Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa
File:                     94b63554-10f5-3368-a9cc-4d31e3421b4f.roa (raw, json)
Hash identifier:          gs0yne6brbAwmdpH77k/D3I6e+wLHMtSp9sDyrFWlJQ=
Subject key identifier:   30:7B:CB:49:78:3D:F7:D2:7F:79:E5:FF:42:C6:5D:F0:BF:F0:38:83
Certificate issuer:       /CN=a58da523-4991-493a-95ce-ff1c2b97244a
Certificate serial:       010D0C9F4328584F7A4D92CE58C39B36EC4E3DC0
Authority key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     8070
IP address blocks:        199.34.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:92:ce:58:c3:9b:36:ec:4e:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58da523-4991-493a-95ce-ff1c2b97244a
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=a416ba3d-f9fa-4ab3-969c-e67d3294e692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:4e:72:db:75:d0:2f:b7:44:b4:35:5d:2b:
                    51:35:5c:a8:aa:f2:e2:f3:ee:33:97:32:a8:83:ba:
                    60:90:3c:81:44:ee:28:a0:2c:16:a2:9d:f1:d5:51:
                    dc:28:06:0a:37:4d:13:12:32:17:0b:a9:9c:0c:79:
                    ee:2f:87:1b:45:de:24:c8:c2:02:a6:3e:a9:fc:e6:
                    86:56:e4:81:48:f4:11:08:c8:61:3f:57:c8:a1:ec:
                    d3:d4:2a:d9:7f:d8:d2:f5:28:54:f9:16:8d:98:bb:
                    68:7e:cc:28:c9:7d:b2:bf:d9:47:dd:53:59:7f:01:
                    1c:c3:b7:f5:2b:a9:08:db:03:83:ba:5e:ce:7f:07:
                    de:8b:0b:9f:72:e4:ad:89:04:23:21:d0:5c:23:d9:
                    2c:0b:8a:a1:8b:14:7a:50:69:79:dd:53:7b:a0:36:
                    98:46:46:b3:a0:47:91:38:e6:ae:42:27:11:10:a7:
                    92:79:9b:f7:d0:d3:0d:e6:4e:53:5e:b4:60:08:1f:
                    e5:f2:cc:b8:4e:67:1a:7c:4f:f9:d3:95:33:17:a8:
                    0e:fa:84:17:a9:65:c1:e3:da:fc:07:99:ca:89:79:
                    e0:56:e7:fd:d3:30:43:d4:c5:0f:15:8c:80:55:2c:
                    31:5d:bd:ba:94:9b:27:a7:a6:1c:15:b2:2b:cb:56:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7B:CB:49:78:3D:F7:D2:7F:79:E5:FF:42:C6:5D:F0:BF:F0:38:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/94b63554-10f5-3368-a9cc-4d31e3421b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl

            X509v3 Authority Key Identifier:
                keyid:70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:9d:b9:57:51:3a:96:70:c1:b1:16:fe:9c:09:33:cc:9d:
         38:4e:d6:56:70:c4:e1:11:81:58:8e:7a:ec:52:98:4d:a5:a2:
         3d:c7:fc:09:78:e4:7d:e8:6b:f1:b6:8e:b2:da:ce:8c:d4:8a:
         1b:18:eb:5d:a3:f2:ce:9e:03:da:cc:74:50:d6:26:59:2c:88:
         bf:2a:8b:31:5b:e7:ec:44:a7:55:7a:b2:d8:2f:1d:09:9c:d7:
         e0:ab:85:43:64:ff:a2:66:04:3e:18:13:ac:88:8d:c8:0e:cb:
         41:64:60:38:f9:da:41:67:44:d4:db:f8:7b:08:5f:03:d2:f0:
         26:cf:ae:a3:b8:ea:9f:16:fc:54:d9:e6:11:35:5e:a6:0b:90:
         af:6d:70:a3:0d:aa:d5:09:5c:3a:21:d2:81:91:60:c7:53:28:
         ff:9b:31:e3:37:c6:e3:7f:b0:de:00:84:9d:6a:b7:db:f0:20:
         a2:76:ff:83:7a:7a:00:bc:ef:1d:b2:54:9d:bf:48:ca:70:84:
         3a:89:29:c8:5d:f7:09:72:3d:98:ee:86:36:79:d0:34:58:9f:
         22:31:aa:1f:97:dd:5f:d3:f3:c9:f7:7a:ea:d9:e1:14:ca:70:
         f8:bc:04:2b:c0:4b:63:d8:6f:b6:42:12:79:42:6f:45:a2:20:
         26:95:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:48:02 2026 by rpki-client