Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b6a32d61-afbe-3617-ab55-db0548746716.roa
File:                     b6a32d61-afbe-3617-ab55-db0548746716.roa (raw, json)
Hash identifier:          cXe14l3H1gPzUdP4xZgj2ZXlLMiArbQz8GclmD7u974=
Subject key identifier:   1F:C9:C2:40:E5:BA:E5:A9:FD:77:93:F6:CD:C0:0A:92:60:35:7E:3A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584BB4E3F0CAAC2948544CFE1E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b6a32d61-afbe-3617-ab55-db0548746716.roa
Signing time:             Fri 31 Oct 2025 17:32:28 +0000
ROA not before:           Fri 31 Oct 2025 17:32:28 +0000
ROA not after:            Thu 29 Jan 2026 18:32:28 +0000
asID:                     401152
IP address blocks:        96.126.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:e3:f0:ca:ac:29:48:54:4c:fe:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 31 17:32:28 2025 GMT
            Not After : Jan 29 18:32:28 2026 GMT
        Subject: CN=31676fe1-aa50-493a-a1bd-df3854fe768f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:52:27:fe:10:0f:90:c9:27:21:81:ed:f6:
                    21:9c:52:3b:7e:18:cd:ce:e8:07:ca:b9:8c:31:81:
                    13:8e:cf:49:9d:84:12:3a:56:44:7f:82:d6:d4:a7:
                    31:98:47:96:92:0c:58:1d:57:e0:b4:bd:65:f9:64:
                    f3:49:63:c4:92:73:87:19:e8:7d:db:17:ec:be:5e:
                    22:ba:8c:b8:60:be:32:04:88:2d:3c:12:0b:1a:10:
                    31:8f:2d:f9:f3:b3:b3:d6:af:b7:fe:c1:7b:6d:b5:
                    db:7a:f8:be:01:44:7b:ca:35:2b:0e:84:96:2d:00:
                    58:42:97:d4:d5:c0:99:ed:b6:f4:ff:d6:78:a9:49:
                    3b:58:6f:3b:fb:f1:a0:b3:49:eb:d4:12:86:6b:c0:
                    6b:7c:1e:52:74:39:67:5a:dc:7e:62:0f:2a:0c:98:
                    b3:e5:03:92:64:db:dd:d1:20:07:e2:b9:85:e1:88:
                    01:bf:1c:53:53:ca:59:de:4a:b8:ca:e2:07:5f:6d:
                    1c:6b:e9:3b:c8:a6:57:a9:4b:43:4e:3e:8b:16:27:
                    16:98:5f:4a:22:37:0e:2b:52:77:20:65:a9:66:d8:
                    40:6f:8e:be:16:57:91:d2:72:15:bc:30:b0:d8:56:
                    7f:77:08:2f:63:1b:c8:de:45:f7:2b:a9:5a:1c:20:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:C2:40:E5:BA:E5:A9:FD:77:93:F6:CD:C0:0A:92:60:35:7E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b6a32d61-afbe-3617-ab55-db0548746716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:fb:60:bc:05:db:5e:18:0f:1e:42:53:06:d4:65:be:fa:
         c2:c3:0f:c2:09:43:5d:82:f2:c0:23:b1:8d:d1:31:0d:1d:76:
         3c:1e:d4:1f:73:e7:93:a8:7a:43:b3:4f:96:1e:c1:c5:0c:00:
         92:0a:86:e7:f9:f1:62:e8:0a:9b:cc:bf:8c:4d:2f:2c:7c:3f:
         06:28:f1:7a:93:13:d9:dd:e9:d2:ed:80:1e:7e:b4:1a:c3:82:
         5b:43:26:4b:82:d7:10:21:58:42:7e:64:f4:43:be:ad:55:4a:
         15:8b:5b:50:ad:af:d5:05:0a:a4:21:32:81:72:5b:67:b4:05:
         36:cb:5f:a6:2f:2b:5c:fc:1b:44:55:ed:40:5d:6e:04:53:a0:
         62:86:c7:ad:0d:09:42:f3:bb:61:e0:db:31:9d:ca:c9:12:cb:
         a0:5b:c7:b3:fe:69:4d:b5:51:a7:0f:3f:c4:35:e2:b8:62:dd:
         12:e3:8f:a8:f8:77:87:20:5b:66:ed:c9:67:14:fa:76:e8:98:
         ff:22:45:5e:d9:c4:b0:4f:e4:d3:30:03:57:ed:e5:7d:98:a9:
         77:c5:b7:a0:9d:9b:3f:f5:73:76:1d:08:b4:6a:1b:96:3c:2f:
         d6:fa:d5:8d:99:57:b6:ae:af:54:98:5c:dd:76:bc:a2:eb:ec:
         aa:39:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:14 2025 by rpki-client