Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa
File:                     7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa (raw, json)
Hash identifier:          qgzONGTlpivOzpL22etShNEsbGjWHI7H3tqPm54ChwE=
Subject key identifier:   A6:12:74:61:17:FF:85:DD:58:E4:C6:8E:E3:28:91:D5:42:44:F2:F1
Certificate issuer:       /CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a
Certificate serial:       010D0C9F4328584DBBA06B03948283AB8A004200
Authority key identifier: 76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        192.152.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6b:03:94:82:83:ab:8a:00:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95fcfe8e-969b-49df-a5b9-01e3adfe2b7a
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=9a257561-5f08-4ae7-89c8-930d65c0cfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:3a:ae:9b:8c:8e:48:27:30:b6:c6:fc:81:
                    ce:24:ca:77:d9:07:b9:6e:fe:89:ab:1e:85:34:2e:
                    3e:4c:06:30:6b:23:23:d5:28:eb:e2:68:0b:0b:2d:
                    a0:4d:45:d2:37:45:b4:23:41:11:0b:08:1f:80:03:
                    39:1c:0d:e9:bb:69:3d:a7:43:58:b0:ce:b4:ad:9a:
                    fe:f7:0f:34:b2:64:c2:da:45:1e:dd:d8:15:13:26:
                    d7:ef:bd:62:6d:8c:da:18:60:62:1e:0d:f1:af:c9:
                    9b:5f:cf:61:04:a0:a1:ed:3d:45:17:b8:38:2a:88:
                    f0:2d:04:b8:45:da:3a:8b:57:d4:77:11:19:ce:50:
                    1c:9e:e3:b8:0f:b6:ce:2b:fb:b9:62:d8:62:fd:b7:
                    94:d0:1e:7b:02:f7:b9:3a:f4:00:46:3f:a0:38:e0:
                    b6:15:8e:05:03:be:6c:db:71:2d:40:89:37:1c:f0:
                    35:aa:9e:c0:91:f8:2d:87:94:14:7f:ee:91:dc:6c:
                    a9:f7:1e:fa:4b:a0:38:5c:15:19:a4:5a:71:09:2e:
                    7e:52:10:19:fd:ba:16:31:61:2e:8c:a9:ad:fe:22:
                    89:5b:85:7b:7b:6b:23:3b:c2:56:8d:d6:e9:f5:93:
                    79:f9:3b:90:6d:ee:12:7b:54:f0:4a:6f:2d:26:81:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:74:61:17:FF:85:DD:58:E4:C6:8E:E3:28:91:D5:42:44:F2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/7d717741-d2d8-38ed-9eef-9dd5587efb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.crl

            X509v3 Authority Key Identifier:
                keyid:76:52:C2:6D:AF:7F:E6:5D:CB:3A:1B:06:70:5A:BD:9D:00:1C:42:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/95fcfe8e-969b-49df-a5b9-01e3adfe2b7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:c8:d1:b5:1b:92:14:5a:64:cb:08:47:06:ce:70:e0:ab:
         2a:1b:58:05:a8:ae:1d:ac:22:bf:9c:5a:df:30:5b:98:7e:83:
         41:06:a0:46:30:e3:2e:fe:3f:2f:02:3d:8e:9a:ff:a6:c0:64:
         61:cc:6c:c8:49:ab:bd:a5:6b:e7:cc:e1:b4:93:f1:b5:52:85:
         c9:88:53:5c:67:d7:96:da:4e:06:3b:ce:f2:46:c2:00:bd:5f:
         ec:fc:2c:8d:6e:53:65:4a:d6:7f:0a:0e:05:1a:13:5c:e8:01:
         5d:75:e8:f2:e8:6c:b8:fe:7f:66:48:2a:a2:0e:bb:ae:5a:6b:
         8e:ac:a9:b8:28:64:60:34:5a:c9:f4:09:02:02:b9:95:06:41:
         58:98:4f:53:aa:97:60:08:1c:f9:14:f1:d2:31:b4:e7:ed:a5:
         aa:b3:ab:dd:05:13:70:90:3a:d0:a6:0e:59:5e:83:2d:9f:2b:
         98:b2:2f:a3:a7:12:4c:22:6c:68:9e:60:d0:f4:73:25:7e:c9:
         5c:90:a2:00:cc:01:12:76:27:e8:79:e9:2c:5f:1f:49:ae:70:
         ec:a7:63:f8:24:0d:7f:d1:ce:74:16:0b:f5:f4:90:ee:b1:c3:
         d2:92:ae:7d:01:e9:e1:0f:6f:60:19:e1:5a:05:34:23:79:5c:
         15:cb:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:04 2026 by rpki-client