Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3caf7f-5342-3a40-b584-bad043d61bcd.roa
File:                     1a3caf7f-5342-3a40-b584-bad043d61bcd.roa (raw, json)
Hash identifier:          s7fQyNtkawxmXgqGfplXI1E0wrGLxezZNDBwJq0sfss=
Subject key identifier:   E9:2C:E5:2F:F1:87:53:E8:6D:A0:F9:7B:8D:9D:76:56:B2:65:C4:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE1969379EBE248446AB8E380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3caf7f-5342-3a40-b584-bad043d61bcd.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     7725
IP address blocks:        96.114.112.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:93:79:eb:e2:48:44:6a:b8:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=398d748d-9200-4cb2-86dd-f04156172753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:eb:33:62:96:e8:2b:3b:16:b2:ab:98:82:
                    8c:30:35:f1:9a:8d:f1:2b:a5:82:4b:73:15:ab:6b:
                    67:41:37:36:6f:cd:de:11:9c:ee:af:99:ab:1a:69:
                    c0:41:ac:55:09:71:42:ab:ed:93:f4:65:ab:d4:1a:
                    45:f9:81:01:bd:f1:a7:5e:7e:c2:7a:10:4e:16:f7:
                    e9:43:05:fa:d9:87:f9:98:78:83:6f:67:21:bd:3c:
                    88:1c:ed:58:18:0e:c6:1d:1a:bd:12:8a:43:3c:6d:
                    d3:f5:c5:c1:35:72:3f:79:87:86:47:9e:c1:37:cc:
                    3a:7e:60:bf:5c:83:9b:40:4b:96:0d:25:1d:b6:4f:
                    80:a2:66:dd:f3:4f:50:88:09:7d:34:82:79:67:e6:
                    22:cd:cc:80:7d:54:4d:fb:aa:02:cb:b1:ee:ef:1c:
                    63:07:fe:49:91:07:e3:94:28:cd:e8:a8:2b:1c:26:
                    74:1f:b9:11:84:96:41:14:1e:74:c8:6f:6d:54:c5:
                    9b:1b:a2:a8:01:3e:f8:dc:08:4f:03:85:2e:b2:a5:
                    f9:05:86:46:cd:40:16:b9:10:95:4b:36:7b:82:8c:
                    50:bc:35:83:63:69:10:44:b1:d7:b8:10:be:81:05:
                    9c:dd:b3:90:21:80:3f:fa:43:b4:0b:06:ee:5a:e0:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:E5:2F:F1:87:53:E8:6D:A0:F9:7B:8D:9D:76:56:B2:65:C4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3caf7f-5342-3a40-b584-bad043d61bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.112.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:95:fc:75:b6:f9:6e:54:00:a7:d9:89:b5:f8:1e:87:63:da:
         3a:e9:bb:ce:d5:72:a4:92:32:e6:4e:ff:ee:fb:a3:b1:80:2e:
         32:0b:2d:bc:ea:3b:da:53:69:5b:99:c0:3d:4e:43:34:94:a2:
         da:d4:ed:4d:b9:f0:25:95:a3:cf:c6:db:66:8f:1b:ee:d1:a1:
         42:d2:6d:7e:43:0c:c0:a8:be:16:f6:d9:1b:b0:ff:46:2d:2b:
         de:3f:af:e4:0a:40:71:ba:21:87:00:57:41:8a:fc:3a:1d:5e:
         86:47:aa:93:2a:6d:37:6d:d0:37:08:02:82:0e:67:52:bb:af:
         2c:f5:5b:83:99:24:28:ab:b4:2c:03:6f:68:80:84:bc:e0:83:
         43:06:9a:b1:e7:d1:0f:03:41:50:ab:5a:2a:9f:59:fa:43:75:
         4c:94:dd:f3:f7:e6:93:55:15:8b:5e:5f:98:dc:31:cc:11:b2:
         72:ab:10:3d:f6:fa:a7:00:04:f0:7d:ff:52:0b:0c:d0:74:ea:
         e9:4d:cc:3e:a5:51:66:d4:8e:0c:a7:11:b0:68:5b:77:7b:de:
         a9:85:98:22:93:8f:b9:ee:f1:e0:30:e8:52:bc:44:d2:29:f1:
         54:9c:a4:10:4b:17:6d:03:e2:55:0e:1b:a7:47:b3:04:03:14:
         49:c0:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:26:12 2025 by rpki-client