Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/5d953e84-6058-3e49-b735-9358964a36ad.roa
File:                     5d953e84-6058-3e49-b735-9358964a36ad.roa (raw, json)
Hash identifier:          fiPmkzryFJX5pTqBdjoL9w1peE8t3MLarQsNVOX7n20=
Subject key identifier:   ED:C9:69:DF:B0:71:BC:5A:EF:F3:1F:48:87:B0:87:BC:53:37:8B:DE
Certificate issuer:       /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Certificate serial:       010D0C9F4328584F63F81012B5412F43D3793180
Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/5d953e84-6058-3e49-b735-9358964a36ad.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     62827
IP address blocks:        198.96.5.0/24 maxlen: 24
                          2620:7f:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:10:12:b5:41:2f:43:d3:79:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=17fbf3d9-a513-4997-8961-a8191492444d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:7c:12:bd:0a:1e:3b:58:92:97:b0:6d:00:
                    6c:19:5a:df:fb:49:6d:d8:d0:15:37:23:99:4f:92:
                    ab:05:f6:02:fe:e7:40:0c:4d:9f:c6:58:0a:7e:f8:
                    eb:a6:05:da:97:bc:29:38:f2:25:8d:08:6a:ee:b1:
                    a0:e3:6d:c7:09:cf:79:aa:67:24:fd:7f:34:62:6d:
                    d1:b5:c1:c5:b9:63:30:31:3a:c0:d1:67:f2:e5:92:
                    76:3f:8e:2f:62:10:fe:36:6d:99:5a:4f:71:32:ab:
                    3b:4b:f8:02:14:bf:e2:8f:58:4f:07:98:5f:1e:cf:
                    c0:c9:3a:e7:e5:17:50:d0:9f:c8:e8:1d:f4:a6:cd:
                    79:33:62:2a:f0:b9:14:63:f3:48:ae:fb:e8:e6:95:
                    3c:31:fa:96:d8:82:84:a3:76:94:af:a7:95:db:22:
                    ec:26:71:74:4a:93:05:63:34:74:24:cb:01:db:1f:
                    5b:b1:69:a3:62:8a:90:38:b3:b3:6b:29:84:9f:b3:
                    80:e0:34:74:85:97:8a:56:61:c7:80:4d:47:df:f5:
                    c9:73:ba:ba:6a:d6:ed:4e:b6:6b:f7:1e:8d:f0:30:
                    65:bb:29:95:0f:99:c2:26:f0:95:71:a0:70:37:e2:
                    59:ec:0a:c6:00:b1:9f:20:93:20:d7:26:90:42:3a:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C9:69:DF:B0:71:BC:5A:EF:F3:1F:48:87:B0:87:BC:53:37:8B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/5d953e84-6058-3e49-b735-9358964a36ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl

            X509v3 Authority Key Identifier:
                keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.96.5.0/24
                IPv6:
                  2620:7f:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:f8:6c:72:38:45:fd:b6:41:b2:9b:d8:f1:12:8a:d6:a1:
         36:92:87:a4:d8:c9:a1:f6:ea:56:b3:b9:65:aa:ea:20:0c:d3:
         c6:9e:a7:36:15:f6:ba:59:ae:21:8d:73:75:b8:7e:31:a0:c2:
         70:6e:49:e3:56:29:22:29:93:da:69:6e:73:71:90:0a:2f:83:
         81:60:94:a8:44:28:9e:f1:fb:82:7d:47:4a:31:f6:25:1d:d9:
         ad:d8:7a:15:cb:4f:c3:be:f9:36:fe:12:04:b6:48:bd:27:0a:
         91:2f:60:54:4b:b6:00:c4:48:c8:25:43:6a:7e:22:a6:04:c1:
         1f:69:20:36:2f:17:c0:85:b5:87:d8:c5:d3:3b:99:ae:5a:14:
         db:45:95:67:cc:ce:84:84:a9:49:11:94:5f:43:75:01:64:62:
         74:4a:39:dd:e2:aa:ee:ff:fe:63:8d:15:60:44:af:d1:1b:b6:
         f4:a2:dd:12:8e:45:66:02:39:18:57:da:c8:75:cf:e5:20:4c:
         b2:ec:2b:ca:f7:da:9c:ff:0c:ad:c0:17:f7:c1:86:ca:f8:ed:
         9b:d2:6d:99:f3:45:c0:28:fe:86:eb:22:cd:df:7c:7e:5e:34:
         e1:7b:86:ac:8d:ec:50:94:da:30:ba:e3:af:17:48:88:57:0a:
         66:83:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:18:55 2026 by rpki-client