Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/689381f8-2ff7-398e-92b9-02f12d643fcf.roa
File:                     689381f8-2ff7-398e-92b9-02f12d643fcf.roa (raw, json)
Hash identifier:          Z0SOvkbvy/F+LKPY2iXi1eB/T+GsApO0piGWwici2Ms=
Subject key identifier:   0F:89:99:74:CC:12:D2:70:C9:07:66:0B:E5:BA:E2:8E:40:89:81:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA7954C814CE6E284A3190680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/689381f8-2ff7-398e-92b9-02f12d643fcf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7922
IP address blocks:        96.108.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:4c:81:4c:e6:e2:84:a3:19:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4e61c8b9-c0d4-40a6-b309-19925a9e6edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:82:f9:06:fc:d5:9f:dd:d9:7f:04:18:ab:aa:
                    24:fa:64:d2:cd:3f:37:6e:cb:14:b5:6d:53:b8:68:
                    f0:10:a9:d8:bf:25:4b:55:c8:49:80:7f:2b:12:02:
                    d8:49:f6:40:54:a2:83:0c:fb:c7:9b:6d:b1:aa:f3:
                    e4:24:2d:d5:71:9d:a4:18:07:31:cf:0f:15:81:f1:
                    d0:d5:a9:36:63:64:18:9a:86:17:c1:35:d7:41:ee:
                    1b:19:a1:68:88:22:3c:ea:0b:8e:6d:26:0f:02:12:
                    53:d3:e0:53:1c:a0:e5:f9:85:ff:42:02:98:d2:d7:
                    73:32:c2:f5:2f:72:d9:51:dc:9d:3d:81:3d:f1:c8:
                    59:68:06:4f:ae:3a:f2:da:40:2b:de:39:45:e6:d0:
                    de:92:0b:1f:99:4a:e5:25:03:35:1a:c5:90:72:2a:
                    0a:73:33:0e:07:08:b5:28:b4:fb:b0:54:c9:98:39:
                    00:11:f5:7a:e7:56:cd:cc:a6:d9:bb:49:9d:49:36:
                    b2:dd:ef:57:ca:36:2d:2d:31:42:a6:f6:e2:26:4d:
                    84:07:72:1c:e5:00:67:11:29:bc:24:4e:c4:5a:24:
                    13:27:2c:14:2d:08:04:c4:22:4d:ad:0b:3b:2b:2c:
                    0b:49:7c:ab:99:09:a1:a9:d2:1f:7e:c7:83:b3:a8:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:89:99:74:CC:12:D2:70:C9:07:66:0B:E5:BA:E2:8E:40:89:81:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/689381f8-2ff7-398e-92b9-02f12d643fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:d2:d8:47:75:bd:00:a2:60:f5:01:23:95:32:27:f1:fe:
         35:b0:6a:d2:f0:31:26:da:13:4d:d5:f7:d3:ee:18:17:12:9d:
         93:60:93:38:d0:8d:cb:a2:ae:8f:54:a6:8d:fd:b6:fb:3e:57:
         df:de:c1:01:45:9f:b0:32:d0:aa:89:cf:a9:b5:ed:fe:35:2d:
         4d:38:94:36:6c:1b:61:4f:95:4f:3d:08:7a:32:d4:44:37:82:
         3b:10:91:ad:3a:be:80:d5:c8:88:17:94:5d:00:ad:7b:6c:2f:
         44:a4:77:0e:e2:ea:53:2e:c1:57:b7:c0:49:a9:f1:2c:12:7d:
         80:ee:05:21:c4:21:bc:95:7a:2e:bf:ca:70:7e:bd:07:58:85:
         9e:01:39:68:10:5c:b9:3d:35:47:63:48:e1:16:ce:4a:2d:7d:
         9b:53:d8:9b:0e:ac:23:da:84:34:4d:e7:c1:37:5a:ca:1d:99:
         13:78:5f:13:b3:bc:b8:44:a4:2f:0f:ed:66:af:6a:83:97:f9:
         ce:fd:e1:9d:a9:fc:ba:eb:36:2b:95:38:ca:01:63:93:03:30:
         1c:a3:78:7d:4e:46:5a:b2:14:53:ec:f6:63:a4:b0:72:a1:0d:
         00:32:67:65:cc:20:2b:b4:ff:51:0f:23:6d:53:bf:4f:cc:9f:
         87:f7:dd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:30:30 2026 by rpki-client