Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa
File:                     4fb105ef-7e3f-301f-b030-e161d2330d74.roa (raw, json)
Hash identifier:          1d/Hr5uYDO5h0Ej2iAA7pNHlvnxI+hHxCptEcHwnV9k=
Subject key identifier:   92:8C:B3:76:E5:F5:90:8C:63:85:01:FC:D4:F2:B1:9B:91:91:DF:B0
Certificate issuer:       /CN=d976d803-9006-4b37-9d12-23e5108d0e94
Certificate serial:       010D0C9F4328584E6F319080481BF205C0E45840
Authority key identifier: 78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa
Signing time:             Wed 08 Jul 2026 20:43:06 +0000
ROA not before:           Wed 08 Jul 2026 20:43:06 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     401918
IP address blocks:        96.45.72.0/21 maxlen: 21
                          96.45.72.0/24 maxlen: 24
                          96.45.73.0/24 maxlen: 24
                          96.45.74.0/24 maxlen: 24
                          96.45.75.0/24 maxlen: 24
                          96.45.76.0/24 maxlen: 24
                          96.45.77.0/24 maxlen: 24
                          96.45.78.0/24 maxlen: 24
                          96.45.79.0/24 maxlen: 24
                          2604:1f60::/32 maxlen: 32
                          2604:1f60:8010::/48 maxlen: 48
                          2604:1f60:8011::/48 maxlen: 48
                          2604:1f60:8012::/48 maxlen: 48
                          2604:1f60:8110::/48 maxlen: 48
                          2604:1f60:8111::/48 maxlen: 48
                          2604:1f60:8112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:31:90:80:48:1b:f2:05:c0:e4:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d976d803-9006-4b37-9d12-23e5108d0e94
        Validity
            Not Before: Jul  8 20:43:06 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=67ac8030-8ae5-4cb5-9f13-00c4c114c9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:96:e3:22:1b:47:58:b0:3f:95:37:8b:5b:
                    a4:fc:d6:cd:c8:6a:42:31:a3:72:bd:3c:90:21:d1:
                    42:98:47:9a:fc:91:cc:28:42:06:a2:ba:99:83:e9:
                    f6:58:a3:6c:e3:37:43:e7:3b:e7:51:fd:c7:04:85:
                    ce:3a:82:2f:61:94:e1:f9:d0:1c:17:d6:ca:44:e5:
                    f2:f7:0f:bc:cf:43:05:6e:53:b7:74:99:df:00:86:
                    3e:8c:fa:e9:37:99:90:81:e6:c2:df:14:88:16:94:
                    bc:e9:b9:08:ac:cf:93:e9:a1:4d:07:03:5f:ba:c2:
                    50:66:01:5a:d8:9c:ff:95:4a:75:03:d9:9d:e9:2a:
                    2d:ec:9e:28:53:e4:84:a1:ae:61:c4:d8:97:08:64:
                    84:9e:63:57:12:0d:db:1f:66:e1:ca:45:73:a5:1a:
                    f4:0b:d9:b3:d5:7e:95:be:6b:ff:58:e7:c6:d0:07:
                    42:dc:57:c7:06:31:37:f0:c9:b1:ad:9d:c6:d1:c0:
                    c8:5d:e5:67:5e:8c:4f:b5:04:aa:59:d4:2f:35:de:
                    e6:69:72:7a:e0:72:ce:a3:2d:ee:ab:90:5d:d5:11:
                    86:bc:00:e6:2f:0d:ea:46:19:e8:57:7c:73:18:dd:
                    26:3e:fb:4b:2a:a1:3a:97:df:2e:1b:fa:27:17:66:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8C:B3:76:E5:F5:90:8C:63:85:01:FC:D4:F2:B1:9B:91:91:DF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/4fb105ef-7e3f-301f-b030-e161d2330d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl

            X509v3 Authority Key Identifier:
                keyid:78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.72.0/21
                IPv6:
                  2604:1f60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:38:14:8e:87:9d:6e:80:19:5d:d4:7f:e7:21:bf:40:09:
         57:e5:2f:69:13:ec:b3:ca:e4:91:33:94:1e:72:db:01:6c:7e:
         d4:83:65:84:fc:b5:3f:da:dc:a0:b5:a3:d4:cd:07:87:0f:e1:
         91:02:68:cb:1a:a9:c5:21:ef:84:96:63:7a:fe:33:7e:94:c0:
         33:32:a9:7a:38:5b:e6:7c:2d:28:2e:23:65:d0:4d:3f:71:9b:
         a8:73:9b:a7:29:5e:b7:0d:d8:2b:ed:69:d4:17:be:0e:04:91:
         be:c6:84:ac:6c:50:16:58:9a:cc:9e:56:9c:21:08:19:99:c1:
         7f:d5:26:9d:4a:f6:74:d1:59:32:ba:40:16:b3:3d:05:e5:fc:
         76:2f:06:a6:c4:9d:3e:25:93:4b:5e:c8:1f:c5:b2:09:9c:2f:
         97:54:1b:d3:32:a6:d8:cb:dc:53:65:e6:db:83:88:39:a8:ee:
         81:fe:87:19:49:b5:e7:ca:9e:ff:84:05:ba:a4:6f:b6:36:b6:
         45:99:cb:c5:f5:ae:85:bb:17:0f:f0:6a:45:07:fd:5e:81:23:
         62:19:15:bd:6f:76:1c:51:9e:bc:2f:7d:2e:fc:43:00:ad:6e:
         e3:14:60:e6:8e:b9:3a:40:52:7c:a9:84:a7:c0:e2:b8:a2:7b:
         3a:2f:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:22:43 2026 by rpki-client