
Hash identifier:          jfjSIxMMIZ7mMT+v4WRqtGWjqj1LBBG7IK4HWm2GdsQ=
Subject key identifier:   06:F4:B1:0E:80:1C:E0:51:DE:36:CA:35:E5:09:9B:28:C2:60:35:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE905595C9EB9071B5E3080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28932e1-6d2d-3b11-8071-ee99531c0c50.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33659
IP address blocks:        24.124.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:05:59:5c:9e:b9:07:1b:5e:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=7b713e63-fde0-47de-b613-e673134393f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:a9:07:86:4f:c1:69:f5:19:0e:b7:7a:f6:
                    4d:4c:65:72:9f:6a:ce:f0:d3:93:6d:72:51:df:e5:
                    6e:97:1c:74:96:e1:99:9b:b2:29:5d:4b:63:23:b5:
                    96:53:aa:c6:2b:2b:9c:41:c5:70:90:05:91:34:62:
                    82:bc:84:d1:42:51:a9:68:c2:90:9d:a6:52:ec:dd:
                    32:6b:9d:bb:3e:d0:3b:d2:7a:ed:46:b6:ed:fb:bb:
                    c8:e3:d4:9a:bf:ab:af:87:c1:2a:40:79:8c:40:a9:
                    2b:19:dc:73:cd:2b:42:e8:8e:e6:96:88:a9:9e:51:
                    b9:70:7e:28:82:cb:99:cc:06:cb:2c:c4:f7:69:53:
                    cb:50:95:32:c8:97:6e:d1:68:78:06:47:99:12:d8:
                    2f:e6:5b:73:29:bd:67:54:b0:e6:c9:7f:58:79:c4:
                    98:90:89:21:5b:6f:4b:47:4a:d1:3a:fe:ec:fb:2a:
                    15:e6:80:02:95:d5:6a:9b:3f:71:c8:3d:ca:ba:40:
                    0b:93:17:14:01:ab:f5:a7:2a:a3:10:ae:d5:34:8a:
                    27:61:18:7d:d6:68:50:f6:9d:9b:5e:b3:65:d4:dd:
                    35:c5:68:20:74:76:2a:ad:fa:87:c6:23:76:dd:d5:
                    ff:4d:74:6e:50:dc:fc:48:68:67:46:1f:db:04:a0:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F4:B1:0E:80:1C:E0:51:DE:36:CA:35:E5:09:9B:28:C2:60:35:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a28932e1-6d2d-3b11-8071-ee99531c0c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.124.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:60:b6:74:38:e2:5e:e9:46:79:03:8a:26:31:65:00:d9:09:
         cb:87:06:61:58:bf:b4:fc:dc:cd:57:68:6e:38:42:96:d8:86:
         0f:05:39:b6:da:49:47:e8:eb:54:e7:3e:ed:b0:71:67:00:9b:
         b1:9f:d3:c5:59:27:29:fb:d2:a3:c6:e5:21:1a:d5:e9:93:69:
         2f:86:47:ab:2b:6c:74:ba:4b:ef:04:f8:8f:c9:1d:cf:09:92:
         41:b6:c4:6c:fb:a8:90:9e:66:27:7a:92:1a:18:01:f1:42:9e:
         8d:25:18:d1:a2:09:f7:44:3d:05:a9:f8:b2:1c:ad:b9:e6:71:
         5a:6a:33:6f:6d:07:46:02:b3:8e:27:b4:05:19:cd:62:e1:d3:
         8a:18:d5:41:91:f0:f3:73:61:84:3b:3e:40:e7:25:21:52:1d:
         49:40:d4:41:36:e8:92:64:c7:1c:b0:e2:bf:6c:8f:67:5f:90:
         a7:f1:b4:6e:58:78:1c:ae:a8:05:c4:b2:a3:1c:9c:3e:d0:25:
         ed:9d:b1:91:03:68:3d:65:a1:2b:b6:a0:18:d5:5e:19:c1:43:
         ac:51:e0:20:9f:23:43:50:58:5f:f0:f5:15:a2:59:55:dd:41:
         be:6f:42:ea:4c:3d:b3:a6:c1:7d:ba:19:2c:ed:0a:8d:c5:5c:
         65:fe:d8:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96QVZXJ65BxteMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
N2I3MTNlNjMtZmRlMC00N2RlLWI2MTMtZTY3MzEzNDM5M2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr2pB4ZPwWn1GQ63evZNTGVyn2rO8NOTbXJR
3+Vulxx0luGZm7IpXUtjI7WWU6rGKyucQcVwkAWRNGKCvITRQlGpaMKQnaZS7N0y
a527PtA70nrtRrbt+7vI49Sav6uvh8EqQHmMQKkrGdxzzStC6I7mloipnlG5cH4o
gsuZzAbLLMT3aVPLUJUyyJdu0Wh4BkeZEtgv5ltzKb1nVLDmyX9YecSYkIkhW29L
R0rROv7s+yoV5oACldVqmz9xyD3KukALkxcUAav1pyqjEK7VNIonYRh91mhQ9p2b
XrNl1N01xWggdHYqrfqHxiN23dX/TXRuUNz8SGhnRh/bBKBqBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAb0sQ6AHOBR3jbKNeUJmyjCYDXXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI4OTMyZTEtNmQyZC0z
YjExLTgwNzEtZWU5OTUzMWMwYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGHzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpgtnQ44l7pRnkDiiYxZQDZCcuHBmFYv7T83M1XaG44QpbYhg8FObba
SUfo61TnPu2wcWcAm7Gf08VZJyn70qPG5SEa1emTaS+GR6srbHS6S+8E+I/JHc8J
kkG2xGz7qJCeZid6khoYAfFCno0lGNGiCfdEPQWp+LIcrbnmcVpqM29tB0YCs44n
tAUZzWLh04oY1UGR8PNzYYQ7PkDnJSFSHUlA1EE26JJkxxyw4r9sj2dfkKfxtG5Y
eByuqAXEsqMcnD7QJe2dsZEDaD1loSu2oBjVXhnBQ6xR4CCfI0NQWF/w9RWiWVXd
Qb5vQupMPbOmwX26GSztCo3FXGX+2EA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:58:25 2026 by rpki-client