Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a1f2186b-6201-3586-82a0-4946bb0bcf85.roa
File:                     a1f2186b-6201-3586-82a0-4946bb0bcf85.roa (raw, json)
Hash identifier:          NEqkAVZ2gW6gOM3iu/sUwJP8i3toLU9GV/1o9ACn+EI=
Subject key identifier:   4B:77:25:FA:F3:C2:E3:A8:4F:1F:B1:9B:9A:96:E3:F1:73:4E:35:EA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E0436280039701A82C3ED1E80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a1f2186b-6201-3586-82a0-4946bb0bcf85.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     11686
IP address blocks:        96.4.0.0/15 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:28:00:39:70:1a:82:c3:ed:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=58f628f7-e786-4094-9a01-68880d755025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:4c:74:d5:bb:de:98:5f:64:ad:7f:8c:6a:
                    5c:eb:de:07:88:fb:59:44:7b:32:d2:ae:da:89:cb:
                    f5:e5:58:ce:51:9f:50:21:b6:55:ba:1e:a2:01:2e:
                    8d:57:5e:ac:19:c2:61:6d:1b:ba:4b:4f:f3:16:a8:
                    af:1f:04:03:69:58:81:12:48:d6:15:6b:4e:e7:dd:
                    c0:64:93:87:f9:3d:0a:92:1d:c1:6d:8e:80:f5:9c:
                    58:db:6e:00:15:e1:bd:b9:41:42:67:4c:95:5a:d7:
                    e3:b2:01:b7:4c:a5:be:21:cc:89:12:09:28:bc:df:
                    e8:c8:d2:02:50:15:9f:b8:b7:ba:57:3a:38:af:44:
                    27:61:b9:b1:d7:c2:e7:27:ce:fa:29:39:79:e9:75:
                    c0:bd:00:f2:57:62:1e:4c:38:8f:9a:06:ba:57:dd:
                    75:f1:50:1b:93:56:ab:61:72:50:bb:eb:56:16:d1:
                    03:f2:51:f2:75:46:e2:d5:3b:61:85:bb:17:ca:9e:
                    f4:56:2b:6c:85:80:1f:96:00:26:c7:ef:e8:43:55:
                    0b:bf:08:8e:da:0c:2c:2a:ff:38:9c:ad:27:4d:62:
                    c3:09:51:21:a7:a2:7a:2e:9a:76:79:60:79:ac:39:
                    fa:2c:7b:a7:0f:86:4c:ce:cf:61:c9:c3:8c:38:3e:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:77:25:FA:F3:C2:E3:A8:4F:1F:B1:9B:9A:96:E3:F1:73:4E:35:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a1f2186b-6201-3586-82a0-4946bb0bcf85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.4.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:62:35:70:c7:fb:19:c3:b8:82:38:e7:d4:52:64:bb:9b:96:
         61:07:3b:e0:59:95:85:ad:a8:fb:99:bc:04:73:93:85:20:c3:
         36:d6:83:c6:f5:25:df:91:b3:ab:a0:0f:f8:c3:8b:df:7a:d9:
         6b:a1:04:69:c9:40:ca:34:bc:96:4a:4a:80:9d:93:78:cd:9c:
         d3:ad:3d:d3:8b:09:59:bf:06:74:2a:b2:00:b3:cc:01:ad:27:
         b8:36:f2:50:39:13:4d:f4:3e:9b:77:91:68:d8:3a:c9:14:b6:
         4a:01:c5:2f:2f:9c:37:ac:33:67:20:54:a3:9d:4f:f7:f8:58:
         40:38:b5:1b:ac:76:6e:b2:3d:78:21:67:1b:5a:89:53:ef:b7:
         59:7e:aa:0a:0c:a8:02:75:55:98:52:7b:f4:e9:80:d3:33:3c:
         8d:25:53:e3:40:5c:e0:e5:a4:af:7e:ed:38:90:00:ac:79:bd:
         96:3e:35:5f:82:ee:ff:ac:27:94:fb:d9:fc:ac:04:d7:29:72:
         b7:68:41:10:ee:79:44:09:a3:2a:c4:ff:c9:22:ee:94:0a:63:
         f0:52:18:a4:99:d6:b5:0d:ed:6b:87:8e:26:0c:84:9d:c7:50:
         15:2c:ca:a8:d7:03:a6:d3:57:fd:01:db:64:78:9a:b8:05:de:
         31:60:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:46 2026 by rpki-client