Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d0da064-5007-3068-8b10-eaf7c0848fdf.roa
File:                     0d0da064-5007-3068-8b10-eaf7c0848fdf.roa (raw, json)
Hash identifier:          t0W1K5KTkKvrXVNSs+IsH+nBu9dAevoq5pyApCs8Pro=
Subject key identifier:   D9:6B:61:49:42:32:04:E9:53:BD:2B:9D:54:84:6B:69:1E:D1:26:09
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584C5EC7074EC98FF03D21EDF880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d0da064-5007-3068-8b10-eaf7c0848fdf.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     33363
IP address blocks:        96.58.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c7:07:4e:c9:8f:f0:3d:21:ed:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=6a6fc06c-c0d0-4d9c-9c01-d204e001d368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:5c:39:6d:a3:4d:b1:5c:b2:f0:d2:ba:3f:
                    e5:c6:e5:ce:8d:00:f2:15:82:05:1b:c1:d3:31:3e:
                    68:64:43:e3:16:75:08:85:49:11:58:b3:74:f5:d6:
                    e2:48:38:19:15:a5:13:24:dd:3e:5e:f0:3a:7d:83:
                    9a:9d:32:20:f5:61:46:10:38:00:d3:2c:e4:76:ee:
                    9f:39:4d:7d:23:29:26:02:8a:82:07:ac:0e:fe:3d:
                    8b:2c:a9:e7:90:95:9e:43:8d:a8:66:bc:fd:18:90:
                    c4:71:64:9e:22:f2:8d:30:b6:50:9e:35:c6:6d:fc:
                    a5:c0:62:6f:14:37:df:cc:46:65:6a:d1:72:2a:03:
                    48:cd:b3:cf:a6:56:0c:df:29:73:db:ff:81:60:9e:
                    15:7b:df:ff:14:ba:8c:66:97:12:da:43:f0:12:b8:
                    1b:ce:b1:06:1d:c0:0c:e3:f7:12:02:f0:cc:a9:24:
                    c9:94:71:56:19:06:b4:cd:5f:bf:40:3f:1b:29:3e:
                    57:7e:aa:aa:d1:96:a1:e5:2a:6e:b7:76:98:56:a1:
                    cb:29:3c:ed:15:dc:95:94:92:5a:bb:8c:b6:81:ba:
                    24:c0:ff:92:08:9e:75:5c:91:65:1e:45:eb:64:e9:
                    02:66:44:79:64:ac:bb:44:75:1f:39:db:7f:67:19:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6B:61:49:42:32:04:E9:53:BD:2B:9D:54:84:6B:69:1E:D1:26:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d0da064-5007-3068-8b10-eaf7c0848fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.58.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:a0:21:c6:ba:d8:38:2d:bc:57:32:76:e4:6f:6f:99:22:
         a6:b6:b5:1f:85:9b:2a:60:33:4e:e0:1c:30:b3:c6:e9:97:da:
         b3:64:87:1c:c1:49:08:ec:89:aa:e5:fc:72:53:84:75:b2:f9:
         40:24:4a:42:e1:4f:f3:6a:25:0c:e9:d9:a9:59:b6:ba:16:cf:
         67:9a:bf:61:85:4c:48:be:3d:97:1a:22:aa:65:d6:06:ac:e7:
         24:1e:6e:3a:b2:c5:ce:a6:96:84:dd:c1:b9:d2:16:66:8e:a1:
         57:13:64:80:88:bb:89:a6:48:88:33:0c:c0:0c:cb:67:b1:0c:
         58:1b:75:f7:91:d0:da:d4:61:d7:4a:07:7d:f3:76:12:97:0e:
         56:29:6f:d8:f9:75:21:1a:c8:5d:fa:b5:1a:72:24:e7:19:28:
         5a:94:81:c6:44:e2:b2:fb:28:a0:7f:05:a6:f5:bf:c7:33:c9:
         02:12:bf:52:21:6a:6b:f2:d4:10:d3:7b:2d:34:23:2b:1a:f2:
         dd:cf:09:96:7a:2c:f9:5e:4b:f7:fa:d6:18:f3:8d:e9:9e:02:
         59:28:10:8c:68:de:0e:58:cc:7e:a9:c0:b6:f9:88:8c:c6:15:
         ee:da:6e:1b:7c:59:fa:60:71:13:4c:54:89:3e:ed:6a:e6:8d:
         d3:d0:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:49 2026 by rpki-client