Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9588c239-2842-35b6-9be7-a2ee76d384e8.roa
File:                     9588c239-2842-35b6-9be7-a2ee76d384e8.roa (raw, json)
Hash identifier:          pQ3NYKRCYffrGjudsYGHMR0mnKB95GTXWHic9ZAFYtI=
Subject key identifier:   97:36:38:94:7A:83:DE:58:29:E9:3A:3D:8C:8B:A5:C2:7A:E3:3A:33
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E5BAF5FA032CF2E820F0B5770
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9588c239-2842-35b6-9be7-a2ee76d384e8.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     25019
IP address blocks:        184.26.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:5f:a0:32:cf:2e:82:0f:0b:57:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=ca056627-072f-4320-8cc8-f7e4f3effd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:1c:37:6d:ef:b9:87:73:be:9f:9d:a4:1c:
                    d5:da:a7:1a:cb:0f:60:0f:e0:5b:7f:04:8a:27:db:
                    c7:2f:c6:f0:cf:6b:86:a2:f3:15:3c:41:9b:f8:3d:
                    bb:02:fd:94:09:42:6c:98:7e:11:bb:2e:b3:c9:ac:
                    1b:e7:57:63:71:30:30:16:72:85:83:6d:73:09:e7:
                    9f:2e:9c:da:ca:f4:e7:37:50:0f:f4:e5:77:55:92:
                    2d:dc:ea:54:d9:fc:96:7a:73:1a:d3:ba:c4:1c:fa:
                    65:53:d4:ef:e5:9e:a0:0d:95:f0:76:45:d7:a4:11:
                    40:70:70:5b:2a:15:37:85:8e:92:24:f7:14:b4:31:
                    e7:0b:5d:b0:8f:0f:79:f8:69:f1:47:27:03:cb:b4:
                    65:f8:63:ab:9e:74:9c:5c:00:b3:52:de:8e:c1:98:
                    c3:70:c7:23:50:90:50:5f:08:46:42:ff:a5:01:7a:
                    f0:70:c8:d0:df:53:36:f6:c0:b2:e6:34:a5:ab:b8:
                    d6:c5:60:9a:99:10:7c:73:54:42:ba:ff:1c:d5:77:
                    2a:e1:d3:04:8c:31:1a:8e:6f:a1:59:f8:9e:22:df:
                    cb:15:ba:fb:e1:0e:61:7c:b7:a2:20:74:ab:39:8e:
                    ef:28:b1:de:be:89:00:84:57:19:04:d5:2b:4c:20:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:36:38:94:7A:83:DE:58:29:E9:3A:3D:8C:8B:A5:C2:7A:E3:3A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9588c239-2842-35b6-9be7-a2ee76d384e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d9:4e:c8:68:cc:18:3d:af:f1:cf:45:34:50:be:64:00:80:
         02:5d:a8:79:82:cc:89:fd:a4:a7:dd:48:8d:ac:c1:d4:74:28:
         f0:a3:41:e0:97:ec:dd:f6:dd:44:89:79:5d:e9:4c:d2:96:cb:
         f8:39:e8:67:dc:34:b3:51:bc:16:bc:38:61:47:2e:ef:22:39:
         55:46:41:88:0d:80:f4:69:ed:52:a6:61:0a:22:c1:cd:2b:2b:
         5b:5b:64:bc:72:ff:07:44:17:ef:ea:68:fb:34:f1:cc:7b:a6:
         34:5a:02:b2:fd:be:5c:2a:87:91:c5:dc:33:54:bf:76:a4:60:
         4c:b1:d4:6a:b6:f3:d4:6f:52:38:eb:64:31:56:7e:58:99:54:
         bd:e8:b3:b0:e7:82:eb:5c:31:8c:43:e1:f1:26:cf:7d:a7:23:
         df:57:c5:6b:35:aa:29:60:17:b4:37:d5:df:85:b7:b5:d8:49:
         f2:63:bb:04:80:cf:9f:34:a5:17:3c:9e:46:ad:4d:94:54:ac:
         5f:d0:7b:bb:b1:b0:60:e2:6f:67:80:45:1d:fa:1c:04:ec:e2:
         14:c1:b5:00:7f:a5:4a:2e:7f:f5:3c:fa:c5:7d:32:ca:eb:b0:
         4e:f2:63:2a:ee:d9:c7:c0:bc:05:61:16:5e:48:61:f9:8e:06:
         2b:28:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:52:48 2026 by rpki-client