Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c191930d-1d05-322f-b5d9-6e9c9a7eb6d8.roa
File:                     c191930d-1d05-322f-b5d9-6e9c9a7eb6d8.roa (raw, json)
Hash identifier:          Q3F38NhgAnmoNO9Rv13QIfpp4lMJ3iUy9aNuZZSy4+c=
Subject key identifier:   19:DF:33:5E:9A:95:96:4E:BC:4E:50:2D:F2:BE:C0:B7:94:A8:FB:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE861EAB11BF6BECF4464700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c191930d-1d05-322f-b5d9-6e9c9a7eb6d8.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     21508
IP address blocks:        96.94.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:1e:ab:11:bf:6b:ec:f4:46:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=acfdcf60-73fa-4980-bbed-7fbc9f836870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:a9:e2:83:c8:e8:06:e9:50:fa:7c:3e:96:
                    a7:db:e6:35:84:32:6f:5e:88:ad:ea:7c:5b:aa:28:
                    07:36:c9:7a:ee:68:33:52:cb:67:ef:72:69:1d:6b:
                    c8:eb:5b:b2:c0:94:d1:62:f4:54:39:e2:40:c3:a1:
                    86:65:0e:70:9d:13:2d:e9:67:79:c6:4d:3a:d8:e0:
                    2b:9d:00:27:e2:43:b2:54:1c:55:69:ed:f0:fe:01:
                    88:48:ce:bb:f0:dd:c9:d8:b9:ef:d6:90:1c:5c:22:
                    0a:bd:44:1b:39:51:32:b4:27:c0:fb:a2:88:12:66:
                    3f:08:c0:80:76:a7:e9:b9:fc:46:ec:ed:10:51:58:
                    cb:7c:6f:1a:14:a3:a9:e2:d3:98:cf:c0:8c:6f:ec:
                    54:da:72:57:2b:b0:78:76:f2:20:96:c0:dd:f6:4f:
                    1d:34:13:03:16:4c:43:0a:e0:a4:1c:26:84:c1:03:
                    45:c8:e4:1a:bb:6a:3b:86:45:30:35:e4:cc:0a:1d:
                    2a:a1:6d:1e:db:5e:60:f7:18:81:a7:af:21:a4:33:
                    c4:53:df:82:2d:1c:e0:93:c6:74:b2:c8:3e:fb:57:
                    06:e8:38:fa:3c:ac:dc:f1:80:93:0e:a0:58:a2:22:
                    f2:2a:af:90:42:2b:2c:62:df:f3:ad:02:ec:ff:29:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DF:33:5E:9A:95:96:4E:BC:4E:50:2D:F2:BE:C0:B7:94:A8:FB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c191930d-1d05-322f-b5d9-6e9c9a7eb6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.94.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:62:e3:3f:ff:cc:7f:e3:b2:6a:f9:40:5f:78:43:74:b5:71:
         eb:d2:d4:34:a8:89:55:53:18:2c:45:92:00:be:06:6a:01:67:
         c1:85:38:8a:c2:a9:52:d6:ad:0b:5d:e3:03:2a:f2:cf:19:d8:
         24:c4:bf:10:05:7e:38:56:a6:c3:d8:fa:d8:a2:25:f1:71:59:
         ad:60:e3:fa:d3:77:42:17:74:ab:28:52:82:ee:56:e9:b5:f1:
         95:24:a7:8c:24:af:23:88:af:7f:a4:07:33:b1:6d:c5:59:3d:
         db:72:ba:32:38:45:4c:7b:a4:fa:ff:cf:5b:c3:a4:b0:8f:1b:
         34:52:98:15:29:dd:c3:70:b6:ad:99:86:7c:9a:f8:c9:a2:2f:
         b3:72:48:d8:da:87:14:06:02:61:6d:63:46:05:f0:60:cb:5c:
         82:34:2b:da:50:62:80:b7:e0:e1:7d:b3:c7:25:6e:69:bb:4e:
         da:ef:0f:84:12:7c:ca:29:5a:da:f7:77:ad:ab:46:76:65:ae:
         fc:d0:20:be:26:cd:dd:65:0d:06:61:4b:2d:ce:c1:3a:55:3f:
         a7:99:e6:5a:9d:78:af:08:ad:ae:6c:92:aa:e2:5e:19:78:90:
         15:cc:39:67:34:87:03:32:58:bf:4b:7e:d3:03:25:82:5a:71:
         07:f3:f7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:51 2026 by rpki-client