Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/3ad74b52-291f-39c3-a74a-9de493e74b16.roa
File:                     3ad74b52-291f-39c3-a74a-9de493e74b16.roa (raw, json)
Hash identifier:          UO6nshj0RrXPAdUPG4nPbzhBy+rAPww0oWUlHXDHxK8=
Subject key identifier:   50:25:BF:24:F0:5C:B8:62:DB:EA:1A:0A:26:7E:20:57:72:10:56:8C
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584E7D2F7EAB75CB02CAF1736AA0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/3ad74b52-291f-39c3-a74a-9de493e74b16.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     20454
IP address blocks:        96.47.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7e:ab:75:cb:02:ca:f1:73:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=d4243a8d-2efc-4d1f-8bd9-55fb0e90094b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:75:ae:84:66:86:b0:e7:06:d6:31:94:26:
                    56:14:5b:db:59:2f:cf:b4:42:fe:24:a7:ce:8a:31:
                    19:f6:21:d1:f0:2e:aa:58:40:f1:09:42:2d:94:c9:
                    66:e2:64:4b:c4:bc:54:0d:9a:3a:35:a8:2d:3c:8b:
                    87:59:cc:3d:e5:03:7e:36:e8:f0:ed:19:30:7d:64:
                    8e:02:96:de:c6:fe:1e:3c:e9:94:ef:9a:b6:d3:8c:
                    ac:ca:9d:82:d7:bf:09:9b:9f:3b:88:51:db:1a:45:
                    b8:bd:fd:5a:e0:e0:8b:c0:89:59:75:70:9a:6b:a5:
                    e1:09:07:41:fd:8a:27:d3:d2:77:8d:2a:2c:52:2b:
                    52:52:15:e1:9a:de:7e:a7:e4:32:86:83:9c:2b:bc:
                    07:49:0e:cb:55:26:3d:a3:02:10:e1:19:eb:4b:a1:
                    d2:e5:64:78:9b:95:8f:b4:a3:f6:7b:6d:a0:64:7d:
                    dd:3d:03:46:65:24:34:05:a4:65:3c:21:ba:98:7f:
                    7b:2e:a1:ca:c9:51:eb:29:c5:9f:e2:7e:0a:ab:02:
                    dc:a4:b0:24:ef:3a:3e:18:4b:54:e6:ab:e3:e8:8d:
                    57:ce:d5:dc:7a:2c:a3:30:eb:f6:34:21:d5:1f:9a:
                    8e:a8:80:47:ac:e3:80:52:d1:b8:93:ac:fa:1b:89:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:25:BF:24:F0:5C:B8:62:DB:EA:1A:0A:26:7E:20:57:72:10:56:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/3ad74b52-291f-39c3-a74a-9de493e74b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:9f:02:7e:cb:3d:29:fd:63:63:df:5b:cc:8f:12:65:d5:
         e0:25:0a:6c:cd:96:26:23:63:55:29:e1:2c:bf:09:ae:bf:bc:
         6a:f2:e3:07:dd:eb:b0:88:39:62:3a:2c:59:44:81:c4:4b:a9:
         9e:dc:a8:b1:27:7b:d5:65:22:da:e8:e7:48:a7:a9:4f:e1:03:
         c5:a4:08:a5:55:b5:76:ec:fb:9e:2a:d9:e8:75:c2:65:d8:5f:
         16:26:7c:db:be:14:b7:a1:c2:48:ba:50:7b:18:f1:e3:ec:03:
         46:6a:49:f3:b5:b5:04:36:5c:da:46:03:44:21:f4:80:d1:c7:
         0b:b6:3a:11:52:b4:54:33:35:9f:b2:ab:7e:fc:41:e5:1d:33:
         64:a2:08:a3:dd:9c:1f:31:5b:e1:a8:24:4e:d5:1c:88:6e:2b:
         26:81:fe:5d:d6:5c:d7:ff:ba:0b:d8:9c:64:20:21:ed:20:f1:
         15:b0:ca:90:03:36:d7:46:e0:1b:f7:a5:62:7b:2a:cd:c1:d6:
         21:24:f0:6a:6b:f6:db:0a:71:c7:30:d3:0d:9e:95:e4:73:93:
         5f:37:de:3a:21:f2:31:1a:17:2d:b6:af:43:4a:c0:df:2b:fb:
         dc:75:81:3e:10:a8:59:ee:42:f5:34:8c:b5:48:85:e1:e4:c8:
         5f:66:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:16 2026 by rpki-client