Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ddcf171-ea6b-3e54-a872-98585ac4fda1.roa
File:                     7ddcf171-ea6b-3e54-a872-98585ac4fda1.roa (raw, json)
Hash identifier:          FsyyYzrKM8ciFsyYpxfy/KYP9WL+ICypE8Qri/3szSk=
Subject key identifier:   F0:6F:C4:01:BC:CF:77:70:D0:09:BD:41:51:8C:A2:2F:C2:FC:B5:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8EB0930ED7F352466DFF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ddcf171-ea6b-3e54-a872-98585ac4fda1.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33491
IP address blocks:        96.82.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:eb:09:30:ed:7f:35:24:66:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=4da78bfb-10fe-40a7-91ce-c4074cc2ad0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:35:f8:c4:b1:71:4d:ac:7d:ce:2c:96:8e:
                    15:5c:fe:7d:48:1c:f0:49:e3:ef:03:5d:41:86:3b:
                    be:88:2d:1f:51:30:df:9a:d7:ec:b9:d9:2b:90:23:
                    9e:04:03:b5:2b:5b:50:8a:3b:b5:2d:0e:91:e0:de:
                    0f:95:e7:d8:3b:53:15:56:1c:05:9e:6c:cf:35:50:
                    69:35:59:d5:64:b0:78:80:1e:8b:c0:6b:ca:15:29:
                    1d:31:bc:5f:5e:84:cd:1f:13:7e:88:1f:56:49:ff:
                    17:2d:7a:81:e4:cc:1e:85:57:5c:b7:a6:6f:48:7f:
                    a2:a5:f9:cc:9d:a0:a9:c9:68:86:fa:5e:6d:b2:01:
                    2d:17:54:53:60:c6:3d:eb:a7:9e:f9:95:25:4e:53:
                    e3:b6:a1:af:7e:28:1e:3f:9c:b3:1b:36:9e:6b:89:
                    41:ba:3d:1e:bd:6c:c0:6d:98:50:82:83:80:17:ba:
                    2c:0e:6f:68:a1:4c:6d:0b:47:38:8a:ea:a9:37:87:
                    c3:89:86:a4:c3:b6:20:5b:e6:89:56:af:a3:89:1a:
                    05:8f:0d:00:bb:b5:16:dd:04:b2:18:14:14:d4:58:
                    b4:1d:37:ac:0e:ca:7d:73:3e:29:c6:42:95:d1:ee:
                    74:ce:70:2f:74:7f:4d:67:8c:33:6e:60:13:12:b6:
                    09:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:C4:01:BC:CF:77:70:D0:09:BD:41:51:8C:A2:2F:C2:FC:B5:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ddcf171-ea6b-3e54-a872-98585ac4fda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.82.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:c7:00:c2:1d:52:15:9c:20:0c:d7:a2:b1:f0:d3:1d:9c:
         ff:b7:b6:10:05:1f:ef:0a:27:91:a4:e2:f5:3d:21:d3:89:ba:
         8f:5a:cf:94:90:6d:99:1c:82:64:c6:62:f7:65:e9:97:2e:56:
         4c:59:f1:b6:35:0c:d6:96:7e:ca:41:52:fd:67:fb:b1:d1:d5:
         bd:12:52:cc:2a:76:47:da:80:c7:2d:0f:4a:79:f1:8f:22:57:
         ef:2e:ce:a2:0c:c6:79:b3:b8:58:a9:54:2e:6c:25:8f:d4:19:
         16:91:00:e3:84:b1:2d:69:96:e5:ff:a7:08:65:1d:99:fb:5b:
         13:0e:bf:fd:64:80:12:13:b2:cb:74:47:a6:fa:e9:8b:26:6c:
         5d:1b:5f:e6:3c:cd:4a:15:a6:ed:ee:73:1f:1f:c8:cf:bd:53:
         8d:62:15:c6:c5:b9:fb:e3:cc:2e:0b:7e:c7:fc:09:36:78:88:
         3f:76:fc:9d:c4:69:a3:f6:ac:e0:7a:c3:68:7b:3d:8c:d6:62:
         18:c3:61:77:48:60:e5:e3:ca:62:41:f3:63:77:50:9c:83:5a:
         2e:03:5a:cd:c6:b5:59:86:e1:fe:a6:c6:12:cd:60:71:07:07:
         00:06:35:87:45:1f:b9:0a:61:21:12:4c:ea:b2:0e:f2:99:2f:
         2e:1d:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:50:43 2026 by rpki-client