Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa
File:                     41a70eb2-5061-30f1-809b-803f649d06f9.roa (raw, json)
Hash identifier:          NJJiPVhun595hyV72fRudBKh6MhLfLGeu+siHDL/nW0=
Subject key identifier:   D7:90:F8:3B:41:EB:15:98:1B:77:AA:BF:61:CC:ED:A6:D4:10:75:F7
Certificate issuer:       /CN=57b5faad-63db-4cfd-a55b-4143c3e94291
Certificate serial:       010D0C9F4328584F49740989F825C99BD0ECC800
Authority key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54225
IP address blocks:        96.31.192.0/20 maxlen: 32
                          209.239.96.0/20 maxlen: 32
                          216.49.96.0/19 maxlen: 32
                          2607:fb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:09:89:f8:25:c9:9b:d0:ec:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b5faad-63db-4cfd-a55b-4143c3e94291
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dfa6fe7a-12fc-42a2-b83f-eac7d809a35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6c:08:fe:68:72:4d:3d:96:1b:65:97:f6:dc:
                    52:16:6c:e6:78:d4:75:b1:61:ae:18:08:99:b5:62:
                    f9:0f:d6:e8:ab:80:32:e9:ca:b3:2d:35:42:63:b1:
                    ce:45:ea:04:1e:4a:32:ab:7a:89:66:98:0f:11:08:
                    1c:c7:60:7b:05:ea:87:fa:4d:8e:0b:96:73:bf:ed:
                    1c:85:59:ed:b0:ca:4d:cd:ac:d6:73:ab:0b:77:15:
                    30:c1:45:b1:1a:d2:d1:d1:ae:f9:b6:56:50:e4:1c:
                    a1:08:2f:76:f4:67:28:5a:52:48:ac:0d:bc:22:af:
                    91:87:08:5a:70:16:18:17:e9:24:60:bb:eb:18:d6:
                    11:28:c2:65:df:8b:b5:fc:dc:9c:8f:1f:69:61:3b:
                    00:48:2b:c2:c9:fd:5a:59:f6:d5:75:9c:69:57:fa:
                    39:70:c4:98:2e:69:5c:23:49:e2:92:9f:fd:66:3c:
                    76:69:73:f0:88:ee:34:8a:b0:28:6a:b1:12:05:c0:
                    d1:e6:84:0f:3a:49:0f:59:48:90:e0:5c:d0:c9:5a:
                    d1:c0:9d:52:00:4c:af:a1:a7:2c:81:55:f2:6d:1d:
                    26:34:17:b5:91:4d:79:62:12:85:77:32:38:07:a8:
                    f4:98:75:a9:8c:3f:31:ab:aa:49:81:65:59:bb:25:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:F8:3B:41:EB:15:98:1B:77:AA:BF:61:CC:ED:A6:D4:10:75:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl

            X509v3 Authority Key Identifier:
                keyid:4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.31.192.0/20
                  209.239.96.0/20
                  216.49.96.0/19
                IPv6:
                  2607:fb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:17:b6:b0:b4:aa:9d:8c:d0:48:ca:31:a7:3b:9f:6d:23:99:
         96:0f:bc:c1:d7:db:fd:68:77:c9:6a:5a:c7:65:33:af:a0:ac:
         9b:d9:6b:83:e3:9d:d2:19:d9:1d:12:d6:e6:2d:86:49:8c:d4:
         6c:78:2e:59:2f:02:49:a2:25:a7:85:12:53:7a:29:f7:3f:c4:
         e9:8f:4d:45:da:12:2b:9e:12:30:0b:73:7f:7c:e5:5e:8b:d2:
         e9:c2:2a:16:07:1d:75:23:50:1c:72:f6:dd:90:fb:ea:ab:dd:
         4e:1d:b2:f6:b8:52:b0:19:da:9e:ca:84:14:52:88:a2:d5:f8:
         db:0b:2a:ff:7f:88:9c:57:98:1b:ff:ef:b0:44:ff:db:21:61:
         d0:d8:40:c1:d9:71:83:a2:49:5d:58:66:8b:a8:77:11:11:76:
         9c:51:14:77:be:be:05:f0:78:6e:c1:c3:7b:c4:61:0b:6b:f7:
         b6:22:61:25:75:ac:21:7f:58:a5:be:32:02:48:66:06:47:57:
         44:c9:62:51:eb:e0:89:5b:ef:4c:86:f3:da:94:4e:32:07:c7:
         cd:2c:4c:4c:d8:6d:d8:9e:e2:c4:ff:a8:a8:73:12:75:77:c3:
         df:78:af:25:a0:20:a6:9c:3b:ed:0a:89:c8:1b:ed:69:e9:f2:
         4d:85:73:eb
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE9JdAmJ+CXJm9DsyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTdiNWZhYWQtNjNkYi00Y2ZkLWE1NWItNDE0M2MzZTk0
MjkxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGZhNmZlN2EtMTJmYy00MmEyLWI4M2YtZWFjN2Q4MDlhMzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52wI/mhyTT2WG2WX9txSFmzmeNR1sWGuGAiZ
tWL5D9boq4Ay6cqzLTVCY7HOReoEHkoyq3qJZpgPEQgcx2B7BeqH+k2OC5Zzv+0c
hVntsMpNzazWc6sLdxUwwUWxGtLR0a75tlZQ5ByhCC929GcoWlJIrA28Iq+Rhwha
cBYYF+kkYLvrGNYRKMJl34u1/Nycjx9pYTsASCvCyf1aWfbVdZxpV/o5cMSYLmlc
I0nikp/9Zjx2aXPwiO40irAoarESBcDR5oQPOkkPWUiQ4FzQyVrRwJ1SAEyvoacs
gVXybR0mNBe1kU15YhKFdzI4B6j0mHWpjD8xq6pJgWVZuyXRqQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFNeQ+DtB6xWYG3eqv2HM7abUEHX3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1
ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQzYzNlOTQyOTEvNDFhNzBlYjItNTA2MS0z
MGYxLTgwOWItODAzZjY0OWQwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTdiNWZhYWQtNjNkYi00Y2ZkLWE1
NWItNDE0M2MzZTk0MjkxLzU3YjVmYWFkLTYzZGItNGNmZC1hNTViLTQxNDNjM2U5
NDI5MS5jcmwwHwYDVR0jBBgwFoAUS3Ybjt1V265CNvhniSBnepTz7ZowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQz
YzNlOTQyOTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEYB/AAwQE
0e9gAwQF2DFgMA0EAgACMAcDBQAmB/tAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGkXtrC0qp2M0EjKMac7
n20jmZYPvMHX2/1od8lqWsdlM6+grJvZa4PjndIZ2R0S1uYthkmM1Gx4LlkvAkmi
JaeFElN6Kfc/xOmPTUXaEiueEjALc3985V6L0unCKhYHHXUjUBxy9t2Q++qr3U4d
sva4UrAZ2p7KhBRSiKLV+NsLKv9/iJxXmBv/77BE/9shYdDYQMHZcYOiSV1YZouo
dxERdpxRFHe+vgXweG7Bw3vEYQtr97YiYSV1rCF/WKW+MgJIZgZHV0TJYlHr4Ilb
70yG89qUTjIHx80sTEzYbdie4sT/qKhzEnV3w994ryWgIKacO+0Kicgb7Wnp8k2F
c+s=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:49:00 2026 by rpki-client