Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa
File:                     e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa (raw, json)
Hash identifier:          HtNhNIRtpgqm+Ew1Y2l7uWFsA85ZNh18WdJmX4BBNJc=
Subject key identifier:   AB:D6:CB:9E:92:03:DE:39:F8:21:B0:A7:27:84:6F:B5:ED:C1:54:43
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584F23400426A6552795122A4700
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa
Signing time:             Fri 11 Sep 2026 08:37:44 +0000
ROA not before:           Fri 11 Sep 2026 08:37:44 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     4181
IP address blocks:        24.40.80.0/20 maxlen: 20
                          24.49.96.0/20 maxlen: 20
                          24.49.128.0/20 maxlen: 20
                          24.49.160.0/20 maxlen: 20
                          24.52.0.0/21 maxlen: 21
                          24.52.8.0/22 maxlen: 22
                          24.52.18.0/23 maxlen: 23
                          24.52.20.0/22 maxlen: 22
                          24.52.32.0/22 maxlen: 22
                          24.54.128.0/20 maxlen: 20
                          24.54.144.0/22 maxlen: 22
                          24.54.148.0/23 maxlen: 23
                          24.54.160.0/22 maxlen: 22
                          24.54.164.0/23 maxlen: 23
                          24.54.168.0/22 maxlen: 22
                          24.54.180.0/22 maxlen: 22
                          24.54.184.0/21 maxlen: 21
                          24.56.160.0/22 maxlen: 22
                          24.56.170.0/23 maxlen: 23
                          24.56.176.0/22 maxlen: 22
                          24.56.180.0/23 maxlen: 23
                          24.56.188.0/23 maxlen: 23
                          24.75.192.0/21 maxlen: 21
                          24.236.32.0/21 maxlen: 21
                          24.236.52.0/22 maxlen: 22
                          50.21.192.0/20 maxlen: 20
                          64.17.68.0/22 maxlen: 22
                          64.17.72.0/23 maxlen: 23
                          64.17.76.0/22 maxlen: 22
                          64.17.80.0/20 maxlen: 20
                          67.217.8.0/21 maxlen: 21
                          67.217.16.0/23 maxlen: 23
                          74.211.0.0/18 maxlen: 18
                          74.211.64.0/19 maxlen: 19
                          208.117.112.0/20 maxlen: 20
                          209.169.196.0/23 maxlen: 23
                          209.169.202.0/23 maxlen: 23
                          209.169.204.0/22 maxlen: 22
                          209.169.216.0/23 maxlen: 23
                          209.169.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:40:04:26:a6:55:27:95:12:2a:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Sep 11 08:37:44 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=6a15cabc-138a-4503-be3e-5ff089635bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:e8:56:7e:dd:6f:75:32:93:07:47:47:32:
                    46:d9:db:91:c3:0a:e2:5e:81:c3:6f:20:bd:c3:c8:
                    1a:02:53:ef:db:b0:8b:42:59:90:1b:05:6b:1f:69:
                    07:93:a2:f7:f6:fe:cc:ca:e9:04:7b:22:7c:d1:b5:
                    3a:91:30:76:06:84:af:58:b2:71:52:f8:d1:3b:1c:
                    6c:46:b9:14:f5:82:c2:41:cc:e3:15:35:af:af:d8:
                    df:47:4d:00:a6:10:13:b0:f8:23:b1:a1:27:ae:68:
                    cd:d0:f7:ba:59:07:e1:a4:f8:8a:df:24:55:20:1e:
                    58:c3:ec:1c:db:ef:fd:f1:bd:6a:55:cb:58:8c:b9:
                    0c:3e:0b:8c:ea:2f:ea:22:14:84:5f:a3:6e:d1:0d:
                    1d:44:a4:38:93:0a:d6:84:ce:18:46:18:58:33:e9:
                    b7:28:60:a4:94:00:4d:a2:4f:14:ac:e2:3f:33:5e:
                    7a:a7:85:87:5e:d3:d7:1f:fe:04:d0:48:91:b9:5b:
                    5c:21:a3:af:57:61:60:e0:40:a2:9a:8f:95:84:57:
                    9b:51:fa:98:91:5e:eb:ec:36:de:46:1e:d7:60:e0:
                    d4:be:8d:25:6e:70:24:b2:e9:2f:95:38:d3:9e:41:
                    5c:08:40:13:45:27:58:b9:e4:31:35:78:b0:f7:af:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D6:CB:9E:92:03:DE:39:F8:21:B0:A7:27:84:6F:B5:ED:C1:54:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/e04b91b7-a254-3f01-9d49-4a6cd600adf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.80.0/20
                  24.49.96.0/20
                  24.49.128.0/20
                  24.49.160.0/20
                  24.52.0.0-24.52.11.255
                  24.52.18.0-24.52.23.255
                  24.52.32.0/22
                  24.54.128.0-24.54.149.255
                  24.54.160.0-24.54.165.255
                  24.54.168.0/22
                  24.54.180.0-24.54.191.255
                  24.56.160.0/22
                  24.56.170.0/23
                  24.56.176.0-24.56.181.255
                  24.56.188.0/23
                  24.75.192.0/21
                  24.236.32.0/21
                  24.236.52.0/22
                  50.21.192.0/20
                  64.17.68.0-64.17.73.255
                  64.17.76.0-64.17.95.255
                  67.217.8.0-67.217.17.255
                  74.211.0.0-74.211.95.255
                  208.117.112.0/20
                  209.169.196.0/23
                  209.169.202.0-209.169.207.255
                  209.169.216.0/23
                  209.169.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:a0:d7:09:4a:79:a8:6d:9e:f0:d0:da:36:0b:11:f1:15:
         e6:13:84:f3:9b:a1:55:66:67:7a:ac:f0:f8:b6:7a:0c:65:91:
         4e:94:2e:2d:be:1d:af:4b:20:95:b8:63:0f:82:67:d0:2d:20:
         bd:91:43:08:b2:aa:08:ab:71:6d:00:aa:4e:66:af:98:20:0d:
         1b:0a:b4:09:86:14:c7:76:1c:10:62:b8:80:96:39:44:55:ae:
         ad:2a:bf:8a:ef:5c:c5:a8:cb:97:b0:f9:02:b7:87:22:82:25:
         9c:af:11:35:22:31:97:50:c6:1d:bc:f7:24:19:ce:31:7a:e6:
         5f:25:63:15:9f:cf:70:fa:63:90:27:59:36:d5:83:ea:81:ea:
         66:d2:85:07:1a:a3:00:e9:62:70:a7:69:28:e0:4d:64:c1:dd:
         28:04:76:3e:95:77:5e:4f:29:63:3f:c6:97:3a:b9:64:83:88:
         f5:d5:a2:b0:3d:18:0d:24:5f:36:bd:7e:d4:b5:3f:5c:3c:fe:
         b1:e9:b5:29:d0:ac:36:77:99:2f:71:c7:93:d8:8f:79:0a:ee:
         4b:59:a2:be:aa:8c:09:31:e7:6f:0b:62:3a:04:1e:11:f8:32:
         c3:7b:47:c5:48:1d:13:41:3a:d4:02:49:29:d2:3d:52:90:51:
         c8:5a:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:55:35 2026 by rpki-client