Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a405931-c863-31fb-bf51-0524b9122412.roa
File:                     1a405931-c863-31fb-bf51-0524b9122412.roa (raw, json)
Hash identifier:          2yoYr7At3SZ2DQFlYnljbVLftih8OzY6AlN5uV3HRfs=
Subject key identifier:   E9:6C:2C:6B:87:19:65:79:37:3F:A8:99:E2:74:BC:7C:0C:3F:A2:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6C0FCF2CF60668D35FCC7F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a405931-c863-31fb-bf51-0524b9122412.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     20940
IP address blocks:        96.16.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:cf:2c:f6:06:68:d3:5f:cc:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=4b44e946-df5d-449c-bdcf-e53cfee1a6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:ab:be:8f:26:3e:33:0a:a6:9b:60:f6:f1:
                    c8:20:85:ad:93:df:4c:6e:8d:db:cd:5f:2e:70:da:
                    b8:24:b5:cf:12:71:fc:80:c1:01:b3:b5:9d:58:76:
                    8d:8d:09:c8:9e:dc:b3:33:2c:52:e8:4c:68:8a:f1:
                    c3:2d:49:49:02:dd:f6:09:4f:35:e7:84:3d:2d:38:
                    f8:8c:37:7d:40:a7:ca:c9:90:6b:bb:01:13:12:97:
                    0a:8b:fa:3d:d8:d6:65:37:f1:41:29:75:6a:3c:30:
                    2a:c5:9f:2d:35:90:2f:d4:f6:2e:ac:c3:0a:a1:67:
                    0e:bf:fa:c8:09:76:24:8a:0f:44:15:82:39:df:71:
                    7f:8e:6d:26:c7:f5:3a:58:15:d2:35:04:15:11:4c:
                    5c:0a:21:06:9c:c0:71:73:d8:35:44:94:b4:e9:b7:
                    e8:c1:7c:86:a9:5d:05:57:33:0c:cb:24:63:03:c6:
                    e2:16:2a:31:51:7c:0e:b3:ae:1a:34:ea:63:6f:5c:
                    75:c0:c6:d0:c0:04:87:06:55:c9:e9:9a:c6:f0:5a:
                    1d:79:c0:f2:0c:9c:42:f9:27:e4:54:f8:40:dd:66:
                    d3:4e:4a:99:56:56:0a:f2:bf:cf:6a:03:d1:28:51:
                    f0:47:73:37:d1:b5:be:00:d7:98:91:bb:b3:81:18:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6C:2C:6B:87:19:65:79:37:3F:A8:99:E2:74:BC:7C:0C:3F:A2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a405931-c863-31fb-bf51-0524b9122412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:09:0d:0b:00:1d:4f:b9:a5:9c:a7:c5:fa:81:1f:63:e8:47:
         05:21:4d:38:b8:cc:5f:93:37:53:0d:a6:61:78:23:27:27:6d:
         30:1f:b5:7b:54:3f:26:0f:1f:39:7d:5f:8f:dd:fe:3c:6b:76:
         69:30:f9:73:14:cb:d8:72:3f:6c:cc:08:91:6f:a2:90:f7:c4:
         26:86:eb:05:65:49:f4:1d:96:b4:ef:e3:7a:30:cd:d3:1d:78:
         ed:2a:a4:c1:d9:59:dd:c9:fd:ff:91:e9:ad:91:36:1b:89:87:
         e1:3d:db:ef:59:7f:23:c5:27:fe:48:f8:5b:5d:71:06:78:33:
         04:39:c2:bc:05:00:9f:04:1a:d8:bf:09:7f:b9:34:c6:bd:a9:
         cf:c6:69:3d:ff:a0:18:ee:cb:02:b8:a5:b7:f3:6f:cd:12:3a:
         cb:e8:60:cc:21:ce:c0:50:a1:4c:20:57:b0:c7:3c:3a:0c:6e:
         2d:e1:26:35:de:85:6c:6d:3a:33:5e:78:53:85:d7:27:b9:14:
         5f:1c:f0:8e:e6:af:f9:74:54:bc:f7:cd:e3:e7:6b:80:9a:cb:
         52:e3:4b:21:b7:df:48:28:d5:0f:df:d0:24:cb:43:a6:e2:fe:
         7e:96:26:93:30:a2:c9:31:59:cf:df:25:f2:af:0d:86:17:51:
         8a:a5:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:11 2026 by rpki-client