Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa
File:                     5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa (raw, json)
Hash identifier:          SO3yXlduh/tNw0rI19cOze+zbrUdRkZbSBga0UDfD6Y=
Subject key identifier:   46:C6:49:3A:0C:BC:86:5C:EE:EA:D2:24:43:3F:15:59:CD:59:DB:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D1172738D3394699A97912D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        96.107.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:73:8d:33:94:69:9a:97:91:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=14efd168-20ad-4fc6-b4f0-49fc746d7e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:45:05:bb:a9:b2:8e:cf:8f:2d:43:47:81:80:
                    78:1e:7e:22:ca:be:97:73:8c:8a:12:ce:31:11:5d:
                    16:47:cb:c0:a4:30:60:c2:91:b9:38:48:dd:f8:e6:
                    ec:09:7e:6f:1c:fb:be:6f:9d:77:2a:c2:a5:04:ce:
                    34:de:1e:d1:c6:7e:71:07:11:74:99:58:0b:23:23:
                    90:fb:c2:f2:28:cc:5e:c6:21:36:b0:5a:ea:6b:f0:
                    40:e3:5e:5f:d0:e1:00:2b:75:31:08:b1:b0:7e:47:
                    3c:54:2c:63:a1:ef:fa:dc:45:6a:8b:d0:08:66:57:
                    cc:45:5d:ad:2f:14:cc:61:4a:87:7b:c9:3c:53:a6:
                    49:fb:61:02:29:37:2d:b4:6f:c6:1f:35:33:aa:8f:
                    31:40:65:52:21:17:82:c7:61:4d:61:7c:ad:94:dd:
                    ba:b3:12:af:2f:69:af:d8:d4:14:0a:73:84:27:fe:
                    d9:35:55:62:75:18:f2:6d:f5:34:e3:44:d8:06:03:
                    ae:63:ca:4c:f3:1d:e9:b1:64:66:f6:66:aa:c1:62:
                    86:09:5a:cf:dc:50:c4:44:ca:a1:98:6e:e1:ba:a2:
                    a5:db:67:a3:51:be:53:ca:a1:7c:99:02:fd:8a:4e:
                    51:32:cc:ac:15:2c:05:49:42:c8:00:b2:47:7b:8a:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C6:49:3A:0C:BC:86:5C:EE:EA:D2:24:43:3F:15:59:CD:59:DB:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ecf5fcc-b8d2-30bf-997e-c4a4c1c81e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.107.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:aa:e4:81:e6:b9:6b:18:06:56:58:a5:27:db:5b:41:78:
         63:1d:e2:92:22:3e:de:4d:de:bd:e1:06:0a:8b:d4:93:1a:31:
         38:55:4d:5e:c1:10:ae:d8:0f:0a:34:5f:be:01:cb:cb:41:14:
         68:be:37:b6:da:fd:b7:0f:9e:c6:c3:87:ee:0a:57:11:2f:19:
         80:6b:db:9c:60:ab:3c:4e:fe:98:7f:54:4a:06:74:10:d4:37:
         eb:f7:a8:ea:3b:33:31:90:94:06:72:b3:fb:34:65:1b:d5:0e:
         0f:1d:b5:e4:bc:aa:90:85:8b:2a:45:db:8e:06:e7:27:bd:d3:
         b3:7e:32:be:fc:0b:f4:0c:e4:81:37:cc:5c:3d:f6:02:cc:59:
         05:30:5c:83:7a:26:c9:4f:7a:08:0f:31:25:82:1e:94:64:d4:
         98:11:7e:1c:a6:b8:e2:e1:b1:db:88:10:b9:08:94:cb:37:83:
         72:11:95:05:97:e4:40:48:cf:4c:6e:a5:9c:c9:f6:95:b1:0f:
         b6:40:4d:a3:95:fb:11:9a:89:c1:bc:c8:ec:8a:f3:95:08:e1:
         55:21:f3:f0:b4:a0:4d:38:1f:43:ae:03:5f:56:c1:df:aa:30:
         f6:bd:8b:e5:f1:c0:b6:1d:f4:d8:78:4d:9f:21:bc:1d:0c:f4:
         89:61:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:59 2026 by rpki-client