Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/8104190b-4a68-38ff-9e36-dd76f573ed92.roa
File:                     8104190b-4a68-38ff-9e36-dd76f573ed92.roa (raw, json)
Hash identifier:          3zunayNb9NAWDy1g0SLhJl5b3mFNj305b9Ao3iL/v/U=
Subject key identifier:   C8:CF:28:73:E0:6F:A3:CE:A3:91:85:9F:C3:20:85:04:FC:80:71:6F
Certificate issuer:       /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
Certificate serial:       010D0C9F4328584DE9B07DD608AC353230E16580
Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/8104190b-4a68-38ff-9e36-dd76f573ed92.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     397122
IP address blocks:        96.47.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:7d:d6:08:ac:35:32:30:e1:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=5651b10c-03bf-4110-a26c-1875fae343c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:17:ae:81:a5:15:49:dc:32:e4:9a:1b:aa:f4:
                    58:06:09:76:53:30:79:7b:d2:76:46:7b:49:d3:01:
                    42:6a:0a:30:8c:49:d3:ca:60:f7:63:b1:bc:e2:39:
                    dd:41:e9:28:0d:59:7c:28:1b:a4:18:97:c4:2d:50:
                    85:84:09:7e:38:89:9f:e1:39:a1:d8:c5:bc:28:1d:
                    e9:47:cd:a3:be:2b:87:56:33:df:a1:8f:c4:ec:07:
                    24:e7:33:e1:3c:78:69:64:d6:80:d3:8f:bd:cb:bb:
                    2e:57:e0:83:d1:b6:c0:2f:41:b2:55:0e:7f:7d:ae:
                    c4:dc:15:db:f2:e8:a0:cc:c4:02:5a:12:69:cd:01:
                    22:0b:31:44:87:f4:cf:56:93:62:a0:d1:cd:8c:cb:
                    9b:21:c2:72:05:89:ae:a4:d3:c7:e7:46:a6:03:0b:
                    09:4b:f4:84:35:62:85:de:9a:12:8b:18:cf:e9:c0:
                    20:10:ed:3b:1f:13:9b:9b:d8:cf:d2:0f:61:5e:de:
                    88:81:d5:d7:7d:dc:69:9d:db:3d:31:03:66:9e:83:
                    25:47:99:ca:3f:94:be:7e:ae:4f:79:e8:2e:48:23:
                    31:a3:b9:90:45:80:61:83:10:7d:50:78:a3:a6:32:
                    fe:d3:7c:2e:0a:81:04:ce:a7:16:41:10:b4:88:eb:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CF:28:73:E0:6F:A3:CE:A3:91:85:9F:C3:20:85:04:FC:80:71:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/8104190b-4a68-38ff-9e36-dd76f573ed92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl

            X509v3 Authority Key Identifier:
                keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:2e:f2:91:7d:7b:5c:96:ee:66:02:06:2f:a1:40:ce:f3:
         81:9c:fb:b1:fe:91:36:99:c4:10:7f:fe:1f:f8:8a:c6:ac:2b:
         bf:05:e0:f9:6f:5e:2a:d0:7e:05:7c:dc:3e:f2:0e:05:2d:58:
         c4:63:2b:86:87:6d:21:d2:21:83:ec:a0:c9:38:58:89:f2:9c:
         ec:8a:9a:61:00:a4:3f:3e:cd:37:18:07:79:89:16:82:33:b7:
         c8:1d:88:b0:1c:ad:54:24:28:d7:80:95:7f:97:9f:79:b5:e7:
         ef:90:3c:d8:52:37:64:a9:fd:6b:7a:3e:d0:2e:93:7d:b2:cd:
         07:99:89:e5:d6:03:10:ae:9a:3b:c8:bd:dc:af:24:d6:bc:a8:
         ca:05:9c:ff:01:dd:b7:b9:cd:ae:7d:70:b9:c2:a9:3d:f4:38:
         3f:1c:1a:78:fd:33:b5:6d:65:11:da:29:14:03:5d:88:a5:b7:
         da:44:a7:76:82:c4:29:51:19:be:f8:15:d1:ad:61:f7:d4:8a:
         28:2e:39:98:c3:1c:eb:29:a1:b9:a8:e4:02:4a:9c:90:10:8a:
         66:85:c2:fe:17:bd:e0:1b:01:64:e8:63:dd:42:22:55:98:c2:
         57:f8:af:9b:98:4f:74:bc:52:8f:b3:3b:75:c2:4d:95:f3:3f:
         f2:72:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:24 2026 by rpki-client