Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d8e48edb-a422-323d-b375-aaf389db7f71.roa
File:                     d8e48edb-a422-323d-b375-aaf389db7f71.roa (raw, json)
Hash identifier:          qliOmrXogdGc/+7lEJ8OHC7xAHTAHvLweIcH67J7SDo=
Subject key identifier:   D7:90:E9:8D:DC:AB:B0:9B:77:BB:33:4C:54:00:A3:54:3D:62:00:0D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584D8A40009959CEA580D13950C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d8e48edb-a422-323d-b375-aaf389db7f71.roa
Signing time:             Fri 17 Apr 2026 20:32:05 +0000
ROA not before:           Fri 17 Apr 2026 20:32:05 +0000
ROA not after:            Thu 16 Jul 2026 20:32:05 +0000
asID:                     0
IP address blocks:        96.34.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:40:00:99:59:ce:a5:80:d1:39:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 17 20:32:05 2026 GMT
            Not After : Jul 16 20:32:05 2026 GMT
        Subject: CN=554174dc-4daf-4b97-9883-896b472d856c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:46:ab:f1:b3:6e:65:8d:d1:5f:b3:f7:33:
                    46:7b:31:1c:18:f3:d3:16:2f:c6:a1:66:98:2b:f2:
                    f9:d6:d2:5c:7d:cc:58:e6:2b:d9:76:7f:7f:a4:e1:
                    b7:69:7c:9c:70:56:31:1f:20:65:a7:86:ea:c5:98:
                    5c:92:5e:5f:ba:66:ec:b4:86:34:86:53:8e:b1:16:
                    0f:2a:f1:39:5e:77:15:73:c4:d3:a3:33:e5:7e:5d:
                    bf:b1:a5:fb:c9:bf:32:aa:12:f4:ab:34:28:a0:b7:
                    22:5c:23:cc:0b:28:50:5b:15:5e:5e:2d:fd:bd:33:
                    f5:25:ae:9e:e4:5d:13:d1:a9:cf:b3:59:59:19:e9:
                    0c:20:9b:90:1d:f3:a1:ac:fe:f4:c0:bf:84:cc:4b:
                    39:1f:1f:0e:82:13:92:01:df:fd:e5:13:23:08:f8:
                    50:71:36:ae:97:36:8c:12:00:e3:d1:0f:c3:fb:b2:
                    80:28:15:1a:41:06:4b:37:a0:6e:ac:cc:5f:b6:f3:
                    6e:7b:a4:6c:aa:fb:20:60:50:e6:a6:bf:a6:45:fe:
                    39:21:fa:30:50:ec:09:8c:65:74:cc:ad:22:4a:78:
                    c4:e2:ef:e8:46:7a:04:92:42:a1:d7:07:25:5b:3e:
                    42:aa:a3:dc:bb:e6:85:b8:a9:94:ca:ea:ac:ef:97:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:E9:8D:DC:AB:B0:9B:77:BB:33:4C:54:00:A3:54:3D:62:00:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d8e48edb-a422-323d-b375-aaf389db7f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.34.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:8e:09:9c:00:a2:78:13:f0:70:cf:9e:56:e4:50:f2:f1:
         5f:5e:d4:99:e9:91:4e:f5:23:bb:98:4f:ee:71:b8:ae:1b:0a:
         f2:f8:66:72:22:d3:fc:6f:4d:54:e1:93:4e:de:d4:9b:7e:f7:
         2d:8f:c4:71:6d:d7:bf:fb:19:23:64:c2:78:55:6b:78:69:1f:
         4a:82:24:c0:76:ec:40:73:3f:32:f9:e5:0e:27:3b:e8:da:cf:
         e0:b0:e3:f4:2f:1f:98:52:87:15:6b:8a:e7:4c:98:f4:bb:99:
         c3:43:0b:2d:8b:6d:bf:3f:b6:b9:07:23:07:c9:be:f6:0e:03:
         57:c5:88:a6:47:90:20:1d:21:de:e9:ff:ff:d6:7e:f3:b6:65:
         5b:ae:da:78:86:a9:0f:7e:eb:48:88:7b:f3:d4:31:bf:ec:fa:
         5b:72:7a:a0:83:5a:6c:37:8a:00:7c:e4:bd:a4:51:f3:93:75:
         1b:85:3f:90:8f:59:4d:da:7e:14:66:11:40:19:47:83:7c:fb:
         c8:86:20:58:14:96:a7:95:87:d2:fc:70:60:56:44:fb:d8:f5:
         b3:f6:a4:77:6f:f8:45:fa:cf:11:00:a0:4e:f7:f6:f1:f2:97:
         fa:2b:9c:9b:9b:ab:e6:2d:1c:dd:5e:59:0a:43:68:2f:db:e1:
         35:c9:bb:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KQACZWc6lgNE5UMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDQxNzIwMzIwNVoXDTI2MDcxNjIwMzIwNVowLzEtMCsGA1UEAxMk
NTU0MTc0ZGMtNGRhZi00Yjk3LTk4ODMtODk2YjQ3MmQ4NTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApphGq/GzbmWN0V+z9zNGezEcGPPTFi/GoWaY
K/L51tJcfcxY5ivZdn9/pOG3aXyccFYxHyBlp4bqxZhckl5fumbstIY0hlOOsRYP
KvE5XncVc8TTozPlfl2/saX7yb8yqhL0qzQooLciXCPMCyhQWxVeXi39vTP1Ja6e
5F0T0anPs1lZGekMIJuQHfOhrP70wL+EzEs5Hx8OghOSAd/95RMjCPhQcTaulzaM
EgDj0Q/D+7KAKBUaQQZLN6BurMxftvNue6RsqvsgYFDmpr+mRf45IfowUOwJjGV0
zK0iSnjE4u/oRnoEkkKh1wclWz5CqqPcu+aFuKmUyuqs75c6CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNeQ6Y3cq7Cbd7szTFQAo1Q9YgANMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDhlNDhlZGItYTQyMi0z
MjNkLWIzNzUtYWFmMzg5ZGI3ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCKoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADovjgmcAKJ4E/Bwz55W5FDy8V9e1JnpkU71I7uYT+5xuK4bCvL4ZnIi
0/xvTVThk07e1Jt+9y2PxHFt17/7GSNkwnhVa3hpH0qCJMB27EBzPzL55Q4nO+ja
z+Cw4/QvH5hShxVriudMmPS7mcNDCy2Lbb8/trkHIwfJvvYOA1fFiKZHkCAdId7p
///WfvO2ZVuu2niGqQ9+60iIe/PUMb/s+ltyeqCDWmw3igB85L2kUfOTdRuFP5CP
WU3afhRmEUAZR4N8+8iGIFgUlqeVh9L8cGBWRPvY9bP2pHdv+EX6zxEAoE739vHy
l/ornJubq+YtHN1eWQpDaC/b4TXJu1E=
-----END CERTIFICATE-----
Generated at Fri Apr 24 09:19:01 2026 by rpki-client