Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f2a788-7a3c-3cf6-8be7-2bcd4e5072c2.roa
File:                     e8f2a788-7a3c-3cf6-8be7-2bcd4e5072c2.roa (raw, json)
Hash identifier:          1gU0CJAeQWP4KO5TiyxnTBShPvkuA8IpqhVEPqUa43Q=
Subject key identifier:   42:15:E5:C7:10:D3:16:91:D4:E5:C5:53:0F:25:3B:B2:1E:AB:47:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BA50E5D590C44428523530
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f2a788-7a3c-3cf6-8be7-2bcd4e5072c2.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33490
IP address blocks:        24.21.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:50:e5:d5:90:c4:44:28:52:35:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=05e4343c-26c3-4cd2-a501-32733a43bfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:a3:fd:c9:38:45:17:7c:c7:db:0a:49:e6:
                    3e:08:c6:6e:99:52:30:0e:7d:b2:4b:bb:98:6f:a2:
                    d9:db:88:c2:28:6d:b7:56:a4:95:57:49:7f:51:da:
                    69:b1:0d:5f:91:31:1e:79:fe:27:3e:0e:09:f3:8f:
                    e5:98:6f:17:20:a2:23:60:0e:de:a9:63:8f:f8:00:
                    7f:58:b6:94:32:8f:cc:ba:79:c8:aa:1d:26:3d:f6:
                    7b:3e:41:31:8c:f5:1c:ac:01:f3:20:af:1b:d0:88:
                    21:12:be:9a:d9:e3:b6:66:4c:ac:61:ee:d2:c5:c9:
                    d8:74:00:f5:bf:14:ec:c7:3f:a5:b3:e3:86:87:58:
                    0f:a6:3d:47:f9:97:6f:51:38:b4:8a:79:aa:fb:c9:
                    08:af:81:cb:68:5b:26:a7:59:92:be:16:79:2e:95:
                    ca:d5:f4:7f:13:99:ce:43:eb:b8:3b:4b:60:1b:16:
                    c9:20:3f:45:6a:e6:87:89:ce:bb:7a:2b:29:4b:d6:
                    6e:2a:38:8d:a8:89:c1:c4:8a:41:b0:2d:e5:c8:72:
                    63:f1:5b:31:51:79:8e:96:0a:fa:9c:a8:bf:b9:8b:
                    81:7e:4d:60:6e:77:c0:94:96:7a:a8:60:4d:12:03:
                    27:57:45:5a:5d:4c:cf:7e:f5:40:b9:a7:9f:f9:43:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:E5:C7:10:D3:16:91:D4:E5:C5:53:0F:25:3B:B2:1E:AB:47:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8f2a788-7a3c-3cf6-8be7-2bcd4e5072c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.21.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:cb:30:18:b9:6c:bc:d3:ba:3a:dd:45:6a:f1:95:a6:b4:
         85:2d:de:2f:e4:f1:cd:67:49:87:17:f1:64:c2:bc:f8:eb:84:
         b8:71:71:a5:87:e6:cf:63:c5:90:d2:5b:94:48:20:88:7f:f1:
         b1:eb:02:fb:cc:db:0a:b2:32:21:a4:ac:d8:4e:71:a1:fd:ae:
         4a:0c:77:f0:43:65:1b:41:55:2e:51:cd:08:5f:e4:cd:cf:b7:
         63:7f:cf:b4:6d:09:fc:1f:26:5b:bb:6b:b2:c3:f4:1b:73:d9:
         c6:c5:cd:0a:16:33:89:1a:bb:83:1e:29:99:01:f9:c2:28:34:
         a2:c7:f6:2a:55:6f:26:27:26:64:cd:ad:bd:fb:34:2b:ab:9b:
         a1:8d:d0:df:26:7e:f9:50:f0:4d:e1:28:49:04:10:d8:9f:35:
         e8:9e:e2:8a:89:8d:97:5e:e3:59:92:44:fe:99:a4:64:f9:4a:
         70:02:59:76:fa:1d:eb:77:77:d2:c3:77:14:29:24:93:4d:73:
         a1:f0:d5:ae:f0:7a:b7:55:1b:72:6d:3a:a0:f1:7c:51:ab:56:
         1b:8c:cf:e6:57:8c:df:da:6e:42:44:f7:c1:60:a0:00:df:63:
         7c:7a:5b:2a:f8:80:23:e7:b8:c2:b7:00:c7:ac:94:67:07:a3:
         b3:19:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:22 2026 by rpki-client