Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/a97d7942-a82a-37c6-be10-2dc54f4237a3.roa
File:                     a97d7942-a82a-37c6-be10-2dc54f4237a3.roa (raw, json)
Hash identifier:          ZipZwNYnzO4IPoXs+Dgd7otrcftapKTGl3nJjADsP9o=
Subject key identifier:   35:04:1E:B1:C2:78:85:E7:D1:C5:5A:03:D8:DE:F2:97:10:B0:A0:49
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584DF375E94069CB7A1720E08580
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/a97d7942-a82a-37c6-be10-2dc54f4237a3.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     19901
IP address blocks:        9.195.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e9:40:69:cb:7a:17:20:e0:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=1958480f-c55e-4db9-8b07-729da54d55e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:c9:ec:0d:e6:8d:48:1c:0b:5f:06:46:d6:
                    0d:07:d2:33:f3:f0:1d:85:e0:5f:32:e5:05:2c:f5:
                    c2:93:00:fa:7d:29:93:f8:04:85:5a:28:f4:6d:8f:
                    17:4e:71:d4:ad:52:df:61:52:0f:7f:9d:92:d0:83:
                    95:c6:8e:16:93:69:08:a1:24:c1:49:0e:93:bc:31:
                    ee:24:5a:a6:c8:a9:81:72:c9:29:8b:f8:89:5b:be:
                    e7:10:2b:43:d5:0b:21:a2:72:f8:46:72:31:36:d4:
                    00:b3:78:34:e3:df:c6:63:68:97:c0:a2:3a:c8:19:
                    37:2f:da:f6:1d:be:03:2e:05:e4:1b:30:37:15:f3:
                    91:f8:5a:19:26:cd:a0:dd:01:5a:cf:ea:8e:9d:93:
                    8a:64:ec:26:5c:4c:0c:18:26:73:03:f6:ad:da:31:
                    07:e7:9e:bd:08:c4:81:75:d1:59:70:15:2e:8e:96:
                    60:46:4a:c8:47:59:87:e9:9d:bd:43:73:25:87:81:
                    07:a2:6c:61:ce:19:00:06:68:cf:33:d9:fb:d2:05:
                    e4:53:d8:3b:63:c2:12:cb:28:40:03:b0:35:11:6c:
                    75:19:e6:5d:cc:08:a5:6f:c4:bf:2a:c0:b2:3d:a6:
                    ce:8d:93:f9:ae:74:f8:fb:0b:09:49:a0:e9:62:c1:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:1E:B1:C2:78:85:E7:D1:C5:5A:03:D8:DE:F2:97:10:B0:A0:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/a97d7942-a82a-37c6-be10-2dc54f4237a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.195.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:61:f8:7e:50:fb:ba:78:6d:36:11:e0:e2:ff:4a:fb:4d:6c:
         84:34:d5:4b:58:fe:0d:7b:fd:6c:21:7e:28:4f:f2:2b:9e:ca:
         0b:ed:da:a2:3d:1d:99:31:33:3f:03:d8:41:fb:b7:b1:5e:7b:
         db:09:5b:b3:12:0f:49:a0:c4:65:19:02:a0:0f:6b:e4:46:50:
         9d:62:12:5e:17:e3:6e:89:92:91:a7:d7:de:40:5d:da:62:8c:
         b3:df:9a:53:f9:c6:de:d9:ab:d5:e8:af:fa:f6:7b:ee:22:dc:
         83:a4:d9:7b:f7:68:4a:23:0e:39:6b:43:87:f3:6a:89:52:c4:
         43:a0:f3:fa:43:7f:c8:d2:78:55:7d:71:28:0c:33:da:19:91:
         3d:4a:4e:56:7f:dc:df:95:bd:3d:76:2b:2e:57:44:80:83:e0:
         3a:54:13:a9:6e:85:e3:37:5c:62:bc:a7:65:21:46:32:d6:a8:
         4a:ee:e4:3e:e5:da:1d:8f:33:a1:37:d3:b6:87:96:0d:67:02:
         cf:d0:7a:1b:40:8a:da:3d:de:a7:94:49:39:e2:57:10:6f:c7:
         64:eb:4d:22:8f:f3:ed:cf:1a:0a:48:be:7e:ee:1e:e7:5a:6a:
         08:29:7d:3b:e0:2b:01:b1:37:d5:28:68:b1:5d:74:58:80:06:
         66:73:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:59:34 2026 by rpki-client