Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
File:                     5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa (raw, json)
Hash identifier:          4mPVwuEucq+BUSwOJpYv5+P0p5kKrVJEvfNCzGK5ZM0=
Subject key identifier:   0F:C7:34:FB:F8:4C:4A:F6:34:EF:2B:37:C9:8B:A9:DE:74:3F:D7:7D
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584D5E1A4EC7E73408F0CD37B1C0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     393398
IP address blocks:        96.47.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4e:c7:e7:34:08:f0:cd:37:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=43d6cfbe-598a-4f8a-9326-ed2b81acb8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:97:b0:b3:97:a5:3c:55:e0:e6:13:12:41:
                    be:c4:3e:01:bd:ea:9a:87:51:69:9a:47:c5:26:49:
                    55:ed:1a:9a:2c:50:ab:94:0c:1d:2a:59:ac:18:1d:
                    92:2a:02:c7:af:17:86:6e:0e:6f:bf:59:fb:7c:44:
                    5b:9d:4b:6e:2f:24:4f:d0:01:54:eb:4c:c5:8f:1e:
                    5d:e7:a2:9b:9c:e0:b1:cb:5d:c1:15:6e:b0:e2:fc:
                    5c:2e:3d:48:05:ef:3e:db:7c:84:76:fd:53:4d:43:
                    e5:8c:cb:cd:c3:ca:74:1f:fb:67:9f:d4:03:b0:2f:
                    2a:fc:d1:7b:28:c0:3b:ea:74:20:01:9a:35:a0:2d:
                    1d:e9:fe:dd:87:1e:5b:da:ba:59:eb:27:dc:ed:85:
                    44:61:86:66:7e:4c:c4:2a:9a:67:74:6a:b0:76:0a:
                    b9:6b:1b:f1:65:c1:62:6b:19:ab:a1:4b:b6:c6:5f:
                    c4:be:b5:34:8c:29:9b:ac:c7:49:a8:79:53:0d:4b:
                    79:43:6d:a2:9d:87:c1:6a:0e:7a:14:11:b0:47:00:
                    7e:0e:49:55:8f:30:96:99:83:09:70:54:1d:80:53:
                    eb:1f:d4:ce:ef:31:2f:50:59:28:89:45:b4:e4:8f:
                    5f:88:5b:5f:43:fb:65:7b:17:75:26:14:6c:50:65:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C7:34:FB:F8:4C:4A:F6:34:EF:2B:37:C9:8B:A9:DE:74:3F:D7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:04:d4:11:60:38:93:c8:4c:dc:93:dc:25:fc:d1:f3:67:f0:
         ae:9f:78:ec:ea:97:97:7a:c8:2b:3a:39:ac:45:05:a8:60:0b:
         75:05:11:61:ca:01:37:a5:db:c0:a0:37:cc:1b:d9:dd:e7:75:
         3d:97:d3:d4:17:6c:24:b4:af:a9:20:ca:65:48:7f:46:13:6f:
         94:c0:5e:d2:68:ea:25:66:b4:7b:83:7d:08:00:00:8b:82:e8:
         4c:22:b0:ea:bf:a5:14:a2:a1:06:91:e9:f6:04:ab:77:a6:18:
         3a:7f:6a:27:c7:7a:ef:24:50:83:5c:0d:41:07:1b:d3:26:de:
         dd:1a:90:42:15:f0:fc:47:86:0c:c7:7c:07:a8:50:b3:17:96:
         5d:94:e6:84:fa:0b:a1:92:27:16:c5:99:ad:b8:c5:09:e0:75:
         07:af:24:5d:c6:dc:9f:2a:3e:37:b5:a3:93:b4:70:46:8c:76:
         56:ff:73:18:3c:77:e3:32:42:ce:ef:80:d6:7c:af:a2:66:df:
         3e:23:05:f1:e7:30:95:45:05:ea:3b:95:7e:39:cb:c7:51:0d:
         cc:97:96:b2:21:66:e1:15:e9:53:64:fc:af:92:28:ba:23:9f:
         01:db:f7:23:e6:45:bc:d4:53:9a:9f:04:a5:3d:dc:c0:ac:20:
         06:64:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:02 2026 by rpki-client