Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa
File:                     282703f4-37f5-3c17-a75e-bd03d598e247.roa (raw, json)
Hash identifier:          fxH+62IKiictKOoT4+lwqqEKUkQ1hTSEgs9AlwD6bt8=
Subject key identifier:   4B:00:8E:18:94:E2:51:F6:B7:0B:5A:D6:82:C3:94:C2:4F:46:15:6B
Certificate issuer:       /CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
Certificate serial:       010D0C9F4328584DC56594DF01D1F4213EFBCE40
Authority key identifier: 25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     13768
IP address blocks:        66.129.176.0/20 maxlen: 20
                          67.226.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:94:df:01:d1:f4:21:3e:fb:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96100a5-de6f-4e8d-a5f0-be83c31160b7
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=6b9190ee-d56d-49af-9332-6b3399d701ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:ad:0e:dd:06:b4:a8:a8:0d:3d:db:82:da:
                    54:45:01:2a:6a:eb:3f:1f:b3:5b:91:98:d8:11:c9:
                    bd:11:bd:16:58:08:15:f4:3f:8f:f5:f7:d9:cb:3c:
                    fd:3d:c8:57:07:14:c9:76:02:f3:84:2a:6a:da:aa:
                    a1:9b:18:51:66:89:5c:bf:6f:6f:e9:b8:67:76:83:
                    14:9f:79:80:34:31:5a:fb:28:b6:73:e6:ef:ff:25:
                    b8:2c:73:46:86:d9:e4:20:ca:b5:47:02:68:79:a4:
                    4c:18:c2:e5:d7:ce:78:17:c2:42:c9:80:3e:66:28:
                    8a:20:03:84:95:9c:85:f8:66:d4:47:f5:c4:49:4e:
                    44:21:fe:8a:20:82:9d:e4:cf:59:1f:97:39:ba:e6:
                    ca:a8:e2:d2:98:92:3f:a6:c0:a0:4c:bf:5b:94:b1:
                    8b:99:31:4e:51:66:e8:31:2e:9d:46:fd:cb:aa:7c:
                    2b:89:6a:1c:f5:4b:ce:71:4a:32:7d:e9:26:d0:63:
                    46:52:6a:ab:76:e9:6f:e4:e0:78:a3:b7:da:d2:e6:
                    9f:45:12:1d:40:41:b8:07:45:99:9c:06:3c:5f:91:
                    59:a4:69:7c:f1:01:7c:e1:d7:cf:6c:db:6e:58:74:
                    db:92:24:98:f2:40:45:4b:72:69:47:e5:58:d7:f8:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:00:8E:18:94:E2:51:F6:B7:0B:5A:D6:82:C3:94:C2:4F:46:15:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/282703f4-37f5-3c17-a75e-bd03d598e247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7/f96100a5-de6f-4e8d-a5f0-be83c31160b7.crl

            X509v3 Authority Key Identifier:
                keyid:25:69:20:E8:51:C5:35:97:63:A8:84:11:F4:FA:E7:7F:39:AE:58:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f96100a5-de6f-4e8d-a5f0-be83c31160b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.176.0/20
                  67.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:ab:f5:a0:1f:ed:5b:fc:01:9e:b1:d2:ae:a0:15:1f:b8:6b:
         f3:7a:ac:c3:9c:b5:15:95:86:cd:b0:c4:c0:7e:30:fa:47:7f:
         23:ca:8d:9f:c9:43:5a:64:c8:b2:91:5e:16:95:53:4d:24:cf:
         50:36:90:59:f2:af:ed:cf:79:37:78:9b:65:81:b4:3b:be:e3:
         19:33:a2:91:c5:dc:3d:33:af:d8:a0:b5:27:f5:2f:ff:52:cd:
         a9:32:aa:a9:7f:db:7b:06:73:c8:bf:71:28:87:e7:09:d4:d7:
         33:02:ec:3a:67:ec:b3:83:a7:f5:8d:66:29:b0:9d:78:e7:b3:
         c0:fb:d6:cb:6c:c3:6c:09:0b:3d:c0:e2:92:02:74:fc:dc:15:
         c1:ac:ab:90:a1:bc:fc:a2:71:39:26:34:4d:a1:cc:be:97:70:
         e7:a4:9d:fa:4d:08:69:22:6c:3d:79:2d:bc:17:0f:fc:06:b8:
         27:a5:e5:31:b2:dd:da:bb:bc:28:a3:c8:84:78:a3:5e:c3:ce:
         a9:c9:28:b6:a5:2e:12:eb:3d:81:48:95:c2:3a:cc:d2:11:50:
         17:67:c0:10:26:cb:93:72:cd:26:f1:f0:4a:14:14:67:a4:3a:
         d2:5f:c6:04:ad:b2:0a:f8:96:e9:55:6d:12:87:9d:55:d8:03:
         48:3d:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:49 2026 by rpki-client