Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d21722f-f967-3318-a2a3-4ca16697a6c8.roa
File:                     2d21722f-f967-3318-a2a3-4ca16697a6c8.roa (raw, json)
Hash identifier:          oSVirF7JvMzdipj77ZZQ5nipl9uPmi1ZXNFYVdAQio4=
Subject key identifier:   18:E1:79:C5:E9:67:22:2C:4C:19:73:70:DD:A8:88:63:13:C7:8B:B7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B076614EF1FA5CF5157100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d21722f-f967-3318-a2a3-4ca16697a6c8.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     200005
IP address blocks:        96.7.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:76:61:4e:f1:fa:5c:f5:15:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=48cc548e-c4ce-4d37-9e2f-ae3f767c876e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:2e:b1:34:78:d4:20:84:42:ab:8e:0b:e2:
                    8c:96:28:c0:91:e9:0b:5d:1d:4a:a2:74:e9:60:fd:
                    64:af:c9:59:bc:2c:d5:a6:5a:46:cd:a6:8a:89:00:
                    b0:61:52:44:a5:74:c3:ef:30:d3:fc:e7:0a:22:84:
                    98:c1:b7:6e:7e:f3:2c:97:67:cb:61:f7:21:07:ac:
                    53:87:a2:da:ac:27:ab:b6:3b:c4:8b:eb:a9:76:21:
                    4c:14:f1:51:07:8f:99:b3:bb:a0:b5:d1:13:2e:60:
                    5a:42:0f:6b:25:b5:3c:0a:81:51:8c:48:e5:d1:e3:
                    22:09:85:b8:56:8a:0b:9a:1d:05:62:b6:52:d6:84:
                    ea:ce:d3:f8:98:e1:00:b4:8a:96:7a:ca:ab:56:ac:
                    97:6f:99:1b:ba:cc:3d:e0:c7:7b:27:2b:da:11:d1:
                    a7:f6:c3:df:8d:8c:76:f8:59:31:9f:58:c9:4f:9e:
                    0c:ef:39:a2:3a:36:6e:f1:92:65:88:bb:9b:38:8e:
                    e6:23:34:64:ce:a5:ce:b3:39:c4:7d:79:3b:65:57:
                    b5:9a:23:d1:9e:71:52:49:c1:cf:79:8e:24:06:56:
                    89:6c:e0:26:93:51:76:a7:2e:bd:45:37:e8:9d:a5:
                    63:05:f8:35:e9:93:2c:01:1c:dd:40:4c:5d:c4:21:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E1:79:C5:E9:67:22:2C:4C:19:73:70:DD:A8:88:63:13:C7:8B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d21722f-f967-3318-a2a3-4ca16697a6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9c:f2:53:3c:cd:a4:ad:1f:e4:47:cb:d9:cd:fb:85:5a:b8:
         30:a3:e0:15:6f:f3:50:c1:7a:cc:56:dc:7d:3f:67:e1:d5:56:
         06:a3:d4:0d:33:8d:67:84:b9:3a:47:60:44:fc:a5:33:0a:49:
         d7:10:c0:27:f3:e8:34:41:e3:bd:6a:f8:40:fd:9e:59:06:a0:
         05:2b:a2:22:bd:ec:e1:1c:4f:32:b5:9e:f4:c0:89:7b:50:0e:
         76:6c:ff:04:a9:01:1f:96:98:54:1e:30:69:de:9f:bb:86:e9:
         28:68:34:60:3f:7a:18:ce:23:b7:5f:d5:47:fd:97:84:5a:a1:
         c8:fd:8c:25:c9:7d:e8:99:33:54:c4:80:34:c0:84:1c:0e:bd:
         eb:78:7c:b0:4c:92:42:b4:e6:9d:cb:98:cb:b2:3c:fc:9c:04:
         45:59:64:da:e8:e6:a8:83:16:89:33:36:d0:9c:56:45:97:68:
         6e:ab:f5:2e:31:71:59:9d:20:7c:1b:d6:8c:2b:7c:55:9d:ab:
         54:77:54:2e:16:58:bc:16:63:cb:ee:e7:5b:60:ab:58:80:88:
         6d:97:09:6a:9e:24:8f:f2:97:24:60:06:b3:cb:5f:b8:42:5b:
         e5:08:e4:b7:c0:ba:e5:56:e6:78:2c:92:10:51:5c:90:b3:0a:
         e6:77:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:14:29 2026 by rpki-client