Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4edb6d96-f909-3419-a58e-f0a60a64de28.roa
File:                     4edb6d96-f909-3419-a58e-f0a60a64de28.roa (raw, json)
Hash identifier:          1jElb5rQgAJa5GZfdYHWyUFlaglkdrlztZNh0IMsPVE=
Subject key identifier:   B9:72:BF:A0:8D:64:08:74:65:6F:B6:42:4A:CE:44:33:20:C6:45:2A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F7E7D9C3899ACFDBC48122940
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4edb6d96-f909-3419-a58e-f0a60a64de28.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        136.95.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:9c:38:99:ac:fd:bc:48:12:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=41dd4331-0e90-418a-8113-bdf54e2f62ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:aa:ab:a5:a2:dc:00:47:99:4d:a2:1f:0f:ce:
                    cd:cf:00:d8:7f:4f:d9:01:86:3d:b4:cd:fa:07:64:
                    79:7c:e4:72:84:8f:04:30:07:03:b7:3b:6a:4d:0e:
                    15:f0:12:85:c1:88:15:f1:cc:28:f0:90:8c:23:ea:
                    8f:1e:fb:22:9f:90:a1:47:8f:4a:41:9d:d4:05:76:
                    91:a1:8a:e1:f4:5b:ea:46:44:83:c2:ae:f9:62:c4:
                    15:72:e3:a6:bb:30:32:42:20:fa:7c:10:82:be:bf:
                    dc:83:d9:63:7b:1b:1c:94:93:f4:53:84:3b:30:d4:
                    15:79:0d:eb:75:d2:e6:5f:e8:6b:11:44:37:8b:1c:
                    61:f7:4e:23:3c:cb:b3:55:4f:0b:d7:4c:f1:5b:6f:
                    26:87:43:a8:07:f5:44:0c:86:7e:ac:4f:fc:ab:21:
                    e5:e2:48:96:d8:bd:e7:d7:fb:70:21:7e:68:3c:80:
                    03:ca:34:7c:7b:0b:35:a6:18:03:fe:cb:87:2c:40:
                    8c:62:1d:2b:ac:77:06:7e:54:61:f7:1c:b0:ad:6d:
                    d7:28:a5:f3:0a:de:66:50:e8:c4:93:f6:b2:83:59:
                    6b:d9:f5:28:32:3e:e7:d1:8b:97:17:61:ed:17:45:
                    f0:6e:81:1a:72:02:d6:59:a5:f6:0c:eb:de:86:ab:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:72:BF:A0:8D:64:08:74:65:6F:B6:42:4A:CE:44:33:20:C6:45:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4edb6d96-f909-3419-a58e-f0a60a64de28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:34:6c:02:35:bb:5b:e2:d6:2f:cb:8e:b9:35:1b:67:db:
         72:55:7b:b1:06:7c:c6:d6:68:60:6e:e2:e3:a3:89:f8:b2:3c:
         24:6f:b4:e0:a1:9c:f2:f6:d4:9b:4c:02:ce:b8:0f:2b:8c:fd:
         3b:01:09:9c:56:2c:c3:ad:73:72:54:10:ce:88:a5:07:45:8e:
         c1:0b:e4:96:b1:a4:8a:4e:61:ad:42:33:16:cc:f1:9f:2e:c2:
         e0:68:73:d2:2d:04:3c:cf:78:39:7a:4b:82:bd:f9:b9:18:a1:
         8c:5b:ff:f1:8d:d1:3c:9b:fd:03:6f:09:1a:fc:18:7e:25:e1:
         b3:5a:ea:6e:aa:b4:d2:e7:e7:ba:6f:75:6f:77:3b:e9:99:2a:
         2a:a8:c2:24:5d:7b:4c:3f:f8:7e:d5:04:c9:7e:49:ee:2f:44:
         14:1d:4b:62:ef:0a:63:88:9d:7d:f2:be:b4:89:1f:d6:aa:b0:
         cd:f5:98:8d:4b:eb:c5:9f:08:2a:b6:58:b4:57:6f:c4:71:a0:
         6f:b8:bb:67:f4:b8:a2:9d:ab:e5:61:46:7a:a3:92:71:51:72:
         98:de:6a:61:c3:28:71:0b:e6:04:5d:49:ce:af:57:bb:b4:04:
         55:d6:79:58:9a:67:4f:61:2e:42:66:14:75:11:cd:9e:af:96:
         de:92:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 16:22:41 2026 by rpki-client