Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69e6d371-120d-30c9-b1f5-bf2206f40af9.roa
File:                     69e6d371-120d-30c9-b1f5-bf2206f40af9.roa (raw, json)
Hash identifier:          4wSjpzCIdj/mELi/39EJgea9f4uh8xwgCMihBCVxF2k=
Subject key identifier:   4D:CA:E7:58:4E:9B:2C:1B:9D:A6:B0:6A:82:F3:CC:22:E1:9A:B7:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86345803B426EF55230400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69e6d371-120d-30c9-b1f5-bf2206f40af9.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        96.97.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:34:58:03:b4:26:ef:55:23:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=7bd60067-7ca1-4f24-ba7a-0a43b2ba618d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:90:66:34:2c:f7:eb:9c:99:b8:33:35:b8:
                    5f:49:57:25:e4:7f:d5:63:f5:20:54:57:3a:9c:06:
                    01:52:3a:33:d0:92:ff:5f:bb:c3:10:d6:9c:1e:3d:
                    48:da:f5:5b:3b:d9:93:a9:92:22:b6:61:6a:42:bd:
                    d0:96:18:0e:7c:46:b2:66:d4:17:b4:90:66:4d:e1:
                    ad:2d:69:a2:60:2f:71:60:64:35:38:9f:b0:e3:3c:
                    ba:b4:2f:98:3b:e5:6d:95:f7:38:d7:40:0a:d3:7e:
                    cf:6c:69:b2:f5:50:67:ca:fc:4a:ef:ff:e7:ec:fb:
                    b9:ba:f5:6b:42:1d:7d:f2:a1:b9:71:75:9d:42:4c:
                    6d:91:16:de:a7:ca:05:86:dc:da:77:eb:70:69:19:
                    f0:0c:77:38:00:87:74:96:b3:e3:fa:6e:da:5a:7e:
                    5b:9b:49:22:fe:42:3e:ed:40:fc:e9:0b:22:f7:d1:
                    88:03:9e:0e:87:f6:0b:24:4f:92:00:99:24:3d:c2:
                    d0:46:2b:1e:d9:f5:9e:fc:88:9c:08:31:69:ad:d9:
                    e0:b1:a0:c6:82:07:5f:cf:1f:ff:33:ca:82:c0:b6:
                    0e:3e:b0:b4:95:e3:33:80:6b:15:f5:19:65:01:e2:
                    0f:72:52:58:02:55:42:b2:37:ce:b3:d5:5f:73:ed:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CA:E7:58:4E:9B:2C:1B:9D:A6:B0:6A:82:F3:CC:22:E1:9A:B7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69e6d371-120d-30c9-b1f5-bf2206f40af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.97.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:04:d7:b9:c0:2b:13:80:94:9b:18:19:cc:bd:41:b1:cc:8f:
         17:ca:eb:4d:a7:eb:ab:cd:f3:47:49:66:b3:11:20:f3:b9:12:
         f1:42:3d:b1:57:c9:e3:53:51:9f:15:d2:09:f3:95:8a:51:1d:
         55:0a:9f:a3:a6:a2:ef:e5:cd:7d:b8:9c:48:4b:33:04:3f:0c:
         1f:66:0b:9d:cb:8c:8f:38:8e:0a:cd:2b:84:09:e0:87:d9:53:
         6e:69:9b:6c:04:a4:c4:0e:31:b3:8b:49:ec:c2:e3:a6:9e:5f:
         f2:6d:54:87:ff:e1:5a:bc:d3:26:2d:95:a3:fc:43:5a:73:f1:
         bc:96:d2:66:1c:cd:5d:78:5c:af:2f:bc:21:ea:07:b4:9f:00:
         da:85:a9:74:69:6c:d3:cd:ee:12:de:ab:4b:aa:57:34:5a:14:
         f2:ae:09:8c:99:2f:03:62:ad:86:37:87:71:93:b7:06:f6:c0:
         cf:af:a3:7e:22:a6:9d:ab:39:09:06:a5:5a:25:6d:a3:8d:50:
         9e:74:3c:e1:e6:90:7e:76:ff:e4:0b:84:b0:32:56:79:1a:23:
         df:79:06:ab:01:3b:f5:c2:ec:ca:cc:93:a5:4c:1c:0f:02:2c:
         d5:f7:fe:7c:aa:4f:7f:09:9c:81:67:ce:1c:ae:cf:30:26:8c:
         3a:79:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:56:44 2026 by rpki-client