Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddfd834b-6699-3504-990d-60db84c8c2f2.roa
File:                     ddfd834b-6699-3504-990d-60db84c8c2f2.roa (raw, json)
Hash identifier:          bsjFnUZbRXlztPWYhzgXTOi6hn0n4an0J8LHJOrVAe0=
Subject key identifier:   BF:73:76:D7:C6:A3:C2:75:85:75:3D:78:67:4A:E3:05:67:07:64:73
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA79161D9DBA4FFE41A723300
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddfd834b-6699-3504-990d-60db84c8c2f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        96.63.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:61:d9:db:a4:ff:e4:1a:72:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fb4f2dd9-79a8-45b3-8faa-4793375cd818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:ad:74:a8:c0:7b:30:3a:95:6b:07:f8:bb:
                    30:9c:f2:d9:f7:74:f2:b1:83:2c:26:19:ac:bd:51:
                    aa:9a:5f:dd:d6:80:21:9c:de:5a:70:65:d3:0a:d7:
                    98:ca:42:2b:7b:28:ce:e0:4a:51:d0:2a:4c:77:35:
                    5f:15:44:b9:45:4d:99:3d:2f:b1:f4:6c:1d:a7:53:
                    60:c8:93:f4:53:36:74:96:97:69:3a:27:2d:c3:44:
                    c0:38:1d:bd:01:79:43:b6:84:e6:9a:1e:b9:6f:0a:
                    f6:bb:e2:9a:d4:dd:8b:25:83:a2:3a:50:04:8c:5d:
                    47:3d:5b:fb:15:86:6d:d5:91:a2:fe:ee:f4:60:dc:
                    f1:02:27:0f:5a:f1:7f:dc:98:4b:98:19:ab:ee:a4:
                    34:4d:0e:bd:36:ff:7c:6c:1c:93:a7:b9:6b:eb:02:
                    6a:18:ee:b7:2c:dd:a0:29:24:43:93:29:aa:fa:95:
                    bf:69:a0:17:c7:d1:d9:78:9d:cf:fa:56:5d:fb:86:
                    a7:8e:70:f4:05:68:36:16:ff:80:39:1e:e0:24:3e:
                    08:bc:09:0c:ab:92:ac:ab:f9:11:73:0d:dd:ed:4c:
                    e1:b6:2d:7f:57:65:de:a4:c5:f8:ba:70:27:7f:ba:
                    60:b6:01:9d:ac:91:29:06:73:59:9e:06:50:8a:e1:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:76:D7:C6:A3:C2:75:85:75:3D:78:67:4A:E3:05:67:07:64:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddfd834b-6699-3504-990d-60db84c8c2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1f:c7:07:ca:4e:83:32:7a:32:65:31:0d:2a:06:a1:68:0a:
         b0:62:0f:09:43:39:40:1a:71:0b:d3:61:db:69:43:19:df:62:
         b0:77:f0:7e:30:06:45:99:a9:60:e2:4f:1c:8a:44:16:4d:83:
         b0:7c:e8:99:0b:ff:cd:7b:70:3a:64:1d:ea:c6:ef:be:cf:68:
         4b:13:b7:7a:3e:b9:0c:13:4b:24:ce:be:67:fe:fc:01:37:30:
         27:51:fb:44:56:93:d2:ad:3c:1f:4b:b5:d1:66:d5:46:bb:f1:
         6c:46:f4:ea:f7:c6:44:47:bf:82:ce:cd:23:89:ac:3e:82:24:
         8b:db:6c:0d:6d:d3:0c:0d:2e:fe:ee:53:74:2d:ba:4f:95:96:
         7f:43:a7:f9:6b:9f:7f:bc:48:a3:da:de:43:7d:80:9f:03:a2:
         21:78:da:c1:7f:22:66:ef:c5:23:0a:bb:7f:f6:b4:e9:bb:71:
         e2:ae:a6:af:ba:b0:1c:64:7e:67:38:28:87:e7:73:f0:65:7c:
         d0:85:7e:fd:54:89:63:c1:b1:41:6a:78:e6:95:20:25:19:01:
         37:78:95:ca:ee:c1:f0:e4:c3:a1:49:2b:6e:88:07:63:5b:cf:
         6f:f9:f1:02:c2:9b:a4:94:1d:13:cb:d2:67:ba:ca:a6:6a:d2:
         01:3b:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:05:23 2026 by rpki-client