Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db2c08b-1c29-3afb-b2f1-3f0e56fb9103.roa
File:                     0db2c08b-1c29-3afb-b2f1-3f0e56fb9103.roa (raw, json)
Hash identifier:          CAbPBhoXalM7KOAWKFMIU+K8IusnqwH8ZrGQjzl77pE=
Subject key identifier:   03:D8:2D:FD:23:60:18:E9:00:CB:40:C7:F5:E3:B5:7B:A2:D3:2F:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB94C08AACAC1B8D58EB800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db2c08b-1c29-3afb-b2f1-3f0e56fb9103.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33652
IP address blocks:        96.216.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:4c:08:aa:ca:c1:b8:d5:8e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b1a828b5-01f7-49c5-b247-f7f940c91b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:a4:ff:bd:bc:d1:f5:e8:e2:f2:1d:8c:b7:
                    8e:b9:b7:a2:d7:99:85:54:82:21:b0:a7:6b:00:6c:
                    2d:a9:a9:3a:06:77:b5:b8:cc:d0:d0:c3:1a:cf:a8:
                    05:28:54:6c:a8:93:30:e0:bd:c2:5d:51:8e:66:80:
                    0d:aa:bf:12:9e:3f:f9:c2:90:1a:97:91:45:de:d5:
                    fc:1a:e2:d1:02:7c:21:f6:ae:ab:8a:4f:0a:e7:c7:
                    28:c1:5e:92:99:72:7b:f6:82:a5:2e:11:bb:41:19:
                    e3:21:a9:58:b5:8c:2d:a7:1f:67:9b:8a:c9:11:91:
                    ed:48:66:77:6c:c8:23:c7:cc:ad:07:10:be:ae:3f:
                    92:db:2b:92:d6:26:34:06:bf:45:cb:cb:e7:58:89:
                    7a:a5:f8:43:9d:35:4d:39:54:41:28:d3:2d:33:8f:
                    b2:b9:06:be:63:75:dd:45:9e:b7:43:c9:4a:b1:e1:
                    8a:dc:e1:a2:0d:f0:f2:41:fe:eb:0b:95:03:05:6f:
                    06:33:75:3e:8b:98:cf:07:14:9e:93:53:9d:85:10:
                    80:ee:25:b1:ab:0b:fd:42:0e:8f:70:27:87:65:65:
                    53:60:45:15:5b:b3:3e:87:68:38:b8:a6:47:98:96:
                    24:8e:bf:1c:8a:a1:0e:33:bf:71:6a:3f:04:17:40:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D8:2D:FD:23:60:18:E9:00:CB:40:C7:F5:E3:B5:7B:A2:D3:2F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db2c08b-1c29-3afb-b2f1-3f0e56fb9103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:85:0f:6d:27:0c:0a:86:b6:c7:6c:53:35:0a:ef:e3:5c:6d:
         dd:79:84:b4:cb:6e:bb:93:fd:74:30:3e:a3:af:29:05:92:dc:
         c9:2f:01:63:e6:01:2b:93:da:a5:d6:59:2c:52:95:f2:db:1a:
         d6:ca:bf:f5:63:e2:a6:48:a6:a6:34:b0:04:1d:a9:af:19:b1:
         40:e2:30:2e:33:b8:ee:0f:17:90:b7:67:af:34:1e:b8:e2:a7:
         2b:58:f1:bf:27:91:71:26:1a:1f:68:f9:d6:e4:b2:f7:da:a7:
         25:b7:8e:19:aa:af:f1:bb:37:bb:28:1f:1d:97:41:04:ab:70:
         63:15:dd:5b:32:0d:db:cd:23:12:8b:26:77:84:7b:4b:f6:0e:
         10:35:6b:c5:60:ac:a4:34:3d:e5:32:b9:4d:49:da:d1:d8:4a:
         df:9c:f9:9a:db:c2:7e:c4:22:74:a9:cc:78:77:24:a4:62:6b:
         b5:7c:26:3e:96:a6:8f:71:5b:d4:8c:5f:97:14:e2:f4:4c:73:
         a1:f3:f8:48:70:1e:53:f7:05:5a:ca:98:fd:f8:6c:2d:4b:4b:
         e6:25:f3:85:a5:ef:a2:61:07:99:b0:fd:f7:1c:6c:5e:e6:e4:
         fa:30:b9:28:28:17:01:19:c7:1e:40:dc:9c:9c:cb:49:c2:3b:
         2c:0e:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:09:04 2025 by rpki-client