Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b027882-aaba-3c11-81c4-9f3351380150.roa
File:                     0b027882-aaba-3c11-81c4-9f3351380150.roa (raw, json)
Hash identifier:          1roXd+RhTIqV1TMNFSH3EmNG/73Ew8h1NNxzWvCy6NY=
Subject key identifier:   D7:CE:50:4E:AF:95:B8:98:44:42:3B:28:FF:C4:56:20:77:2D:A1:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4978B8594DCD1E0DBF133E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b027882-aaba-3c11-81c4-9f3351380150.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33660
IP address blocks:        96.114.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:b8:59:4d:cd:1e:0d:bf:13:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4d1d4467-bb2b-4e04-b059-1b4ecc0f439e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:36:27:6d:2f:5e:fa:24:4b:f2:2d:3d:40:
                    2f:44:5e:ff:48:58:7f:44:ed:34:be:2d:e6:f6:53:
                    93:59:c0:a8:54:6e:e3:af:ac:dd:99:69:7a:a2:cc:
                    d6:fa:6e:08:f6:d0:9b:d7:8d:bb:fa:76:11:2d:db:
                    20:27:0e:5a:2f:c6:3a:47:5e:5a:4d:4e:ce:5a:5d:
                    ba:3b:b9:97:67:a2:e5:22:4f:da:6c:7c:d2:0b:2b:
                    3d:fc:d9:54:32:c2:25:9b:da:01:42:51:6d:6a:b9:
                    c8:7a:67:19:1d:48:9a:a3:8c:62:d1:ff:92:d4:a6:
                    43:39:6b:a6:38:db:79:a0:d7:33:ac:7a:1b:1f:32:
                    31:bb:a9:3d:33:db:72:30:7a:cd:04:15:e5:ae:8a:
                    40:26:20:0e:88:ea:6e:d1:f9:46:b1:3f:50:79:ba:
                    51:dc:f4:41:aa:7f:ea:3b:a5:97:46:83:bc:51:9a:
                    85:9b:bd:a8:c1:5b:cb:db:c0:2c:78:2b:05:f1:9f:
                    e5:3e:8a:2d:9b:ca:1e:94:f2:f3:5b:0e:08:64:8e:
                    49:a0:86:27:a1:30:18:42:ac:60:54:57:31:3f:f1:
                    8e:78:1e:5a:78:f1:3d:36:76:75:cc:b3:38:bb:9e:
                    bb:86:f7:52:13:0f:9b:9e:be:6b:41:60:d8:18:11:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CE:50:4E:AF:95:B8:98:44:42:3B:28:FF:C4:56:20:77:2D:A1:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b027882-aaba-3c11-81c4-9f3351380150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:61:df:be:34:01:f3:3a:33:21:b6:8c:40:ef:8a:f1:00:
         03:67:a9:c6:26:0d:a1:6e:f5:48:83:b5:e1:d7:bf:ce:c8:6a:
         52:6a:10:35:7f:1c:1b:c3:8f:1f:c8:de:b4:75:44:78:2d:e9:
         e0:92:ae:44:e4:28:d3:ad:98:1f:de:13:4d:8a:a8:cb:c7:a4:
         fe:40:cc:45:50:42:54:34:78:45:af:d3:3a:ef:24:13:a4:14:
         a4:27:4c:c3:f2:cf:a6:72:4d:3d:1f:51:7a:0a:93:f0:78:c1:
         1b:34:4e:0b:30:8d:af:34:f5:80:db:93:c1:bc:3f:8c:44:c4:
         32:cf:ec:8a:af:55:8e:bd:58:49:09:01:68:35:30:89:21:df:
         c3:85:ac:af:6a:86:3a:6b:e0:47:ae:61:8b:ee:a6:86:8a:13:
         14:6a:2c:f6:61:c8:e0:6b:dd:12:2f:f8:ec:24:87:c7:cf:7d:
         59:64:aa:ba:87:5a:a2:78:de:41:f8:0b:df:3a:b7:a5:45:d1:
         04:63:e9:d3:85:ca:97:93:5f:d0:f1:d6:b6:b4:5d:52:95:3c:
         5f:42:d6:e1:f4:5c:30:49:05:96:a2:ea:10:ff:b5:e7:ee:60:
         5b:0b:af:eb:39:9d:e1:b1:89:59:59:f2:2f:f3:03:f2:41:fd:
         54:42:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:58:24 2026 by rpki-client