Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa
File:                     087ef766-cc4c-38c4-b7c8-d3427883cbec.roa (raw, json)
Hash identifier:          Jk87fpoOf7T5KXM+BciOJ5gBJrdII7PAbyYBKtZRweU=
Subject key identifier:   9A:EB:D5:E7:A6:6C:B2:78:25:F6:9D:29:03:AA:8E:28:0A:64:3D:7E
Certificate issuer:       /CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
Certificate serial:       010D0C9F4328584DEBA545CECE998B709CD9AF60
Authority key identifier: 11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa
Signing time:             Fri 22 May 2026 17:49:32 +0000
ROA not before:           Fri 22 May 2026 17:49:32 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     53347
IP address blocks:        96.31.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:a5:45:ce:ce:99:8b:70:9c:d9:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
        Validity
            Not Before: May 22 17:49:32 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=44c68a3b-6d07-47a3-b29e-4e7cf2b17187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:ee:ed:05:17:c9:67:db:90:97:5f:f2:a5:
                    61:d5:89:0e:15:3f:0e:d8:24:50:4b:3f:e2:bc:c0:
                    e8:35:d1:e4:e4:51:94:6e:81:c4:52:12:4d:09:64:
                    15:e0:a5:a7:ef:44:75:dc:53:83:91:88:9c:dc:36:
                    2b:0f:f9:0a:75:28:bd:08:05:1e:c2:de:71:f3:34:
                    61:88:ea:a4:9c:c5:10:25:e7:f2:86:dd:64:96:9a:
                    1b:62:b0:da:ac:15:d8:ee:00:0f:8a:50:6e:ee:3c:
                    e4:5b:7b:83:f3:ea:23:4b:9f:d1:82:52:d3:15:66:
                    b9:73:5e:f1:dc:de:cd:f9:f4:18:5b:0a:9c:d4:98:
                    25:f2:84:40:86:11:80:b6:a5:ee:fe:d5:c4:54:da:
                    d4:44:b1:cc:34:7c:1e:c1:9d:6c:76:c1:ea:85:c6:
                    ed:a7:9d:ff:b2:ef:c7:ee:f2:b1:de:eb:27:50:58:
                    1f:32:c6:a2:9c:11:85:d5:28:ed:67:97:74:ac:d0:
                    de:dd:b0:18:8b:81:68:47:84:95:c5:c2:95:4c:97:
                    e0:a1:c3:49:2a:ff:c8:d7:71:b7:a4:f8:64:47:5c:
                    9b:e0:b8:1e:a9:23:b0:61:27:b6:8f:2b:bf:33:ce:
                    c7:ff:d9:7d:cf:5b:a0:3c:1c:74:f2:aa:57:d8:6d:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:D5:E7:A6:6C:B2:78:25:F6:9D:29:03:AA:8E:28:0A:64:3D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl

            X509v3 Authority Key Identifier:
                keyid:11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.31.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f6:47:06:e0:82:2c:d8:c0:37:b6:c0:27:4c:fa:59:29:4f:
         08:09:54:6f:9f:46:b8:0b:e6:28:95:1c:0c:48:b9:51:14:01:
         f2:92:0c:c4:e7:e7:1f:08:2b:33:12:55:d3:3f:fd:11:e9:c4:
         94:d4:6c:4b:90:d8:b7:b9:77:f9:ba:33:ca:7f:e8:9b:9f:9e:
         d2:fa:44:a7:f2:c9:4a:d5:52:e9:63:c5:23:f3:a6:19:37:29:
         06:9b:55:44:cc:f8:3a:aa:db:cc:6e:e9:bf:7e:02:00:37:a1:
         6d:1a:0f:27:36:b6:11:b3:19:f3:6b:85:91:af:3f:36:ad:75:
         6a:ac:c8:9e:c7:50:4a:01:21:be:e5:3b:c6:98:f1:1f:d6:24:
         c0:19:65:32:60:2f:dd:b5:c7:8a:a7:39:8b:b8:66:e4:ac:1d:
         4a:8a:93:7d:3c:7f:93:25:dd:cc:eb:11:36:87:f3:22:0c:5f:
         ed:a0:cd:36:78:f7:81:25:65:ef:4e:b9:69:84:dc:5a:37:83:
         09:8f:41:48:fa:b2:0d:06:6c:b1:ab:85:0c:77:2b:0e:c1:8c:
         3a:7a:be:89:f9:7a:e6:29:1b:dc:be:1f:ff:a2:8c:36:2b:27:
         f5:ff:a4:57:12:e0:0e:fc:a3:36:69:7c:8c:d7:83:08:ef:8e:
         14:e4:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:10 2026 by rpki-client