Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9381817a-0cf7-3aa9-8920-52df79c0b8c5.roa
File:                     9381817a-0cf7-3aa9-8920-52df79c0b8c5.roa (raw, json)
Hash identifier:          zGrhhME5WRv5nfBQ7qcV2Bfl9NB20jn+S8r93aUHASs=
Subject key identifier:   F6:4B:8B:A1:F7:67:91:25:7F:79:4C:27:FA:57:C3:7B:CC:83:2D:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F06725B7EE50EE84A58148800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9381817a-0cf7-3aa9-8920-52df79c0b8c5.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        96.114.113.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:5b:7e:e5:0e:e8:4a:58:14:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=3b1fe51b-c106-4a60-aee6-c579a4f0480e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:bb:de:56:ee:ea:83:9c:6f:1f:bd:74:d7:
                    12:eb:87:8e:0a:3e:3e:86:8f:ff:75:b6:45:ee:e1:
                    c0:22:54:3d:c4:df:4d:ca:54:e7:98:ad:49:3a:bf:
                    4e:b3:18:b8:db:46:25:6a:b3:0c:1d:b2:61:59:84:
                    3b:b7:49:1d:a9:3f:c6:03:6b:f3:5e:85:a9:1c:1e:
                    82:55:70:49:00:bf:aa:a6:02:09:d0:ab:13:5d:e4:
                    81:5a:2f:92:dc:af:e1:7d:77:cd:57:84:7f:68:bb:
                    bb:60:cf:fb:2d:33:66:d6:4d:28:a9:c3:a4:5b:0c:
                    c3:fa:c5:28:33:34:01:89:cc:bb:b0:3d:51:4a:38:
                    ed:2c:94:52:a8:58:00:7f:70:73:1f:b2:7e:82:13:
                    fa:5c:0e:37:99:26:ea:42:9f:53:f6:e4:29:36:47:
                    31:1b:af:7d:1e:f1:8d:5e:3a:c1:d2:b5:4b:43:b3:
                    3b:da:fc:24:4e:99:19:15:3b:23:ba:fc:65:29:2b:
                    1f:2b:e5:cb:42:b5:35:2b:1b:29:e3:10:bb:e8:3c:
                    2b:bf:70:aa:85:3d:05:64:85:49:09:00:f2:29:70:
                    e9:e7:2b:88:70:d5:71:67:83:28:8a:57:99:91:b5:
                    5e:80:c4:c7:3e:fd:3d:96:a4:e3:a0:f2:94:86:bb:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:8B:A1:F7:67:91:25:7F:79:4C:27:FA:57:C3:7B:CC:83:2D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9381817a-0cf7-3aa9-8920-52df79c0b8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.113.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:c3:5c:22:3a:de:75:cd:8e:9b:e3:83:bd:5a:75:c3:5b:
         82:2f:f9:ea:a9:e4:bd:2c:d3:89:2a:ee:f2:3e:58:22:89:d5:
         fb:44:ab:fa:aa:88:ce:75:e2:8a:74:a4:99:29:ff:a9:4c:80:
         87:db:e7:c5:d2:8d:5f:a7:d8:a5:88:c1:75:3f:91:fc:c8:3f:
         77:65:66:b3:96:ba:16:99:90:cf:6d:a7:b9:94:fd:36:67:cc:
         24:1a:94:cb:ac:e2:e6:83:1f:e1:7b:c6:d0:05:eb:5e:d2:0b:
         61:c3:74:ed:a6:9d:9c:e3:2c:81:c6:21:36:e2:bd:59:06:e1:
         c2:23:41:c4:b7:94:6a:94:71:38:21:b2:16:31:a9:f0:b5:0e:
         92:29:4a:bd:50:73:e3:62:72:cb:73:4b:e3:2d:43:81:77:ff:
         87:a4:e0:94:7e:29:3d:31:8f:fb:da:06:0d:da:07:84:0f:27:
         7a:13:e5:d5:28:23:e0:5c:33:c5:f5:ed:39:0d:23:64:94:86:
         c9:49:b5:aa:28:af:84:a5:16:20:a0:f6:b9:85:74:6c:cb:bb:
         b1:69:c2:2b:fe:1d:e0:11:3d:a7:32:ce:b9:0c:df:d8:84:98:
         df:8a:10:f5:bb:43:89:e5:d1:df:3c:ba:aa:5a:2d:38:a5:64:
         ff:94:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:45:29 2026 by rpki-client