Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa
File:                     5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa (raw, json)
Hash identifier:          rPeUh+qM5iorMBqsDzBtNLtQW6jpp3O6v35ihldX+Fk=
Subject key identifier:   44:F0:6E:51:F1:6D:A9:94:95:38:66:3C:5E:F8:48:7C:46:CB:DF:84
Certificate issuer:       /CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Certificate serial:       010D0C9F4328584EA445247E0DD2B22AB8336A80
Authority key identifier: EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     15149
IP address blocks:        96.45.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:24:7e:0d:d2:b2:2a:b8:33:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=3374ef2f-d7aa-411a-8bad-e7fb3cddd4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:e2:e2:40:19:ce:e2:d4:2d:c5:87:71:8c:
                    4e:ca:62:13:98:d4:7a:fb:b8:18:33:2c:65:35:fb:
                    0c:6e:b8:be:09:a1:44:5d:98:f8:45:75:2c:9c:2e:
                    28:32:4f:39:6c:49:a4:52:e6:90:dc:a6:ab:8e:3e:
                    41:41:f9:11:26:4e:25:83:a4:26:46:a7:3c:8e:99:
                    a8:9e:71:53:e8:a7:5d:99:e9:34:ae:5e:0d:7a:bd:
                    94:19:d9:c7:7b:bb:8f:36:f2:ae:e5:19:82:6b:9a:
                    27:ac:f8:96:7a:85:70:39:ab:c8:e4:45:8f:ed:fe:
                    0d:f1:6a:59:4c:f1:76:23:fd:b8:12:cf:2d:93:24:
                    7f:80:ca:a5:ed:aa:f8:46:bd:07:29:1e:2c:2e:3f:
                    df:ad:05:2e:a8:1c:dc:d4:4d:d9:14:1e:67:39:da:
                    34:d7:40:9d:00:5d:ad:a2:8d:7a:42:38:b9:97:e2:
                    c4:f9:78:5a:26:b7:cc:16:55:b0:ab:9d:4d:70:29:
                    22:ba:01:13:cf:de:89:41:a1:51:46:40:7b:f6:b8:
                    12:8e:67:f3:db:e1:17:fb:dc:39:0b:71:d6:a3:8d:
                    e9:9b:92:15:2f:30:a6:6a:5b:9f:ef:5e:99:c2:aa:
                    be:fa:96:3e:4a:13:5c:d1:43:e4:04:03:37:0f:ee:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:6E:51:F1:6D:A9:94:95:38:66:3C:5E:F8:48:7C:46:CB:DF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:e9:f1:f5:9e:e3:f2:e8:a8:d0:80:9f:48:ca:42:3c:c3:
         87:a5:87:e5:55:94:33:ad:6c:b1:0e:2e:8f:6f:ad:cd:00:9a:
         6c:9a:35:3c:c6:68:62:28:6c:19:52:61:8f:c2:64:83:cf:e5:
         95:49:99:37:ed:16:20:ca:51:47:28:9c:f1:ba:46:90:e6:e1:
         65:9b:4c:78:e8:18:5b:ae:83:16:33:ea:6c:2e:20:77:29:14:
         10:aa:8a:fd:86:63:22:68:90:97:3d:7d:e7:54:98:12:36:0e:
         7c:79:cc:a4:29:ba:e4:dd:b1:c0:c3:26:27:0c:42:b0:00:0b:
         f5:56:12:71:a2:59:b3:34:93:23:a2:ef:4b:5e:3e:8a:11:9a:
         35:7a:84:a2:bd:cc:26:0f:23:2a:7e:8a:87:88:b6:bc:89:83:
         0c:4e:fb:2a:1e:e9:9e:03:78:55:dc:9c:97:3a:14:8e:4b:35:
         c0:2d:30:5f:4a:52:d5:b3:86:12:c5:d2:ce:4f:fd:41:9c:06:
         ff:9e:52:e3:9f:af:21:f0:45:01:dc:df:48:51:1e:cf:3d:4a:
         8b:1a:fa:a3:a4:a8:ae:9a:2d:0a:54:6d:72:80:0d:85:5b:9d:
         5d:ff:64:8a:a3:b0:c5:6f:ab:41:f7:c4:48:f8:98:4f:92:78:
         14:c4:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:52:14 2026 by rpki-client