Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1b064ab3-775c-3618-83e0-817984a0ae39.roa
File:                     1b064ab3-775c-3618-83e0-817984a0ae39.roa (raw, json)
Hash identifier:          UWRQ5Ot6CiIzTWWo8XnnVwKr70MLWgfIdzCOdfXmi2k=
Subject key identifier:   42:6A:3D:84:93:11:BF:DB:CA:04:9F:A3:64:5D:8B:48:18:A6:FC:7B
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584D0D428179F7A453360BFAFB80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1b064ab3-775c-3618-83e0-817984a0ae39.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     8100
IP address blocks:        96.31.94.0/24 maxlen: 24
                          96.31.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:81:79:f7:a4:53:36:0b:fa:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=cdead130-1c6b-4991-8ee5-44e1c5f86fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:5c:d6:a1:81:17:c8:a7:9a:28:ef:ea:b1:
                    ae:5a:88:b2:99:2b:d0:4e:c3:22:d9:93:dd:67:4d:
                    6e:b1:ca:dc:de:57:f0:45:3c:72:41:09:fe:2a:73:
                    d9:af:13:7e:83:3b:cd:27:00:7f:b7:63:c2:b4:83:
                    1e:6f:e7:e4:77:b8:2a:54:96:80:3d:e3:7d:98:8d:
                    b3:bc:51:92:58:5f:1d:27:0e:f7:86:3c:ab:c7:fd:
                    f7:67:ea:29:5d:ac:01:ad:a4:46:2d:0a:ee:7a:ac:
                    b5:dc:f2:13:e9:9d:4e:b7:c6:a7:ff:3e:11:46:0a:
                    85:7e:35:8b:2d:21:23:8c:08:82:7f:af:e2:02:e1:
                    41:07:54:5f:c1:ef:2f:bd:32:89:9e:86:37:e5:6e:
                    b6:c6:37:e4:cb:7f:ea:48:42:53:21:90:a3:81:f6:
                    67:79:4d:2e:d9:10:f9:e6:e3:4d:ea:af:b6:fb:97:
                    5c:b6:56:e4:15:f8:8d:a1:1e:b0:39:b6:92:f2:df:
                    27:f4:e3:d9:34:bb:ec:62:0f:61:f0:6c:75:f7:e8:
                    0d:0d:03:b5:9d:71:ee:bb:ce:0c:6d:97:20:90:66:
                    fb:94:c7:8f:fe:c5:8e:84:3c:97:54:89:73:95:3d:
                    56:5a:e4:8b:bf:ba:44:b7:02:2b:bf:20:40:6c:da:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:3D:84:93:11:BF:DB:CA:04:9F:A3:64:5D:8B:48:18:A6:FC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1b064ab3-775c-3618-83e0-817984a0ae39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.31.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:52:f7:d5:80:09:b6:1a:0c:47:f7:b1:1f:e9:c7:b8:15:ee:
         13:37:6d:98:ed:74:41:3d:4a:1f:51:39:60:cc:06:92:aa:94:
         75:49:2e:ae:00:1d:cc:53:08:a8:eb:19:5b:9e:04:6c:b2:92:
         2d:e9:72:13:e1:b1:36:a5:df:98:0c:41:36:76:f0:f1:61:93:
         cb:f8:b7:f9:a0:9f:c2:ef:81:fe:ff:30:47:8e:e7:6e:a0:ed:
         e9:ba:13:3c:a5:c9:f4:5d:03:67:e1:b5:55:27:c0:6a:b3:ee:
         e4:25:7e:86:e2:08:d5:f7:10:1f:e4:14:aa:46:01:a2:a6:08:
         e2:2b:c8:ce:84:38:70:50:d4:53:27:c6:d5:53:8f:9d:76:e8:
         f9:92:dd:5c:59:36:85:43:37:68:33:c9:c8:99:11:84:81:30:
         51:c1:4f:b4:6d:05:74:31:8d:87:bb:7b:25:4f:0d:35:88:e7:
         a2:24:5c:93:06:0c:bc:cf:57:88:c7:e6:d8:db:fa:c3:f7:f9:
         d2:60:da:59:62:f8:8b:05:7a:0e:6a:b0:bf:33:db:fc:70:44:
         86:d6:1a:aa:41:67:5b:71:92:fd:3b:6a:20:e0:96:2b:e4:fb:
         0f:f3:89:42:f0:c1:c6:4b:95:bf:d4:4c:f8:ff:d2:06:ba:41:
         92:73:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:30 2026 by rpki-client