Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2fee2259-50a7-3b55-b88c-47790f1c210b.roa
File:                     2fee2259-50a7-3b55-b88c-47790f1c210b.roa (raw, json)
Hash identifier:          3LQ03UjARv2BpUCY97tmlQpXxVXb7rfWcMgtGyXf3nw=
Subject key identifier:   9F:37:D3:C2:1C:39:45:50:70:6E:78:EB:85:55:BD:34:9E:EB:7B:ED
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3729C392F079BCCA96DE400
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2fee2259-50a7-3b55-b88c-47790f1c210b.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        96.33.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:9c:39:2f:07:9b:cc:a9:6d:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=8de4ba4b-389c-4cd4-8ef5-9a804e7714d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:99:28:55:92:8e:65:4a:03:fd:15:98:06:
                    f8:9b:fd:02:03:0a:78:92:56:a6:6c:5c:f1:f2:80:
                    30:4d:f4:b6:47:2a:43:d4:53:14:ca:60:bc:de:f3:
                    c2:fc:d0:0d:18:68:e0:b9:32:1c:a5:4f:78:54:bb:
                    c0:ae:40:2b:c9:4a:4e:ce:2d:7a:eb:22:7d:e3:54:
                    44:2c:19:8d:56:dd:a9:ec:54:82:fe:d2:00:51:c9:
                    7b:7a:05:21:5e:86:a8:a1:17:2b:13:11:b9:7f:90:
                    21:50:ed:5c:07:e6:8b:e4:04:7a:e2:6f:d4:20:57:
                    5a:e1:25:99:3d:77:a4:3f:7d:14:49:9f:f1:54:fe:
                    7f:2e:95:8e:f6:5c:55:7a:35:0b:9e:ff:03:6a:03:
                    df:8c:3b:20:3b:8c:eb:27:46:19:f9:5f:3b:fe:ab:
                    0e:01:8c:57:c7:2b:f5:c1:4f:b6:ce:cc:af:95:20:
                    06:77:43:1d:92:94:7a:7c:25:94:39:84:88:e2:47:
                    7e:ee:59:c9:7e:4b:8e:b0:15:93:ed:d3:d3:7f:e2:
                    92:a4:b7:b1:08:ef:fa:1e:5d:e1:76:2f:cb:84:39:
                    83:36:72:f8:53:a1:ef:19:e8:34:31:63:22:30:f0:
                    b5:38:12:c0:d0:50:44:cf:a3:f9:fc:b6:e3:3c:f0:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:37:D3:C2:1C:39:45:50:70:6E:78:EB:85:55:BD:34:9E:EB:7B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2fee2259-50a7-3b55-b88c-47790f1c210b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.33.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:97:4b:e1:01:0e:31:e4:8a:1b:9c:61:f2:ca:0e:94:8d:74:
         55:95:ec:e1:22:38:fd:5a:0b:7d:dd:27:ac:e7:be:5e:9a:60:
         3c:e1:a7:2e:60:9a:64:1e:48:ae:21:88:ff:f7:23:35:dd:0d:
         d6:f6:2d:46:d2:e5:33:75:95:d6:0e:3e:34:bd:a4:a5:0f:0b:
         13:f0:6f:3b:3f:38:eb:8d:1d:3f:67:6e:80:c7:7b:58:29:5d:
         97:a0:6a:a2:80:ed:1c:47:89:b9:5b:ea:de:ee:a0:23:11:86:
         bc:d2:ab:01:11:54:1c:19:e2:33:6d:8a:48:f0:0e:2b:12:ae:
         bb:dd:8c:a6:4c:43:2a:e0:fa:e4:0a:9a:9e:f4:3d:64:80:6e:
         55:53:49:ac:6d:36:8e:14:92:0e:e4:81:e2:cf:a6:a8:b4:d6:
         c0:61:d8:4e:a1:f7:eb:53:08:92:37:34:ac:56:60:23:51:f2:
         3b:ea:47:0c:de:0b:4f:8c:da:1b:bc:fa:cf:45:04:3e:61:2f:
         94:a6:93:b4:ad:22:57:2e:5f:d5:1c:cd:14:01:76:0c:f5:04:
         3e:ea:47:6e:15:71:06:8a:5a:38:bf:4a:9d:b7:55:fb:08:20:
         2a:17:ef:fd:4d:36:19:a0:dc:59:ae:2b:41:4c:48:5b:91:b3:
         b7:b2:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:03 2026 by rpki-client