Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98d94dc4-16b0-3e56-9d75-7619b81d7542.roa
File:                     98d94dc4-16b0-3e56-9d75-7619b81d7542.roa (raw, json)
Hash identifier:          1/FVKBS0+aYhV33ywPVxG/5p6USIeLCOUv5iB/EuFFI=
Subject key identifier:   03:32:96:0B:CF:14:D7:EB:CC:6D:7E:E9:14:D2:EE:26:C5:B4:BB:F2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DBCE79C616D73F8DA3F9AFF00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98d94dc4-16b0-3e56-9d75-7619b81d7542.roa
Signing time:             Wed 06 May 2026 00:00:13 +0000
ROA not before:           Wed 06 May 2026 00:00:13 +0000
ROA not after:            Tue 04 Aug 2026 00:00:13 +0000
asID:                     54113
IP address blocks:        172.111.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:e7:9c:61:6d:73:f8:da:3f:9a:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  6 00:00:13 2026 GMT
            Not After : Aug  4 00:00:13 2026 GMT
        Subject: CN=7bbdcd3d-edcb-4773-bfc5-eb5842ea845f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:54:05:c9:34:6a:26:88:fd:20:e5:70:17:
                    bd:7a:a9:ac:37:00:4c:7e:ed:2c:8f:e5:88:6d:c3:
                    a4:32:51:e7:54:ae:d6:90:fa:50:dc:74:0c:a3:d4:
                    e4:3c:02:73:d7:fb:38:ab:e2:1a:61:ea:80:65:ce:
                    b4:03:f7:49:d2:96:4c:b0:d0:ec:e2:ef:43:0f:78:
                    9d:0c:da:ab:41:8c:47:04:b6:f2:a6:b5:47:a6:67:
                    72:7d:8d:3c:f7:ca:9c:6b:78:bd:95:6a:b2:bb:83:
                    a7:e5:5f:57:e8:a5:76:dc:5c:8a:2a:94:71:32:75:
                    56:cd:9f:99:f2:31:96:b1:c1:bb:61:c8:b1:b8:72:
                    e6:67:cf:cf:36:fa:bf:13:9e:70:fd:a8:90:39:52:
                    85:30:ef:53:0e:68:90:4e:bd:57:3a:8c:f7:47:e2:
                    47:94:51:f3:97:e4:6d:51:73:56:ee:9d:39:7c:b1:
                    a5:6a:77:84:c2:bb:eb:98:4d:7a:1a:8c:9e:11:e0:
                    45:5a:71:8a:de:a6:2a:18:d0:e6:2f:d5:04:97:1f:
                    fb:5f:99:cd:ac:df:47:2e:87:14:ef:b4:f8:0a:7d:
                    6e:7a:93:be:e5:4b:3d:dc:19:14:b7:f0:20:93:4a:
                    d7:9c:39:c8:dd:63:ed:8d:8b:39:2f:e8:f9:85:46:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:32:96:0B:CF:14:D7:EB:CC:6D:7E:E9:14:D2:EE:26:C5:B4:BB:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/98d94dc4-16b0-3e56-9d75-7619b81d7542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:f7:dd:f7:37:2d:44:31:52:d3:f4:d8:36:96:62:7e:dd:
         ca:37:f2:d2:01:33:50:fc:ff:47:20:33:58:c1:8f:ee:cb:96:
         a8:80:57:5a:b6:77:dd:26:da:ab:99:83:7d:c3:79:c0:f9:83:
         e9:ba:82:76:5c:6c:76:ef:a6:da:05:64:b8:26:54:37:58:ce:
         4a:55:ee:9b:53:ee:70:05:1e:04:9c:70:eb:f7:6c:5b:17:2d:
         37:cf:d5:95:fe:78:f9:52:f5:62:6b:34:ed:fa:cd:30:58:50:
         0c:4b:4b:1e:f7:b5:50:88:74:60:9f:d6:9b:da:b3:45:88:10:
         46:9d:85:17:92:32:22:24:e6:87:e1:ed:6d:64:4c:e0:da:ed:
         36:d4:61:fe:f6:d3:c0:cd:a9:e5:76:2d:50:fe:fe:44:d5:98:
         00:e4:b3:df:53:1b:36:ba:29:af:de:27:cb:c2:99:4b:4a:ce:
         64:d9:16:68:43:7a:62:a3:81:4e:3c:e0:2b:d3:1b:57:02:86:
         8e:16:6d:94:0d:96:e4:d8:c0:50:66:f7:0a:cb:ec:b6:8d:76:
         fc:49:97:47:9a:71:c9:cb:a6:a1:76:0b:9e:86:88:a1:bd:2d:
         e9:cc:41:1d:bc:fb:38:fe:ad:0a:3d:59:d3:48:60:ab:90:40:
         7e:01:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:25 2026 by rpki-client