Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/c7616cc0-1341-3188-8570-1184e101e37c.roa
File:                     c7616cc0-1341-3188-8570-1184e101e37c.roa (raw, json)
Hash identifier:          Kd9sFWvD1P/cgljha3rqH6sWqvNocmG9+SucUz7WAVs=
Subject key identifier:   60:DB:94:18:F4:B1:9D:4F:AF:7E:87:9B:8C:6E:8C:62:EE:D9:2E:58
Certificate issuer:       /CN=0cf9a0ab-2fba-4c49-9664-539b7448b108
Certificate serial:       010D0C9F4328584D932567F5442D320E02F42A00
Authority key identifier: BB:30:BC:AC:15:4B:B2:7F:AB:7D:40:C3:47:88:2C:C3:ED:79:DF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/c7616cc0-1341-3188-8570-1184e101e37c.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     14368
IP address blocks:        96.46.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:67:f5:44:2d:32:0e:02:f4:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf9a0ab-2fba-4c49-9664-539b7448b108
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=2da3f856-1f69-4f6f-bf78-4c03dd2d27b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7f:24:65:61:d5:1b:be:5a:16:a1:f3:a7:a4:
                    ca:c7:a5:44:5b:f4:9c:0d:fd:b0:a6:d3:6b:97:29:
                    7c:f4:ba:6d:03:ec:9d:3c:0d:d9:75:7d:0d:46:41:
                    91:7e:2c:43:b9:3a:46:a3:46:92:ce:dc:9e:83:9e:
                    f7:12:73:f5:43:e9:bf:f5:f5:b6:f6:df:c4:a5:a1:
                    47:77:fb:17:a1:42:59:de:11:6f:f5:b7:65:10:95:
                    b1:5d:54:c2:79:b9:69:86:cd:9d:8f:d1:1b:20:6b:
                    c6:95:44:be:6a:ab:37:b5:60:5c:59:1b:7b:25:d7:
                    74:31:ea:a3:e5:41:58:e9:7a:b5:7e:4b:c0:94:e4:
                    e4:1a:da:71:4e:26:a6:a1:ec:9a:97:e8:64:56:b8:
                    d6:62:e8:ff:bd:dd:a9:3e:9a:e2:b5:69:a1:83:17:
                    3f:3e:39:01:ea:1f:8a:e8:cb:01:7d:0a:54:a6:4a:
                    3e:56:3a:40:3e:76:97:1c:30:05:5e:31:4d:d1:2f:
                    45:bc:e8:e4:fe:5e:1b:14:1f:e2:3f:c4:53:f9:a8:
                    c5:3a:5e:85:a5:b0:22:17:cb:bd:61:5f:9e:36:fc:
                    ee:53:5c:8c:f0:26:d8:ce:f8:1c:ab:1e:de:a8:3c:
                    9e:b1:ab:3d:c0:96:a4:ce:12:39:4f:6d:83:fc:8b:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:94:18:F4:B1:9D:4F:AF:7E:87:9B:8C:6E:8C:62:EE:D9:2E:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/c7616cc0-1341-3188-8570-1184e101e37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.crl

            X509v3 Authority Key Identifier:
                keyid:BB:30:BC:AC:15:4B:B2:7F:AB:7D:40:C3:47:88:2C:C3:ED:79:DF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:60:e1:19:64:00:ce:26:3e:66:0e:e6:44:10:a0:fa:af:a8:
         8f:14:20:52:7e:40:cb:27:f4:24:34:d5:4d:2e:37:a0:2c:c4:
         cf:73:72:a8:aa:a9:2d:fc:ae:05:21:2d:9d:38:76:fc:71:07:
         37:71:42:7c:7c:42:95:9d:b7:cb:53:46:be:eb:d1:dc:a7:95:
         fe:b6:58:5b:6f:81:de:3d:98:0c:5b:57:ff:3a:a0:bd:e1:95:
         59:35:0f:cd:c4:d9:e3:0c:01:49:22:83:e7:28:01:d1:f7:fd:
         33:4e:1d:96:8b:8f:39:48:a6:a0:d9:46:7b:84:3b:d2:b2:f5:
         0e:3c:59:5a:90:df:d1:7a:a0:c9:d4:9d:e5:94:99:21:c5:eb:
         fa:f5:a1:89:82:b3:f6:d7:f1:c9:a4:a6:50:ac:bb:04:2a:2e:
         34:1b:9a:4c:b8:72:76:03:b0:e0:64:e2:b3:36:7e:5e:82:c4:
         a3:cd:87:c9:99:ed:b6:df:be:2d:46:ad:67:7d:2b:a8:b6:8f:
         52:00:f2:ac:85:fa:27:b9:09:c6:5d:03:67:9f:e2:e0:7e:5a:
         8b:a5:65:dc:a9:cc:c9:ca:d9:e2:5a:e4:37:cb:f1:a8:36:5a:
         2a:63:62:d3:47:af:5b:f3:06:6d:d9:cf:5d:97:f4:5a:e2:22:
         4b:0d:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:12 2026 by rpki-client