Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c7f1010-d333-399e-87b7-15fd6a9706ee.roa
File:                     5c7f1010-d333-399e-87b7-15fd6a9706ee.roa (raw, json)
Hash identifier:          t84RVJ7JGya6rOQ59MI+uZRUpmmLTTbRz1eqbZDXV8Q=
Subject key identifier:   C1:7B:DC:79:48:30:16:B7:18:CF:6D:D8:34:9A:0D:91:9D:4F:79:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8652A00D2FBA862851AC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c7f1010-d333-399e-87b7-15fd6a9706ee.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33668
IP address blocks:        96.76.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:52:a0:0d:2f:ba:86:28:51:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=aec97f98-1794-4f0e-bec1-fa47b3d649d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:48:69:e4:f1:8a:fe:ca:b8:95:11:f6:6e:
                    cf:f6:8e:a2:1b:21:02:9f:da:cf:be:42:32:4f:ab:
                    55:b1:59:aa:9f:78:7d:62:cb:f0:66:91:85:52:a9:
                    45:19:dc:85:67:55:d9:d1:5e:ea:d0:bc:22:b5:b8:
                    af:e7:25:49:3e:bc:9b:38:44:a9:30:7f:9c:61:23:
                    75:a5:ea:c8:2a:01:55:35:39:51:78:04:c9:65:da:
                    8d:07:f0:51:b1:cb:18:e7:88:e9:5a:21:de:41:2b:
                    6b:11:87:25:ee:14:14:dd:b2:3d:79:5b:69:07:3d:
                    2e:bc:54:1b:bc:32:00:f4:11:cd:03:ea:af:73:29:
                    e4:63:24:62:74:e7:60:8c:f5:2a:47:b7:78:c9:aa:
                    f1:5a:d1:45:8c:bb:d7:69:cb:60:8c:34:48:07:57:
                    08:1c:fd:06:26:d1:7e:40:69:c9:c4:93:96:64:41:
                    9e:26:66:8c:62:a4:ea:83:46:e3:a7:94:96:61:c3:
                    be:23:0b:d6:ee:8b:7b:0b:57:c2:2d:0d:f2:8f:99:
                    f1:24:c0:6c:b7:39:b5:86:60:33:17:b4:7e:c5:82:
                    e4:b2:9d:2e:e0:7e:1e:dc:67:78:0b:82:cf:71:38:
                    fe:54:78:21:79:df:7b:c2:ab:2b:c3:9d:7e:ad:4a:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7B:DC:79:48:30:16:B7:18:CF:6D:D8:34:9A:0D:91:9D:4F:79:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c7f1010-d333-399e-87b7-15fd6a9706ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.76.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:d0:3b:ce:fe:da:fd:b0:ce:bd:78:0d:7b:4a:3b:aa:83:ba:
         d6:c2:74:8d:7f:ab:2d:80:55:eb:80:c8:ca:cc:25:f5:17:60:
         c2:e5:61:a7:ea:d6:59:b0:83:93:b7:1a:ca:79:75:e0:25:ef:
         bf:ab:55:ee:d1:f2:15:65:f3:d7:86:45:99:de:8b:19:d4:7e:
         2b:31:5f:71:10:57:cc:8c:7e:5d:07:65:a0:1e:4f:b5:d5:7b:
         d1:1a:ab:b2:71:60:ce:7b:dd:7a:6f:60:7e:f0:f9:91:fe:d1:
         e8:73:ce:8a:08:7c:63:3f:5b:0f:65:d2:29:a8:6f:f0:45:54:
         60:42:ba:d7:a6:0d:59:86:0f:81:b6:25:6b:f9:84:21:fc:66:
         11:4c:7e:85:cd:64:3a:e4:9f:81:46:88:0d:7f:a2:74:ef:61:
         97:4e:82:9a:9a:15:a0:6e:ee:28:13:3a:42:ac:69:78:fd:bf:
         14:df:70:79:12:8d:12:b4:e1:88:49:49:68:fa:5f:8e:67:e2:
         67:3b:02:87:ae:aa:4e:04:d8:44:29:01:15:c4:a8:41:47:9c:
         44:db:c7:20:01:af:06:08:a0:fc:b2:52:4b:e8:70:96:64:32:
         dd:1b:09:03:26:73:d4:7f:09:86:df:18:a5:01:d8:39:73:29:
         b8:c7:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:13:26 2026 by rpki-client