Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/97b0cb1b-3f05-3820-87dc-f224a9665205.roa
File:                     97b0cb1b-3f05-3820-87dc-f224a9665205.roa (raw, json)
Hash identifier:          yHB2LObM6g8trfhc89ZgE6DwDzT42NgFePh+HT+T9Mo=
Subject key identifier:   56:B4:E4:43:65:3D:4A:0B:FA:22:32:F7:3A:8C:3C:F8:56:63:BC:FE
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584DBA3AF8CF62EF4A2A9A8C09C0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/97b0cb1b-3f05-3820-87dc-f224a9665205.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     109
IP address blocks:        216.128.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f8:cf:62:ef:4a:2a:9a:8c:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=8c616a82-2e1d-45b8-9609-abe9ff8da932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:dc:50:b3:20:5e:a7:04:53:ba:47:2a:06:
                    e4:c8:e4:65:1c:25:bf:58:5f:9a:e5:0e:dd:f8:c4:
                    9e:14:df:dc:e4:a8:5b:f1:9c:ca:b2:e7:cc:0e:d9:
                    23:8b:63:d0:3c:8c:97:6b:60:a8:eb:67:b1:e0:9c:
                    2c:f2:62:1b:cc:f5:3b:50:5e:de:10:90:1e:0a:26:
                    a7:d4:a6:c6:55:3f:71:ab:fa:5b:d3:83:83:29:53:
                    17:75:df:4c:c5:a7:e1:0e:11:bb:fc:5c:19:7e:52:
                    aa:bc:2b:2c:08:18:47:58:5e:63:36:1f:a5:a9:c1:
                    b9:25:b1:27:0c:f2:b5:2c:0c:59:d3:c6:13:74:cf:
                    51:9c:b5:4e:95:22:e8:09:83:36:a4:dd:ed:44:e3:
                    f0:4a:ac:15:f0:12:71:66:83:5c:dd:6b:af:bb:8f:
                    01:5a:39:96:c3:ac:79:5e:2c:31:72:cf:80:44:ce:
                    59:f0:9a:82:0d:f4:20:bc:63:b2:55:65:8d:e2:91:
                    0e:46:65:75:71:ae:da:6f:1d:99:80:f7:09:14:35:
                    04:30:53:08:f5:73:a7:e1:58:dc:28:0c:7d:14:a7:
                    69:b4:86:54:24:81:e5:ed:2e:ec:7f:a5:48:d3:64:
                    f9:c7:69:da:db:9b:05:86:56:89:b6:59:f1:54:17:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B4:E4:43:65:3D:4A:0B:FA:22:32:F7:3A:8C:3C:F8:56:63:BC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/97b0cb1b-3f05-3820-87dc-f224a9665205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:66:9a:0b:39:f1:47:10:eb:4e:cf:24:e2:9a:53:46:a9:
         0d:ab:44:0a:14:12:5a:68:3b:10:66:76:b8:be:ed:1e:66:6f:
         11:6f:cf:1c:62:e1:fe:93:92:b3:14:a4:94:03:6b:6f:81:a5:
         d9:fb:37:ca:ed:1d:08:3b:ce:a9:b0:c2:fb:c1:07:27:18:4d:
         1b:5e:00:14:21:c7:41:d9:c7:94:d6:43:5f:09:60:86:24:bd:
         60:39:25:42:2b:1e:f6:35:bb:3a:9c:0f:01:03:5c:fd:00:3f:
         d7:6c:8d:f1:fb:dd:fa:15:98:32:34:76:6f:34:53:68:a2:ab:
         e7:7d:ee:3e:7c:5d:0b:f0:5d:01:c1:92:68:46:11:ba:98:3a:
         05:6c:42:e9:81:f1:0c:79:ab:2f:7b:9a:a9:5c:58:ad:48:a5:
         c1:8f:73:80:cf:69:be:a8:c7:4a:6a:a7:1a:20:af:4d:18:4c:
         db:89:41:5e:ef:f1:ba:fe:97:b4:36:25:69:5c:dd:a7:41:ae:
         7e:f4:c9:28:44:32:55:f2:62:bb:b6:df:5f:f3:24:ee:75:81:
         a2:40:3c:0f:41:42:6f:d1:bf:54:44:b6:05:84:2b:2d:81:b3:
         bf:a3:03:09:45:9b:d0:93:5e:12:fb:bf:67:a6:99:9d:f8:50:
         ee:6e:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:28 2026 by rpki-client