Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/3ad74b52-291f-39c3-a74a-9de493e74b16.roa
File:                     3ad74b52-291f-39c3-a74a-9de493e74b16.roa (raw, json)
Hash identifier:          ydejAwU0LvzDhbVoBR18BUvavhRIhV2mUieoD3NRSvk=
Subject key identifier:   B7:BD:BE:D1:47:43:99:A7:38:E6:8F:86:AA:10:E7:09:1F:92:CC:D4
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584D9CEAB378D6A06630A9B419C0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/3ad74b52-291f-39c3-a74a-9de493e74b16.roa
Signing time:             Fri 24 Apr 2026 13:00:31 +0000
ROA not before:           Fri 24 Apr 2026 13:00:31 +0000
ROA not after:            Thu 23 Jul 2026 13:00:31 +0000
asID:                     20454
IP address blocks:        96.47.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9c:ea:b3:78:d6:a0:66:30:a9:b4:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Apr 24 13:00:31 2026 GMT
            Not After : Jul 23 13:00:31 2026 GMT
        Subject: CN=4393e0a3-12dc-4c69-9c12-8ed48853c0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:e4:c4:ae:0b:c5:55:73:fe:65:7f:08:8f:
                    cf:4c:b3:59:24:37:e7:fb:f7:69:45:64:14:3a:df:
                    28:c1:d3:c2:bd:70:6f:2f:88:73:3c:20:46:0d:58:
                    21:cd:dd:34:aa:f4:a7:db:44:7c:92:ad:89:cf:4b:
                    5d:33:64:69:22:80:47:1a:9f:b4:19:97:40:d5:b3:
                    ad:b4:37:4c:75:15:74:9d:53:a5:2d:56:f5:4f:fe:
                    10:c3:e9:05:86:da:0f:66:fe:f4:7f:ae:64:35:7a:
                    d6:a1:0c:cc:3c:88:1f:95:3f:10:cd:50:b3:96:76:
                    2d:40:d7:d7:c3:08:bf:a9:e2:ff:8f:57:2a:a3:50:
                    50:d2:f1:21:af:b0:f0:c7:86:b7:75:fb:63:44:57:
                    9f:31:1e:ad:2b:db:cc:47:e3:a4:5a:31:58:12:31:
                    f6:16:24:7e:84:63:cd:4e:a0:75:5b:e2:99:20:5d:
                    37:e8:cb:34:0b:b7:2b:08:2b:a5:b4:1a:4f:32:29:
                    e4:35:05:05:81:b8:8d:b3:11:20:19:59:2e:94:93:
                    a8:f4:f2:98:e9:06:da:cc:7f:d4:2a:a8:61:a9:8a:
                    81:5c:ef:c9:4e:35:16:4b:1c:09:cc:5d:17:c1:5b:
                    d4:1a:93:56:7c:1e:0b:b5:41:66:df:2e:dc:aa:27:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BD:BE:D1:47:43:99:A7:38:E6:8F:86:AA:10:E7:09:1F:92:CC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/3ad74b52-291f-39c3-a74a-9de493e74b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:fb:69:3c:aa:82:48:d2:37:21:3b:5e:1e:a2:4a:d3:35:
         58:ac:6c:41:46:51:08:d8:26:96:42:93:e0:1f:8e:df:f8:49:
         df:bb:01:36:09:dc:3a:bc:f5:cc:47:97:d5:bb:5e:5b:8e:e8:
         80:80:78:e1:80:a2:b3:f8:20:fc:77:55:48:42:cd:f9:cb:1a:
         57:c6:ca:fd:f0:17:fb:72:fb:4c:f8:29:c5:3f:79:6c:d0:2a:
         00:e2:ef:3a:e0:16:ea:99:cd:a0:88:2a:e6:d2:1b:21:0f:a8:
         84:cc:0f:aa:69:3a:b0:d3:3e:37:2c:a8:08:9d:28:e1:d6:ad:
         d7:13:94:40:40:16:b9:93:46:7b:12:3f:84:3c:2c:98:78:2e:
         e7:66:93:f2:58:14:f6:6d:fb:7c:0d:ba:f3:de:83:05:7e:41:
         24:26:f8:8e:35:1f:9d:4a:49:6d:fc:41:a0:5f:14:47:59:9d:
         e4:79:ca:13:17:24:98:b7:8b:a7:db:b0:92:ce:bc:8e:c7:73:
         b4:f3:ef:e9:95:97:e0:91:59:82:90:30:fe:00:04:53:46:a5:
         b3:6c:a9:7c:e5:68:f5:81:5c:7d:44:4e:b3:b4:c6:cd:30:56:
         7a:a4:7e:cb:44:56:4f:0d:10:f6:e9:89:58:73:27:d3:5b:f2:
         09:12:5a:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2c6rN41qBmMKm0GcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz
ZmU0MB4XDTI2MDQyNDEzMDAzMVoXDTI2MDcyMzEzMDAzMVowLzEtMCsGA1UEAxMk
NDM5M2UwYTMtMTJkYy00YzY5LTljMTItOGVkNDg4NTNjMGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM7kxK4LxVVz/mV/CI/PTLNZJDfn+/dpRWQU
Ot8owdPCvXBvL4hzPCBGDVghzd00qvSn20R8kq2Jz0tdM2RpIoBHGp+0GZdA1bOt
tDdMdRV0nVOlLVb1T/4Qw+kFhtoPZv70f65kNXrWoQzMPIgflT8QzVCzlnYtQNfX
wwi/qeL/j1cqo1BQ0vEhr7Dwx4a3dftjRFefMR6tK9vMR+OkWjFYEjH2FiR+hGPN
TqB1W+KZIF036Ms0C7crCCultBpPMinkNQUFgbiNsxEgGVkulJOo9PKY6QbazH/U
KqhhqYqBXO/JTjUWSxwJzF0XwVvUGpNWfB4LtUFm3y7cqidYxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLe9vtFHQ5mnOOaPhqoQ5wkfkszUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3
OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvM2FkNzRiNTItMjkxZi0z
OWMzLWE3NGEtOWRlNDkzZTc0YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw
MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0
M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm
NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACs/+2k8qoJI0jchO14eokrTNVisbEFGUQjYJpZCk+Afjt/4Sd+7ATYJ
3Dq89cxHl9W7XluO6ICAeOGAorP4IPx3VUhCzfnLGlfGyv3wF/ty+0z4KcU/eWzQ
KgDi7zrgFuqZzaCIKubSGyEPqITMD6ppOrDTPjcsqAidKOHWrdcTlEBAFrmTRnsS
P4Q8LJh4Ludmk/JYFPZt+3wNuvPegwV+QSQm+I41H51KSW38QaBfFEdZneR5yhMX
JJi3i6fbsJLOvI7Hc7Tz7+mVl+CRWYKQMP4ABFNGpbNsqXzlaPWBXH1ETrO0xs0w
VnqkfstEVk8NEPbpiVhzJ9Nb8gkSWnQ=
-----END CERTIFICATE-----
Generated at Wed May 13 13:19:30 2026 by rpki-client