Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/95eeb89f-7c62-368c-b80f-06a5ce895e96.roa
File:                     95eeb89f-7c62-368c-b80f-06a5ce895e96.roa (raw, json)
Hash identifier:          QByNIR7HL6dQnhdB/LpqlNyAMCSP4GlQxUZ85KhUS2A=
Subject key identifier:   F0:1C:00:47:93:12:BE:BE:2E:AD:E3:93:15:B2:1F:57:C3:8E:7B:84
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F0FA9F30475FF2D7BB15E6100
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/95eeb89f-7c62-368c-b80f-06a5ce895e96.roa
Signing time:             Fri 04 Sep 2026 08:15:00 +0000
ROA not before:           Fri 04 Sep 2026 08:15:00 +0000
ROA not after:            Thu 03 Dec 2026 09:15:00 +0000
asID:                     30633
IP address blocks:        216.38.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0f:a9:f3:04:75:ff:2d:7b:b1:5e:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Sep  4 08:15:00 2026 GMT
            Not After : Dec  3 09:15:00 2026 GMT
        Subject: CN=ab722285-c0dc-4e02-9e14-1f94307b8868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:54:16:40:f4:0a:95:4d:b0:33:91:70:80:
                    91:99:1d:3e:38:a6:04:a0:85:52:03:61:ad:a4:0a:
                    1f:5e:c1:f8:9e:ad:86:d6:1c:e3:e1:34:c3:40:1a:
                    44:78:fc:3d:23:86:eb:ef:20:ba:27:8c:3a:ce:d4:
                    83:0c:8e:45:7b:f5:b7:93:2d:d3:7d:ae:aa:f0:f0:
                    25:a6:ee:09:5c:82:c5:8c:de:bc:b4:4e:3c:c0:52:
                    cb:62:4c:a8:ef:d0:54:8d:7c:d3:25:6c:b2:3c:c4:
                    55:4d:6a:fe:a0:21:4c:a7:b7:c9:4d:e2:78:5c:0d:
                    35:84:b6:cb:06:ac:6c:a7:36:eb:af:2e:fd:4a:34:
                    f0:c8:d1:cb:aa:92:d7:7d:62:69:dc:55:a9:ec:be:
                    9d:d3:90:5d:cd:d9:cc:31:41:1a:04:af:89:4a:85:
                    94:69:b1:cd:c8:8e:df:a5:30:ab:ed:fe:f2:88:7d:
                    e7:a0:8f:a7:3f:95:af:4d:32:a0:99:43:cc:ac:c8:
                    b7:85:32:93:d1:67:77:82:bc:4f:29:ff:16:1e:85:
                    a4:db:f5:90:54:7b:c0:c7:3e:d8:2d:a6:76:8b:ee:
                    37:de:17:b8:29:81:23:4f:54:33:8b:eb:3f:bf:da:
                    4f:bd:ef:c1:f3:64:d3:c3:a8:62:67:8f:f8:db:d9:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:00:47:93:12:BE:BE:2E:AD:E3:93:15:B2:1F:57:C3:8E:7B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/95eeb89f-7c62-368c-b80f-06a5ce895e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:7a:2d:37:69:1e:e0:6e:23:56:38:01:ed:0e:a4:5d:5c:c1:
         bc:5e:4d:12:2d:70:58:2c:22:40:cf:46:cd:ad:81:74:a9:ef:
         5a:f2:ff:23:a9:72:35:9a:d9:53:67:cc:14:f1:ec:3d:b5:50:
         76:f9:39:84:7d:2b:dc:c8:be:85:f2:4a:77:70:b2:f6:4b:7b:
         59:41:cc:99:1c:79:6e:84:d5:b1:39:07:ab:c7:56:35:26:a3:
         78:62:0b:a8:ef:4b:62:40:b4:61:4a:f9:86:42:ad:46:3b:cf:
         fd:59:50:75:59:ed:ba:94:6c:94:da:c1:6c:aa:e5:7b:57:bb:
         8a:42:9c:67:06:34:e9:4f:f7:dd:7f:f3:94:cc:79:db:42:bf:
         41:44:9d:48:af:40:40:e1:f3:e0:1d:b5:d3:4f:4c:ab:89:e6:
         6a:5f:12:cc:52:3e:2a:0d:3c:74:e4:a1:b1:4d:02:40:f7:9e:
         3b:a6:86:1f:50:ea:16:5e:fe:80:1e:0e:60:be:1c:ec:e4:37:
         ca:ac:4e:46:e0:61:f8:82:71:6e:d4:ee:b4:7a:03:a9:31:a4:
         19:ee:8d:e0:c0:5e:bd:f8:55:b4:ee:88:b2:1c:44:17:77:33:
         f3:49:66:57:b8:45:35:dd:cb:b5:e8:82:1e:5e:5a:b2:6f:a2:
         f5:5b:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:59 2026 by rpki-client