Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa
File:                     fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa (raw, json)
Hash identifier:          hors9Gaj8Y/PKn8qFU9M4XWD9dvOw8EmlS6t/eLpQg4=
Subject key identifier:   84:F8:CD:36:E9:50:C9:AB:04:5D:2F:9F:ED:1C:02:11:E1:03:29:25
Certificate issuer:       /CN=96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3
Certificate serial:       010D0C9F4328584E97B50CDC7F0E501EDCA94E20
Authority key identifier: 61:8C:C7:EF:EB:B0:91:A5:48:1A:0E:1F:5B:02:D1:C1:3E:56:5F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        204.154.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0c:dc:7f:0e:50:1e:dc:a9:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=ae0d3a58-6ea3-4356-a2c1-b87b3ae96298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:80:7e:49:cb:31:40:aa:47:de:27:10:3e:
                    60:52:d3:37:22:bf:a6:d6:59:11:ae:fa:fa:42:09:
                    61:48:51:57:f3:b9:5e:e3:86:68:b0:69:c0:52:f0:
                    82:45:64:e0:69:3f:3c:3a:1b:ea:d0:5d:5d:69:ca:
                    21:c4:d5:7c:b8:78:f2:a3:e9:e9:67:af:cd:5e:b5:
                    e6:31:42:d3:61:01:d3:85:c8:37:99:2a:5b:db:f3:
                    fb:9d:62:da:e7:71:e8:c4:30:c5:a5:87:17:7c:48:
                    21:52:fa:b9:1e:3d:dd:cc:8b:0f:c6:4d:c1:37:11:
                    4f:f6:10:51:54:13:af:7a:6a:96:e0:f4:72:c8:29:
                    4e:8e:5a:81:7a:90:ad:03:61:db:94:fe:d1:75:46:
                    55:22:34:92:18:0f:89:88:d5:bd:6a:ae:6d:8d:3b:
                    26:5d:27:75:40:62:88:35:03:a4:68:5e:f2:ea:ca:
                    41:55:86:57:09:78:48:31:03:5e:f6:5e:77:ee:e7:
                    08:ce:0a:c3:49:c1:f4:77:41:49:28:aa:84:56:50:
                    8b:6f:b7:c5:53:5a:fb:2e:84:bf:3d:4f:a1:45:4c:
                    80:58:f1:ec:82:e8:d8:e2:56:58:92:c1:b6:4e:7e:
                    06:1f:46:d8:57:c0:f7:3e:74:b3:4a:86:1a:f2:ea:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F8:CD:36:E9:50:C9:AB:04:5D:2F:9F:ED:1C:02:11:E1:03:29:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.crl

            X509v3 Authority Key Identifier:
                keyid:61:8C:C7:EF:EB:B0:91:A5:48:1A:0E:1F:5B:02:D1:C1:3E:56:5F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:e9:3e:a0:a9:d9:93:51:d6:75:a2:3d:76:e5:8a:f0:05:
         1b:e4:3c:bc:9a:0f:77:5c:2f:be:8a:ba:3c:90:eb:d9:1f:bf:
         41:c3:1a:25:24:3d:1a:67:f0:02:7e:08:dc:b4:69:4e:60:34:
         dd:66:64:05:32:b7:fd:cd:3b:8e:92:18:2d:91:f5:dc:29:e8:
         af:0a:41:26:8b:c9:73:0d:8c:4f:7b:b1:c8:b1:26:77:a8:04:
         90:40:1e:2f:c2:78:a0:13:0c:31:e3:0b:34:3f:00:5d:8b:0a:
         d0:0f:6a:09:b5:6b:0d:25:66:47:7f:1b:e1:da:3e:91:85:9d:
         56:57:aa:2b:63:98:de:61:a3:1b:de:61:95:b2:cf:24:fb:a1:
         57:bf:f1:ff:e6:61:87:86:8d:fb:17:78:e9:f5:8b:ef:2b:82:
         fb:01:ad:4b:15:32:5c:a4:b0:b9:75:1f:f0:bd:89:d8:c3:19:
         ca:12:1d:bd:0d:f9:07:4f:8e:52:c9:b1:08:db:72:67:d0:f7:
         ba:d2:bb:70:06:1a:bd:83:a6:c8:f7:03:88:33:05:5f:9b:ed:
         e3:c1:cc:82:96:51:a4:3d:8f:e9:b9:1b:0a:79:76:31:7c:29:
         94:ba:4c:26:85:34:ab:ee:af:12:4c:ad:c7:4d:b0:fa:c3:1e:
         53:9e:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:05 2026 by rpki-client