Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/add3ea94-ae90-35ef-b469-5d8f08022b93.roa
File:                     add3ea94-ae90-35ef-b469-5d8f08022b93.roa (raw, json)
Hash identifier:          uCZalZ6CCYgrjWVklpc5eKQcyWPBsqhC8RIqduvuDSk=
Subject key identifier:   B1:F0:0F:9F:A9:B8:C1:CA:4C:B3:60:BE:F9:78:79:3A:EA:99:A4:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D83CAB8A29A8F523006D5DA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/add3ea94-ae90-35ef-b469-5d8f08022b93.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     33656
IP address blocks:        96.81.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b8:a2:9a:8f:52:30:06:d5:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=a6b83f95-d9cc-46c5-9307-e1b2df992d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:57:26:51:d3:07:5a:d0:88:73:b8:ef:d2:02:
                    16:a9:ba:62:fc:14:db:c2:77:7a:a2:c9:3b:0e:00:
                    50:ce:2d:3a:d7:19:6f:c5:77:82:44:c2:da:27:81:
                    b7:cf:4e:7b:2b:68:7f:a4:e0:a4:de:24:89:04:8f:
                    59:b9:de:f3:53:16:39:d6:55:1b:08:98:d8:db:3c:
                    9b:a9:e8:f0:b6:d2:26:7a:37:e1:5f:5f:e5:73:64:
                    be:1d:c1:3e:2d:89:33:d3:4e:80:55:d0:88:fd:92:
                    79:50:e9:fc:85:a4:85:2d:7b:2c:53:3a:99:3e:6f:
                    df:42:2a:7f:6d:0b:40:f7:d5:81:91:dd:16:80:bc:
                    6c:77:ee:04:df:cf:7d:2b:14:61:9a:58:18:77:af:
                    34:95:3b:1b:c0:4f:81:7a:51:04:35:05:b5:d9:e8:
                    b9:e7:e2:19:9d:40:59:96:ac:4a:81:a8:db:a1:50:
                    ee:30:69:83:fc:72:b8:b9:fc:4a:66:59:be:50:5f:
                    0e:45:32:af:1d:8b:7a:53:b4:f2:50:8a:4f:e1:74:
                    2b:76:f2:2a:49:6c:0a:92:bb:0f:97:88:c5:d3:cf:
                    25:dd:b8:dd:2c:21:ce:6e:42:c3:4a:11:32:f8:77:
                    13:ee:ba:07:ce:8d:52:e0:f5:38:cd:fa:fe:9d:65:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F0:0F:9F:A9:B8:C1:CA:4C:B3:60:BE:F9:78:79:3A:EA:99:A4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/add3ea94-ae90-35ef-b469-5d8f08022b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.81.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2a:e6:84:0c:e8:4e:ed:46:0e:57:2f:cd:79:bf:cd:ad:1b:
         19:20:e9:73:b9:60:bf:cd:fe:96:51:6c:c5:d4:7f:c3:c2:f3:
         3c:82:dc:de:49:84:23:c7:72:ec:8a:db:ab:a0:00:aa:cc:09:
         ac:70:02:25:f8:47:dd:0e:ed:9f:9c:9a:8c:de:19:e8:f6:bb:
         6d:7c:e6:4b:bb:bb:f8:5a:6d:a8:a9:a3:b8:9a:30:4a:04:4d:
         5d:49:e4:7f:07:d6:fc:37:76:97:cc:36:ae:dd:c2:7c:0e:2f:
         91:82:e2:74:5c:a0:3f:c1:ff:51:2f:78:76:07:3f:93:36:85:
         db:68:a3:fd:07:b6:09:b6:4d:e9:ab:d8:2a:9c:fd:3d:b6:ee:
         8b:4b:e6:10:a2:d9:f9:df:ea:a9:2e:34:03:38:91:05:97:84:
         ba:7e:4e:ee:f1:50:f4:d2:e4:42:17:27:a7:2f:af:ee:52:a9:
         cc:37:02:eb:42:c7:c4:22:6a:1f:9b:cd:b3:49:6d:7c:2f:44:
         a7:f5:55:80:3d:28:25:cc:8f:4f:1a:74:31:54:fb:8b:f5:20:
         67:4c:dc:ee:66:07:9a:94:b5:35:52:7b:50:10:55:25:6a:98:
         89:90:f9:2b:bb:11:ba:53:71:ca:9c:9b:ee:73:7b:48:de:4f:
         5e:4c:84:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:24 2026 by rpki-client