Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06856130-4f43-3497-94ec-d2a3797014cc.roa
File:                     06856130-4f43-3497-94ec-d2a3797014cc.roa (raw, json)
Hash identifier:          MlzrBk1J8C/e+PUFCgkBm2dwUHQ5D+MttXSZUWYCSW4=
Subject key identifier:   47:FB:E0:CF:45:CF:3E:90:A6:F3:9A:43:FE:88:0A:AB:EE:47:2C:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB92EAE08ECE31A6FBED0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06856130-4f43-3497-94ec-d2a3797014cc.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33650
IP address blocks:        96.108.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:2e:ae:08:ec:e3:1a:6f:be:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=3b5bc5b1-b1c4-4b27-ac1d-b15f3c1ab419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:29:81:21:31:6c:9b:17:3a:f8:82:f1:a4:64:
                    51:fe:ae:20:ca:00:6f:aa:70:63:05:61:42:1a:49:
                    99:78:75:51:43:a0:da:6d:17:20:a8:c8:1c:d1:b9:
                    44:5a:96:f8:e6:fe:8d:4d:99:59:b1:18:ce:38:6d:
                    82:ae:52:1a:ac:ef:46:ee:48:51:d4:c5:bd:96:26:
                    dd:fa:8d:fc:c8:e0:85:e7:21:e5:d6:1e:46:df:cc:
                    61:fd:ba:3e:69:20:ab:88:e0:a5:71:3f:17:ab:79:
                    21:f0:94:4a:fc:bb:cb:f9:14:b8:5b:ec:09:7f:64:
                    c8:e3:56:fa:d1:e2:22:4a:e2:f9:59:98:ab:d6:13:
                    7a:12:63:41:9f:de:d9:1f:5b:90:c2:ab:6e:61:46:
                    a6:e2:76:6d:f7:c1:dc:01:a6:c3:10:e6:ab:d9:d0:
                    48:5f:c5:7f:3b:d7:b9:94:c8:3f:e6:e0:20:6e:b1:
                    46:5f:11:eb:3d:6b:50:cf:00:a4:05:0d:27:5c:9c:
                    66:71:62:c4:dd:3d:f0:a8:5d:2a:d6:39:54:8c:a4:
                    8f:73:89:cf:f0:af:f6:90:c9:19:da:ab:7f:97:16:
                    25:76:d9:3d:3c:b4:d7:e8:6f:cf:ce:3f:8c:f3:fa:
                    c0:59:8e:bd:1d:5b:75:f9:4e:7a:22:d6:98:61:75:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FB:E0:CF:45:CF:3E:90:A6:F3:9A:43:FE:88:0A:AB:EE:47:2C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06856130-4f43-3497-94ec-d2a3797014cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:c2:2a:57:78:e9:ff:ea:99:06:52:91:fd:ce:ed:9c:08:
         33:6a:95:42:fc:7f:15:e8:86:56:b6:44:41:67:5c:d1:9a:2b:
         79:e2:1b:f1:95:02:d6:05:32:01:56:24:e2:b8:4d:98:4d:33:
         e4:29:65:c2:80:3b:8d:84:f2:0b:30:9a:89:42:dc:4f:9a:1b:
         ce:d9:f4:12:40:69:dd:18:97:e7:f9:9e:a8:82:14:3d:a5:3f:
         e8:e4:41:70:8f:ed:79:6e:32:13:bd:27:fb:85:09:44:ad:05:
         e8:b6:1d:7c:64:38:4f:d4:5e:06:0b:aa:9a:98:ca:07:d1:85:
         e4:a9:37:f9:10:2f:f6:dd:ea:f5:87:dd:2f:86:d1:cb:c6:e7:
         e0:8a:d8:5f:46:1d:0f:82:70:3e:83:02:ef:03:35:37:e6:7c:
         21:d2:c0:c6:5e:dd:f9:5c:67:c0:4d:31:a0:bd:e9:24:ab:85:
         12:f0:da:ff:4f:d3:21:ee:6b:7c:a0:38:74:88:ae:4d:ce:c1:
         77:6f:1a:8d:1c:e5:17:8c:ff:0d:57:cf:3c:bf:46:39:95:a8:
         73:bd:33:7b:be:c9:ad:37:cf:9b:e0:36:5a:78:88:d5:b3:8e:
         8a:5b:85:00:44:78:5f:30:a6:48:1f:39:f2:3e:62:da:40:97:
         7d:0d:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:54:03 2025 by rpki-client