Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d57c1f9-f447-3a88-bbfb-52ac748952c3.roa
File:                     1d57c1f9-f447-3a88-bbfb-52ac748952c3.roa (raw, json)
Hash identifier:          9NVAbH2vH7rEeBaGGXz0QZpd1KCEJfqodAXWmulAMSE=
Subject key identifier:   57:98:28:8D:17:68:B8:AA:6C:D2:CE:DE:A3:21:88:8E:7B:FE:02:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980BA309868258A83BB9D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d57c1f9-f447-3a88-bbfb-52ac748952c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33489
IP address blocks:        96.85.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:ba:30:98:68:25:8a:83:bb:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a29c6ddb-3fac-4bb7-83de-f50153d9ea2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:d7:2d:98:f7:6b:35:0f:c4:cf:9d:e0:ee:
                    68:60:42:11:a1:c5:57:b8:0c:40:8f:1c:2f:5e:07:
                    a3:a6:15:25:3e:31:f1:40:09:ed:f6:2c:fe:7e:d4:
                    57:81:19:f1:dd:06:3e:1e:97:96:5e:e4:97:63:04:
                    91:e4:78:36:ed:0d:99:ea:0c:8a:8c:5e:8d:6e:09:
                    9a:ef:cc:9b:8d:d4:8c:98:10:3f:f9:7e:d5:cb:5b:
                    2c:ef:89:45:94:c6:8d:2f:df:27:23:3a:f7:24:f1:
                    77:96:78:b1:81:eb:64:42:53:1a:1c:01:61:94:3a:
                    18:ed:5b:73:e4:49:26:4e:b3:9f:ad:0d:4f:a8:7f:
                    bf:40:ab:c1:df:57:ce:d5:da:ca:0c:f0:8c:26:53:
                    d8:1e:cf:4c:34:f1:51:29:c1:1f:56:63:3c:3e:b8:
                    32:78:9f:72:03:ae:e6:e5:23:6c:7d:ac:7f:e7:43:
                    49:ed:9a:65:68:41:93:b0:ca:26:d5:e6:3b:e1:ec:
                    aa:c8:51:74:86:18:8e:2f:36:68:38:21:9e:66:5a:
                    10:38:35:a5:8c:fa:4c:49:9f:da:9b:0f:6e:20:b3:
                    2f:67:fa:31:71:23:cb:f3:65:cc:81:03:70:8a:a2:
                    7f:42:31:48:45:71:94:55:a8:e7:86:26:7f:b8:67:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:28:8D:17:68:B8:AA:6C:D2:CE:DE:A3:21:88:8E:7B:FE:02:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d57c1f9-f447-3a88-bbfb-52ac748952c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.85.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:f7:cd:59:0c:28:c5:a5:17:6c:78:54:87:f2:a1:7f:07:
         59:92:39:39:3f:8a:84:3d:a2:be:10:14:b6:ad:48:02:fc:b7:
         85:5b:7e:31:74:d1:8f:00:24:60:24:9d:87:89:9a:ee:36:32:
         77:56:86:a7:29:8e:18:d1:dc:35:38:37:a5:17:6d:62:17:e2:
         6c:b8:82:66:d2:34:45:ad:65:1d:88:48:fb:94:e0:a5:ff:15:
         ae:26:07:7a:31:36:f7:8d:be:9d:ef:8f:ba:0d:db:ce:06:e2:
         eb:1d:ee:1d:92:5e:20:e6:35:29:d0:3c:27:51:03:1e:f1:55:
         ed:5a:be:93:c2:da:be:79:2e:64:2b:29:7c:d5:ef:5a:92:18:
         55:4b:7d:ff:dc:3e:01:ee:93:89:66:9a:23:61:71:77:c5:0a:
         24:4d:62:17:ed:c8:d3:17:ce:ef:0e:cf:79:bd:4d:98:07:31:
         a5:d7:85:6b:37:e3:03:36:5e:a4:cc:35:06:a4:99:dd:6e:f4:
         6c:ca:1d:24:2a:e7:67:0b:fc:9b:fc:0b:5c:74:70:f4:fe:30:
         2f:45:1a:eb:25:df:85:15:31:03:d7:14:c8:74:ee:36:d7:fe:
         a8:2b:4f:5b:6b:e6:a8:61:b8:54:39:05:c5:0b:d5:64:43:d8:
         33:48:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:57:41 2026 by rpki-client