Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa
File:                     97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa (raw, json)
Hash identifier:          BPzsyuJdt85l+0ZeIORkevaRHxeYyXnb7/EDAy1zPaY=
Subject key identifier:   1F:6B:15:AB:9E:3A:ED:6E:27:41:56:5D:D1:0E:9B:2D:8A:66:E3:DC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E683F619F9F08EE4FA63F3E80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        158.247.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:61:9f:9f:08:ee:4f:a6:3f:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=a34fb423-e059-41d7-b4e8-79076007f9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:0b:ab:f2:0b:63:ae:af:4f:f3:88:3d:53:
                    c3:80:54:d2:2d:f6:df:35:7d:a2:3f:c2:32:13:19:
                    de:e4:52:dc:d8:f7:80:cf:eb:50:55:29:da:34:7a:
                    9a:06:13:d7:4c:3b:23:3b:51:4a:97:01:a3:b1:be:
                    64:2c:c0:5b:ee:f5:15:07:90:f3:39:ef:c4:75:d8:
                    10:9f:ff:b5:2c:7a:a9:aa:f5:ee:9e:54:75:e8:38:
                    5e:c8:1b:e4:15:ac:c7:ac:c9:9f:70:1a:c7:46:7c:
                    41:be:4d:b4:86:d9:99:1f:b4:62:5d:f0:ac:a2:5b:
                    fe:a5:e5:6c:4a:b3:16:4d:7b:9b:f8:75:f4:34:3c:
                    e9:ac:fa:c1:57:99:4e:16:de:e9:64:c0:ad:f5:6b:
                    db:20:e5:d7:67:fd:a4:8e:1e:46:34:9b:70:79:12:
                    38:6b:d7:87:fb:e7:bb:dd:5f:ec:48:8b:39:92:d1:
                    b2:a3:92:89:b0:73:9e:af:b4:2e:55:84:9e:4f:b1:
                    17:94:fd:73:1a:43:c8:04:f0:0a:f1:03:ca:26:39:
                    80:66:6f:83:cf:55:f9:01:17:82:aa:cb:c3:09:7c:
                    ce:3f:e2:ff:1d:52:88:3b:c8:2d:36:f7:22:5b:7b:
                    a4:a3:7e:1e:b6:94:22:c6:00:d5:46:b2:f4:39:84:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:15:AB:9E:3A:ED:6E:27:41:56:5D:D1:0E:9B:2D:8A:66:E3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/97c4abce-71a4-3ed6-b1ae-a272483f30f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:1d:4d:79:26:7a:bf:90:e6:bc:ef:67:93:f0:0e:09:c9:
         75:02:4d:51:a3:3b:89:40:73:32:d0:b2:5b:93:d2:fa:d5:97:
         51:7b:d6:53:d3:88:fd:23:46:19:6e:b9:34:48:89:1e:66:b0:
         90:dc:d6:8f:ce:60:88:7e:e2:e0:f5:01:d9:d4:db:8c:8d:9a:
         40:d6:f7:2b:e9:67:59:33:60:8d:68:dd:e5:3e:48:c4:32:a5:
         41:45:15:6e:ec:22:a0:f7:6a:7a:9a:d1:7a:2f:17:06:96:12:
         49:e0:b0:47:29:86:aa:5d:43:ac:ee:93:0f:07:15:95:1c:8b:
         6c:92:6b:c6:47:8d:a1:ad:cf:57:85:5f:16:ea:39:81:50:69:
         a4:bb:0e:d8:cc:c4:e1:89:b5:4f:d6:eb:ad:9f:75:5f:64:28:
         7e:18:95:5b:75:78:9a:30:64:a1:b6:c8:97:68:aa:b6:12:53:
         01:d7:f7:a5:a9:f5:1a:97:14:f9:2a:31:9d:e3:f0:e9:50:99:
         1e:8d:b7:bf:86:f4:b4:1f:5b:ac:0d:29:94:de:6f:2a:ca:df:
         92:ab:fc:28:fe:af:12:73:9a:6d:4b:ae:c8:6d:c7:3c:00:2a:
         e0:09:6b:73:81:74:43:87:a2:9f:12:3d:4c:63:ff:ba:26:25:
         5b:33:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:54:43 2026 by rpki-client