Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802/417a0413-e3fe-36c8-a119-b58187023586.roa
File:                     417a0413-e3fe-36c8-a119-b58187023586.roa (raw, json)
Hash identifier:          dLevvCW0eL7vp/FjH1vd9VCpeKlXDzt0EhUfmvSW9u0=
Subject key identifier:   30:36:41:5A:85:1B:07:91:AC:E7:1C:5F:37:96:40:78:B0:91:05:58
Certificate issuer:       /CN=56c403a5-ebf5-46b0-a829-179c52a1d802
Certificate serial:       010D0C9F4328584DA3E56A7286E441C9C9E96800
Authority key identifier: 86:07:65:24:27:C6:BB:CF:90:6B:A4:6F:15:AB:F7:92:C8:F1:BF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802/417a0413-e3fe-36c8-a119-b58187023586.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     54440
IP address blocks:        192.58.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802/56c403a5-ebf5-46b0-a829-179c52a1d802.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802/56c403a5-ebf5-46b0-a829-179c52a1d802.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:6a:72:86:e4:41:c9:c9:e9:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c403a5-ebf5-46b0-a829-179c52a1d802
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=d2ffbbaf-1fc5-4743-b915-4a7548053028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:95:5b:53:dc:05:b7:8a:cf:61:42:ac:28:
                    40:7c:40:fd:98:0f:b2:be:d9:a1:af:8e:45:3f:a6:
                    c8:82:55:5a:5a:29:7d:37:cb:01:ce:dc:24:b4:38:
                    5d:61:48:9a:63:b0:a9:ae:eb:73:53:7e:e7:fb:03:
                    90:5f:cf:1c:3e:04:8a:c8:92:97:dd:16:ff:a7:1d:
                    69:32:70:5a:56:a9:99:51:91:af:a1:3d:ab:cc:fa:
                    be:ee:ee:e2:ec:04:9c:6b:06:6c:c8:3f:d8:a8:2c:
                    61:1a:61:1f:f6:b4:51:b7:6d:47:f0:1a:83:12:d8:
                    5b:77:1e:93:a5:07:f0:0a:a3:fa:c6:d4:78:71:c6:
                    ae:e1:22:45:2a:76:b0:41:47:14:cb:cb:7f:6a:6a:
                    c9:08:3f:4b:07:32:1e:e2:3c:67:ab:1e:17:bd:bf:
                    3e:ce:2a:95:8c:5b:81:a1:5e:16:df:69:39:1d:f7:
                    94:3b:b8:ac:65:a4:5b:d9:d4:f4:13:74:7f:1d:cd:
                    69:57:e2:87:7c:a1:59:0b:f4:26:c2:e6:5b:0e:ca:
                    f8:1c:d7:81:a9:05:fc:9a:5b:27:ea:00:32:f5:64:
                    1c:5d:e1:62:c3:fe:6c:14:46:49:68:a4:8f:9f:25:
                    07:e7:06:46:37:4f:52:41:ea:cc:49:5e:0b:ab:e1:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:36:41:5A:85:1B:07:91:AC:E7:1C:5F:37:96:40:78:B0:91:05:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802/417a0413-e3fe-36c8-a119-b58187023586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802/56c403a5-ebf5-46b0-a829-179c52a1d802.crl

            X509v3 Authority Key Identifier:
                keyid:86:07:65:24:27:C6:BB:CF:90:6B:A4:6F:15:AB:F7:92:C8:F1:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/56c403a5-ebf5-46b0-a829-179c52a1d802.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:79:f6:f9:51:61:2f:6b:77:2c:8a:50:1e:69:cd:6a:1d:1d:
         6b:b0:9b:38:78:9e:a2:39:8c:a6:25:b9:f9:a8:e4:d2:e2:82:
         de:b1:97:b2:71:62:b4:b9:dd:c4:4a:3c:ec:ac:59:51:24:6c:
         bd:88:55:02:46:64:5f:db:0e:78:9d:4c:25:6f:2d:8b:aa:26:
         82:1b:37:05:c4:c3:e0:10:db:1d:0c:67:ca:36:9f:d1:d8:cc:
         00:c1:75:64:7f:23:be:44:41:c5:46:fc:5b:d3:85:bd:b7:ee:
         a8:43:e2:29:9e:f6:43:06:b2:46:fe:be:6b:b9:65:f9:de:8f:
         63:0c:f7:86:ee:6d:4d:87:f9:b0:8d:5f:34:15:8e:1e:6f:6a:
         91:cb:7f:be:50:d2:fb:00:84:64:3a:64:5b:18:86:7d:f0:8e:
         ef:62:72:0b:92:29:5a:3c:0f:c3:34:97:ee:a3:e3:2f:5f:36:
         80:6a:48:87:e4:55:2e:e3:a6:df:b0:9a:19:14:58:a2:a6:99:
         ae:ae:77:fb:b7:49:c0:71:d7:bf:49:60:9e:3b:42:d7:99:f2:
         3f:f5:9f:ca:df:67:cf:0a:c7:7d:a9:6d:03:89:ea:b2:b0:3d:
         c6:c8:7b:c8:be:48:03:82:c2:41:c9:05:e6:29:6d:45:6c:d3:
         7d:d0:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:53 2026 by rpki-client