Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/bbd9ae87-60a0-32c5-826e-48c8c6f04012.roa
File:                     bbd9ae87-60a0-32c5-826e-48c8c6f04012.roa (raw, json)
Hash identifier:          SysiuemXvl47ihJeFH7n1uLMeZ4QPOm/B542LtLXPtw=
Subject key identifier:   AA:EF:1D:9D:CF:5D:F4:16:56:94:2D:A5:D3:D2:77:93:74:69:40:EB
Certificate issuer:       /CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b
Certificate serial:       010D0C9F4328584DC6CB1392B3FD1AD7F5D76980
Authority key identifier: C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/bbd9ae87-60a0-32c5-826e-48c8c6f04012.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     399589
IP address blocks:        208.95.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:13:92:b3:fd:1a:d7:f5:d7:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=51ac823d-edd8-4b1c-8ce0-1629f67786ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:43:64:5b:cb:98:08:e7:20:e3:d5:c6:08:
                    ee:f5:bc:fb:12:c7:05:35:c3:23:b6:ba:3b:f1:b1:
                    d2:6b:ee:bf:70:12:37:b1:a9:1d:a6:e8:7a:2d:21:
                    cd:4c:fa:43:21:bd:0d:4b:3c:b0:42:59:4f:e3:f2:
                    2f:b9:9b:f3:cf:83:9f:a4:5f:7d:37:ae:aa:ca:e5:
                    60:06:e7:d5:3b:6d:7e:1f:5a:82:bd:c5:75:e1:ec:
                    ba:18:bb:43:32:ae:20:31:6c:13:1b:a5:1f:ae:b1:
                    7f:39:13:ac:92:0a:fe:38:92:77:5c:5e:7a:e8:de:
                    d6:58:d0:62:39:2f:63:fe:43:a2:24:3d:14:b8:e2:
                    26:74:ea:d8:6e:de:41:8d:c8:b2:9f:16:be:dd:2c:
                    7c:4c:ba:3d:d9:fa:35:2b:cd:2b:76:3b:bf:e4:d7:
                    f9:c5:a0:b8:87:0a:da:07:c8:97:15:dd:32:10:1a:
                    33:29:1c:d6:8e:1c:88:31:27:68:e3:f1:6b:5d:34:
                    a3:c9:1c:7e:e9:3f:49:1d:eb:f6:2c:6f:a2:44:1f:
                    85:bd:54:03:85:86:5c:77:9d:c0:03:f4:0e:30:86:
                    d2:85:90:c6:1b:6f:56:77:26:be:d0:b6:f5:8f:18:
                    74:37:e9:2d:0a:40:6e:05:ab:b6:01:e9:8a:c7:99:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EF:1D:9D:CF:5D:F4:16:56:94:2D:A5:D3:D2:77:93:74:69:40:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/bbd9ae87-60a0-32c5-826e-48c8c6f04012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:50:aa:3d:68:c1:30:30:23:26:09:b9:4f:32:74:1f:cc:cc:
         d3:a3:0c:40:67:04:ce:43:f2:f4:5c:4d:6c:9d:b1:48:10:98:
         91:69:05:d3:b8:d5:69:60:cd:bf:03:3b:f4:a0:82:fc:ea:3f:
         8b:85:83:b4:bb:43:06:26:79:83:c7:d1:84:d5:f2:2e:93:67:
         2e:ce:c5:af:02:6d:f1:91:46:31:86:5e:a3:b4:f2:f4:36:32:
         90:62:c5:99:8d:62:b2:8f:46:76:5f:6f:57:01:b6:83:26:77:
         d3:e1:0c:ab:8f:c7:b2:00:d7:22:0e:69:74:d7:6d:6e:e2:87:
         21:ed:74:ff:c0:80:6f:ab:b8:80:d8:ab:6f:4e:d4:f9:7f:27:
         13:80:1c:1b:85:2a:40:b6:1a:6e:4c:a2:64:2f:58:4d:e2:8f:
         8e:f2:6b:0c:1c:61:4d:f4:4f:74:42:a9:bf:0d:92:b8:a3:08:
         73:0d:5b:6c:d3:3a:a7:44:49:2b:24:89:1e:38:bf:91:c9:70:
         13:12:74:89:0b:bd:57:c2:e6:aa:0b:29:b0:d7:78:e8:73:e9:
         29:0b:00:d1:c3:77:78:fc:1d:66:d0:52:eb:ae:aa:64:fb:02:
         a8:1b:85:b8:a4:50:78:2b:f5:a3:ad:bd:53:e6:7f:b1:47:ed:
         f6:df:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:37 2026 by rpki-client