Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9a5d449-fe0f-39f5-8a58-ee5458313105.roa
File:                     e9a5d449-fe0f-39f5-8a58-ee5458313105.roa (raw, json)
Hash identifier:          bMCWgQC2HixCIQTPlMfACEwWFe2Ki4SLlgS1/nfMypA=
Subject key identifier:   8A:F7:FC:44:3A:85:6C:B7:AA:B8:C8:36:14:7E:61:25:4A:6B:0D:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57F226ADAA49C0CF77EB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9a5d449-fe0f-39f5-8a58-ee5458313105.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        24.14.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:f2:26:ad:aa:49:c0:cf:77:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=6da90b64-2132-4f54-814a-09de0eff7fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:09:58:e3:b0:b7:83:2a:b9:4d:23:53:f8:11:
                    52:39:d2:30:9c:02:98:85:2f:74:7c:2f:79:0c:98:
                    ff:6f:2a:d6:4c:d0:d8:19:f2:56:d5:3b:ce:69:63:
                    5b:71:95:d6:e0:78:30:b9:18:b2:07:8f:81:45:04:
                    d7:2c:db:ba:ba:b0:19:df:a6:23:54:a7:67:79:4e:
                    c0:b2:aa:94:ce:fb:41:80:fd:41:15:4d:06:b8:e9:
                    77:39:ec:b4:9a:b9:1d:89:1c:ac:cc:ac:3f:a0:db:
                    40:92:1e:93:9f:c1:25:65:bb:47:d9:e4:28:93:69:
                    c9:b3:48:82:9e:95:40:22:52:8c:ac:44:ae:8c:77:
                    b0:3b:f1:57:99:81:bb:34:47:85:71:bb:b8:ca:5a:
                    1e:fe:03:77:ae:88:7b:d7:22:14:a6:c3:88:1a:ba:
                    8f:07:1b:70:e3:88:2e:6c:f2:58:50:8e:ef:9c:0b:
                    34:23:2f:aa:76:ab:11:1f:81:aa:bd:f6:36:cc:04:
                    91:f3:74:93:e4:ba:57:f0:d8:af:c8:d6:fe:8a:61:
                    c6:3f:09:46:18:d5:0e:c1:f6:7e:a4:f9:f8:b7:ae:
                    4a:b1:00:9a:81:a5:97:4a:9c:dd:25:79:87:03:2b:
                    e3:bf:c7:9b:37:32:7b:92:bc:9c:d1:ad:56:e9:06:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F7:FC:44:3A:85:6C:B7:AA:B8:C8:36:14:7E:61:25:4A:6B:0D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9a5d449-fe0f-39f5-8a58-ee5458313105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:ab:a7:1c:f4:1c:52:1f:cb:da:04:8b:dc:db:57:38:dd:
         10:01:5a:96:fc:11:e7:f2:53:e0:0a:d3:d9:00:7c:e3:c0:61:
         8f:41:d0:16:51:98:b2:9c:b4:96:0a:cb:69:e2:5c:04:0d:f8:
         68:ea:7c:97:43:c2:51:ca:d1:da:5c:32:ec:92:bc:61:d7:45:
         6e:34:6d:4c:63:d8:26:df:ee:ef:d9:39:d4:bf:c8:79:f6:c5:
         41:82:4b:e7:21:ec:55:42:05:1e:96:8e:8d:b2:dd:21:cb:1f:
         de:7b:11:3a:ef:8a:42:6a:79:c1:1b:76:86:85:39:4c:ad:00:
         cf:a7:12:84:57:5f:6d:e7:00:ec:97:fd:fb:25:e0:9f:af:f7:
         99:0d:9d:b4:90:8e:59:58:8f:55:fd:5f:ac:ee:ba:b1:c9:29:
         c4:c9:f6:cb:e1:a1:2e:a2:e8:bb:4a:2c:72:01:3a:08:d4:c9:
         46:56:8a:2e:db:13:57:69:1f:7c:0a:e6:9b:22:40:63:50:32:
         e9:d0:f3:14:95:81:0b:cd:1d:75:45:39:fd:1f:d3:fb:28:9e:
         48:32:05:d1:17:75:22:f6:13:6d:09:be:ba:2d:24:92:e2:43:
         16:77:db:85:f1:2c:f6:78:17:84:88:8e:ba:6d:e9:09:bd:9a:
         9a:f2:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:08 2026 by rpki-client