Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc55519b-f93c-38a3-8085-1ecc76db7f5b.roa
File:                     fc55519b-f93c-38a3-8085-1ecc76db7f5b.roa (raw, json)
Hash identifier:          A6p8F8py0ObZyYrYf7RU1mZXPhXuFXQHmYQLrF598zg=
Subject key identifier:   30:51:7A:DD:43:74:28:B1:FC:6A:D5:FD:FC:B2:3E:FA:07:0E:3A:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CA061D8CDAFD7B0EDB46E6880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc55519b-f93c-38a3-8085-1ecc76db7f5b.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     7725
IP address blocks:        24.30.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:d8:cd:af:d7:b0:ed:b4:6e:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=b597dd70-5c95-40e5-a998-133962a74bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:ba:71:11:9d:cb:9c:bc:72:e1:43:b2:8d:
                    96:bf:6f:65:a3:12:f0:98:73:ef:07:64:54:8c:4e:
                    89:d4:87:9e:01:e7:59:51:3d:6f:f3:92:f1:97:0c:
                    14:5e:ce:ad:5c:22:60:59:7b:37:8a:2d:31:78:0d:
                    79:25:f1:3d:08:81:b9:f2:1b:60:ad:33:17:3d:75:
                    0d:90:ce:dd:4c:c0:fe:4a:02:48:f7:75:67:3a:4d:
                    7f:59:40:f9:f1:ee:23:bb:a7:e9:c4:c2:6c:88:5a:
                    e7:e1:42:62:71:2d:33:b3:ca:9f:f2:92:00:56:2c:
                    d1:38:15:4e:5f:ba:d7:d1:96:e1:4b:32:02:2a:64:
                    82:27:bc:d8:b9:7c:d7:ae:42:9f:8b:d7:b0:83:0f:
                    6c:3c:a3:ed:a1:02:b5:8d:ab:de:f0:5e:3d:65:a3:
                    13:a4:38:0d:fa:c1:cc:30:d9:c8:b6:cd:8a:d3:64:
                    ae:ce:54:1d:ea:e9:a9:af:a1:6a:cf:f3:7c:16:fb:
                    c1:b5:23:f7:49:ce:23:ef:e0:7e:3e:3c:20:1b:5f:
                    80:76:13:df:48:e9:c1:aa:74:4b:c7:15:e5:12:4b:
                    3e:ac:ed:66:3c:30:b2:87:b6:ff:c5:db:e1:10:42:
                    da:69:36:6c:7b:65:53:ad:3b:92:41:e3:40:b1:1f:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:51:7A:DD:43:74:28:B1:FC:6A:D5:FD:FC:B2:3E:FA:07:0E:3A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc55519b-f93c-38a3-8085-1ecc76db7f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:3d:62:ab:a0:ee:66:3b:2e:af:63:37:25:75:a8:46:18:
         44:b9:29:14:ef:e0:42:b4:a5:3e:87:3a:9e:b9:55:0a:1f:85:
         30:b3:e2:c8:01:03:85:3e:5e:61:a1:50:8f:31:a8:d0:dd:ba:
         07:ff:96:00:d2:6d:e0:c7:ec:17:a9:ce:cc:14:ac:88:b8:f7:
         0c:14:1a:9f:be:87:cd:a3:e9:a1:eb:e4:2c:b2:d3:2d:ec:b7:
         17:0a:e3:c1:f2:48:60:bc:c5:a6:18:94:28:5d:14:69:c2:7c:
         5d:27:61:ae:25:54:b7:1c:79:fa:ab:83:02:02:5b:b1:07:66:
         ed:20:96:30:95:22:87:e2:81:d4:3e:f9:76:9d:90:e4:9b:b9:
         ec:ba:33:6b:61:95:1b:31:38:dc:43:b9:d0:83:37:f3:b7:b4:
         9e:3c:0f:0d:93:11:bb:a3:58:f7:36:7b:83:4f:de:64:8d:08:
         f3:31:db:8b:a2:70:89:c0:be:d7:42:95:41:e1:85:83:8a:33:
         3f:a0:b1:1d:fe:fb:42:20:00:88:cf:83:fd:ee:75:fc:49:92:
         aa:11:21:13:b2:ac:eb:ca:d2:27:01:ba:2f:d7:c8:dc:df:4b:
         68:5b:91:32:4e:79:bd:00:6f:fc:7d:82:6a:99:a6:75:bf:96:
         f7:c7:80:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:06:09 2026 by rpki-client