Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa
File:                     91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa (raw, json)
Hash identifier:          yiXLLT+SgatAF0AR9rng7QKJugy1Nnt0zFP3gdutHpU=
Subject key identifier:   25:64:65:85:65:04:F4:80:EF:75:A1:11:3C:9D:F9:FF:48:B3:04:8D
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584F46A7E08AB98983542241BD00
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     22926
IP address blocks:        96.47.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e0:8a:b9:89:83:54:22:41:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=cfcb07fc-a985-4cc1-930e-224dcdcba0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:a3:75:2b:e5:17:22:0f:73:50:3b:50:99:
                    07:0f:b1:35:72:44:ca:32:34:04:72:d7:96:3d:12:
                    61:77:c0:34:3e:3f:30:14:7d:83:d9:b6:8b:2e:85:
                    43:8c:8f:88:ff:fc:06:1b:54:d8:a6:c6:67:d6:23:
                    b9:2f:05:e0:e5:42:92:8d:de:b9:97:73:b1:c3:b3:
                    42:b1:23:c9:4b:7a:65:32:d1:46:61:25:1e:44:4c:
                    15:01:7f:3a:b7:3a:f7:96:83:c6:7a:01:06:49:94:
                    52:4a:83:0c:07:d3:b9:4a:14:78:1f:b0:13:96:9e:
                    3c:f5:8b:09:ba:68:68:e9:d1:28:62:38:10:0e:90:
                    24:2f:86:09:e4:29:6e:88:a7:e7:cf:b0:2a:e8:91:
                    19:66:83:ae:10:aa:da:9e:bf:ad:f7:f1:86:e5:4a:
                    71:a5:02:c1:94:cf:01:fb:7a:01:48:da:ed:cf:00:
                    55:56:9a:3e:0b:f2:40:b6:4e:0c:67:55:ff:50:d3:
                    1f:d4:32:95:ed:a8:18:16:59:f7:72:4b:64:49:4b:
                    ec:71:31:f4:d6:cf:82:10:10:9c:52:d9:aa:84:74:
                    0a:68:b2:9f:0b:7d:d4:c0:54:8a:8d:b7:d1:89:c3:
                    fa:fb:e4:0a:fa:97:19:8f:ed:37:8a:90:3f:11:7f:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:64:65:85:65:04:F4:80:EF:75:A1:11:3C:9D:F9:FF:48:B3:04:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:85:75:7c:91:aa:34:1b:01:90:06:01:8f:5f:ff:6f:aa:97:
         f8:7c:a9:df:4f:8f:a1:89:f1:86:b9:69:53:15:01:77:8b:bb:
         32:7a:43:06:e1:9c:e2:3d:c9:29:bf:73:b5:47:c7:28:c6:57:
         fb:40:3e:32:6e:58:02:b5:6a:ce:ce:ab:94:46:c4:74:01:4b:
         7a:21:b7:96:f5:6b:87:6b:49:2a:c1:8a:da:ff:61:8c:37:04:
         cd:ce:5e:be:14:92:a6:50:8b:0a:cf:37:cf:e3:8d:4a:79:5b:
         46:61:ec:5c:60:e9:50:96:4b:e3:f2:bd:a9:1e:f7:3f:81:dd:
         5a:b5:99:88:2b:98:f3:c2:dc:1f:b9:f6:12:d3:9f:27:fb:65:
         d4:02:cd:74:86:6b:76:3b:23:09:b6:13:bd:cd:22:1c:ad:95:
         77:53:26:0f:99:4a:69:fa:0f:15:dd:05:35:4e:f9:3e:37:34:
         aa:ca:ad:e4:88:af:ea:f5:eb:91:aa:4a:cd:61:54:8b:85:60:
         ef:0d:8e:ef:42:0e:ef:d7:9c:d7:15:6d:52:c1:19:ce:ee:0e:
         f6:0b:f4:dd:b2:d1:8f:36:d9:4a:a7:ac:5d:1f:ef:73:8d:fc:
         28:9a:27:37:79:0b:09:64:62:e2:4c:57:e2:69:93:00:5d:37:
         0c:b7:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:14:24 2026 by rpki-client