Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b571e8-676d-3911-b249-1f106180d482.roa
File:                     59b571e8-676d-3911-b249-1f106180d482.roa (raw, json)
Hash identifier:          WWIkBTAFaZ4GzTYO+FsfzFKKEEOgqUPNEaxPjUv30c4=
Subject key identifier:   55:FF:13:DF:E0:50:D5:7B:BF:BB:AF:37:4B:3B:48:64:3F:E8:B2:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB954B26B5974587271DF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b571e8-676d-3911-b249-1f106180d482.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33662
IP address blocks:        96.114.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:54:b2:6b:59:74:58:72:71:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b995c62d-4ab3-4ed6-95ea-65b54d6bcb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:e3:28:54:4f:04:fd:a1:60:96:96:e5:28:
                    75:4b:06:c1:09:30:3c:ca:10:0e:bb:ad:0a:6b:03:
                    e6:e0:26:53:95:5e:a3:2d:0a:8a:28:bd:d2:60:57:
                    b3:4f:8a:3b:cf:92:2d:21:5f:3f:90:fa:7f:ee:10:
                    e3:c9:27:59:90:b9:26:74:31:f7:2a:60:fb:28:aa:
                    c1:d7:16:8a:c4:53:c8:cb:77:3c:91:25:36:08:57:
                    48:3d:86:f0:d8:75:db:98:96:b1:a8:20:47:2a:75:
                    2d:3c:df:b2:37:e1:3f:56:5d:67:29:ee:bb:46:c1:
                    1a:84:bf:de:f8:82:68:b9:94:b2:c4:e5:43:53:df:
                    d6:c2:49:97:4c:23:eb:46:b8:35:f7:04:1c:74:2b:
                    9f:5b:ce:70:85:3a:28:39:35:68:15:3e:b0:1f:a9:
                    8b:1a:22:96:32:2b:77:e6:3f:96:f8:9f:f8:f1:c1:
                    f3:a1:5c:7b:57:66:04:74:81:c6:cb:96:43:2a:b5:
                    70:04:ee:0a:c6:51:07:6b:33:da:ca:d9:e8:e2:ea:
                    15:73:02:9a:f4:58:01:09:41:41:22:82:73:5a:9b:
                    e4:11:c8:76:c2:a8:c3:fc:a2:79:9f:5a:d4:0d:e4:
                    ca:3c:72:0f:31:ae:5a:b8:14:cf:c4:2d:58:51:12:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:13:DF:E0:50:D5:7B:BF:BB:AF:37:4B:3B:48:64:3F:E8:B2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b571e8-676d-3911-b249-1f106180d482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:06:01:97:72:75:3a:9a:32:c5:39:0a:7b:f6:1e:cc:76:
         a9:8b:89:28:07:5c:5f:29:f0:13:3a:ae:19:c0:6d:5d:01:c0:
         69:ee:1d:de:36:7b:6d:ad:1d:e5:a8:68:7a:ef:01:63:e3:90:
         91:a0:00:2d:eb:e2:59:c2:8d:9f:3f:f9:18:d3:ad:78:46:4f:
         ae:95:83:37:f1:bf:bd:d5:33:a9:3f:64:18:a2:49:dc:ec:c2:
         be:b6:76:5e:c6:9f:ca:2d:04:cf:d4:2f:d3:fe:13:0b:34:de:
         66:b1:1e:7a:4b:9f:a8:81:fa:2b:7f:f0:99:00:65:06:63:20:
         a3:5a:5b:57:c1:0a:27:e9:35:a4:34:0e:c7:3f:82:83:31:7d:
         9d:a8:31:2a:8b:79:d3:5b:02:1d:c7:a6:2f:4c:65:43:fa:f4:
         de:75:bf:1e:6e:c8:a7:19:a8:a0:01:8e:a4:b1:19:5c:ed:73:
         8c:e0:dd:3a:fd:0d:62:75:4c:d1:88:45:6b:b0:3d:4d:91:a0:
         c8:38:98:3f:ba:bf:e1:01:26:2a:b5:dc:8f:44:f1:2a:51:fc:
         7c:82:4d:08:56:fc:5c:10:00:41:77:7b:3e:31:7a:8a:57:0b:
         d9:fe:42:f5:04:77:f2:2d:e2:35:b5:0d:19:89:f1:8d:be:eb:
         a9:a6:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:03 2025 by rpki-client