Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/11061581-43ef-393f-b709-32e6eb3baa5d.roa
File:                     11061581-43ef-393f-b709-32e6eb3baa5d.roa (raw, json)
Hash identifier:          KPAI6p+vO1Xerwgyellv+SS0/w+d44v7QezFNF5TiZE=
Subject key identifier:   1D:DA:75:32:95:4B:80:31:43:19:D8:B2:82:92:B9:5D:A0:8E:79:9F
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584D905AA0C18EED96D46EDFCB00
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/11061581-43ef-393f-b709-32e6eb3baa5d.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     13213
IP address blocks:        206.130.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a0:c1:8e:ed:96:d4:6e:df:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=21414dce-87ef-4e1c-b1b4-45a9c9916c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:cf:d7:15:89:be:a0:f5:f4:f4:22:c7:a6:
                    37:77:44:04:0b:12:0c:72:4a:dc:db:ec:e0:03:f6:
                    cb:c0:33:3e:7b:fe:fc:16:65:74:03:0c:4f:04:48:
                    d7:55:eb:ec:f4:e8:44:61:bc:70:2f:c4:0a:01:8c:
                    e9:0c:58:37:d4:ba:d2:26:86:ad:96:9b:7e:78:38:
                    86:0a:a8:79:5c:f1:04:a8:22:ca:d7:fe:66:f2:cc:
                    77:03:09:d0:6c:bf:b1:53:d5:dc:12:d5:f4:38:f8:
                    e7:60:75:3f:06:a8:8e:33:08:ae:3a:18:22:6e:0f:
                    c4:4c:48:e0:91:18:66:26:4e:06:7d:00:61:e3:b7:
                    90:37:ec:81:5a:89:bb:55:d8:4e:e0:ef:e6:0e:93:
                    8b:0c:e9:42:19:b2:e5:00:f6:4e:fd:4e:cf:03:8c:
                    75:43:e2:10:bf:f0:7f:a0:f3:d9:c4:d6:06:7f:c8:
                    5e:38:50:52:81:52:56:cf:13:f6:7c:b3:3e:8a:ba:
                    ef:cf:39:88:fd:24:37:a9:59:9a:8b:b3:a9:b0:fb:
                    7f:41:92:d8:1a:ad:20:f8:99:c8:e5:a4:0d:90:e2:
                    9b:77:95:87:ab:a5:2b:d2:ce:84:26:87:6f:fa:a0:
                    8a:10:b1:07:3d:9f:5d:95:56:60:9a:c7:a1:9a:30:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:75:32:95:4B:80:31:43:19:D8:B2:82:92:B9:5D:A0:8E:79:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/11061581-43ef-393f-b709-32e6eb3baa5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:1c:e4:4c:55:c7:b6:1a:ef:63:2b:df:f5:73:ec:03:1a:
         7f:b8:3d:81:1c:82:58:00:bf:97:40:f3:e5:3c:58:0b:9c:1a:
         13:ca:39:51:25:4c:7f:40:35:a8:89:b9:cd:17:c7:ef:42:31:
         f6:08:98:77:63:7a:bf:4b:af:ff:a1:7a:42:88:68:7f:43:21:
         8c:4a:f1:64:72:d0:39:66:4f:be:e0:08:79:5a:33:8c:84:49:
         2e:08:68:b8:ef:1d:d8:4c:70:83:e5:3f:6e:73:15:82:e0:8a:
         3c:99:53:08:26:a7:66:4d:80:73:e0:8d:ed:e9:ef:90:f1:42:
         92:d2:19:e5:9d:68:8a:e7:29:cf:44:6d:98:3b:45:d4:54:0b:
         78:e8:29:b4:f7:81:12:ed:59:88:20:45:5a:61:b5:da:bb:07:
         df:38:3a:bc:7c:91:ef:ad:2d:72:36:ed:c0:56:15:0c:41:4e:
         70:ec:b6:ec:61:8e:15:43:f1:78:99:1c:7c:27:67:0a:2e:00:
         0a:2c:26:47:26:36:d5:f0:6e:75:f0:fe:4f:6b:84:97:93:cd:
         13:87:be:4f:6d:06:7c:1e:48:f9:bf:01:67:4e:07:8a:d0:4a:
         0e:30:5d:ac:f5:3b:b5:5b:1c:ba:48:06:16:1e:39:41:9b:19:
         40:65:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 03:09:40 2026 by rpki-client