Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa
File:                     96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa (raw, json)
Hash identifier:          oXie+c2GjzlzIwWGlowVtNXGs3/Q/gZ7YywyVn4Gn2w=
Subject key identifier:   33:43:8E:E1:7F:4D:79:6C:3F:23:CA:31:85:96:CB:9A:2B:CB:13:2E
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584EED5203A21F27C255D740DB00
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     0
IP address blocks:        206.53.172.0/24 maxlen: 24
                          2606:a980:0:5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:03:a2:1f:27:c2:55:d7:40:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=bd1de45c-056a-4c34-a33e-d233b364c936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:b7:21:63:e0:56:7c:a6:f8:b7:fe:7a:96:
                    f1:ff:ef:b4:37:98:ad:63:99:5f:02:da:de:16:80:
                    3f:e2:42:70:a0:3a:bf:81:87:56:13:ee:41:e6:58:
                    2b:11:94:6a:eb:a2:5a:88:ee:1a:f4:07:ea:14:3e:
                    ed:72:9b:88:38:a5:d2:71:49:5c:a9:1d:98:7f:43:
                    ad:8f:32:da:46:c8:ef:57:25:e6:dd:09:85:bc:d9:
                    37:9f:38:e7:ea:33:0b:b1:da:b9:5a:d8:a2:17:a0:
                    45:e5:42:25:3e:16:9c:91:25:7a:11:32:ba:16:a5:
                    a4:c8:00:10:2e:01:3f:0b:b2:80:7c:4a:24:0c:b2:
                    44:cc:37:11:17:5c:d1:c6:dd:73:b8:b3:95:44:c8:
                    e6:5f:53:78:cb:6c:a3:5f:66:0b:e9:98:62:ee:4d:
                    08:4c:3f:8c:8d:ba:3e:c3:f7:70:bb:04:e8:cf:77:
                    35:30:80:56:37:4f:e8:f7:92:da:4b:ca:04:f5:fe:
                    ee:3f:b1:f7:4c:07:fe:8c:aa:58:24:e8:b6:a5:9d:
                    04:d6:41:6f:28:75:dc:03:fb:54:23:89:c0:f5:d1:
                    fa:54:02:68:29:9c:1d:b0:a4:5f:b2:42:82:c4:c7:
                    87:8c:89:98:a9:5d:a4:c1:63:3a:69:3a:ea:07:8e:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:43:8E:E1:7F:4D:79:6C:3F:23:CA:31:85:96:CB:9A:2B:CB:13:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.172.0/24
                IPv6:
                  2606:a980:0:5::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9f:f9:23:e8:d5:e7:e0:4b:78:8c:41:63:63:21:fe:a2:8b:
         ca:e9:98:13:ab:22:9f:4d:7c:66:3c:22:60:12:0c:d9:3b:a0:
         2c:70:43:de:28:1a:97:a7:2d:cc:49:13:99:cf:60:d9:75:ee:
         32:83:6d:e3:df:8c:2d:ea:30:54:2c:c4:3d:1e:72:59:44:a6:
         b2:67:31:38:32:af:37:b4:df:fe:87:d5:91:3b:f9:83:cd:b2:
         a4:7d:d0:e3:57:cd:d6:53:79:75:d6:a4:9b:c0:c4:89:b9:cc:
         7e:f9:04:3b:f5:1d:a5:da:d9:cc:78:92:c4:64:ad:ba:41:1c:
         0b:95:07:c3:1a:2e:db:79:3b:cb:31:32:ca:d5:5f:50:92:43:
         23:83:3c:76:df:16:43:17:67:7a:c4:7b:32:60:ac:f7:49:29:
         f9:04:ee:44:84:be:7d:d6:12:80:e7:cd:d7:b8:34:8f:70:0f:
         3c:fd:5c:50:fe:47:d8:58:58:9e:18:7d:a8:59:35:39:ad:66:
         d7:5f:44:51:c6:5d:71:9a:af:b2:84:51:9b:03:0d:98:20:b1:
         96:05:33:a1:00:ce:b4:26:a9:6d:d2:4d:df:1e:ba:5c:93:59:
         85:56:fb:9d:91:f0:38:d1:07:af:53:8d:4e:1a:5a:cf:88:94:
         8f:42:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:26:37 2026 by rpki-client