Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a2fa32-9827-3642-bde2-a53d3ee7e48c.roa
File:                     23a2fa32-9827-3642-bde2-a53d3ee7e48c.roa (raw, json)
Hash identifier:          HCJUVnymUZM+G7iLk7Jx7Wb+9qbMOk1WXhIUBOuFdSY=
Subject key identifier:   C6:D7:EC:14:10:9B:D2:3D:79:A5:08:67:03:86:D4:0B:33:AE:7D:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49786A860198CBAB40CFF040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a2fa32-9827-3642-bde2-a53d3ee7e48c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33489
IP address blocks:        96.108.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:6a:86:01:98:cb:ab:40:cf:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c6a68367-e4f7-455c-b689-6ee548da0f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:b0:12:3a:f3:e5:6b:e8:6f:9d:0b:9f:9c:
                    2d:e2:24:ce:ce:e9:ae:9e:84:65:33:2f:78:3a:9c:
                    38:d9:f2:20:f7:af:6a:63:e7:af:20:8b:92:75:9c:
                    3e:04:7f:f7:81:da:fc:fe:b8:dd:59:b8:04:e6:67:
                    6b:02:4b:ab:3a:25:db:44:09:e6:a2:96:8a:3f:6c:
                    8a:ad:b3:04:a2:5e:09:e7:3e:e6:16:c4:0c:88:b1:
                    f2:89:c3:ca:aa:fa:e8:a3:70:e8:f2:8b:27:11:1e:
                    bd:a8:94:d3:bb:f3:61:9a:82:51:21:27:02:8f:53:
                    04:60:5c:b1:88:5d:4d:78:b1:c2:3f:ae:71:e6:10:
                    72:08:40:c6:2a:aa:9d:68:93:92:cb:5c:33:c9:d4:
                    3f:b9:6e:11:22:71:db:c6:79:ab:ef:9c:c0:5d:f3:
                    69:a3:6d:ee:8e:f2:2d:f5:66:a6:fc:00:43:79:fe:
                    7b:83:e2:80:fb:8d:e7:70:33:df:a6:df:5a:2c:5d:
                    08:83:f6:5b:20:dc:1d:57:ce:ff:34:61:15:59:75:
                    63:db:e8:a1:5a:cd:eb:aa:db:db:5e:56:23:96:71:
                    8f:9e:45:05:07:ba:3e:a1:15:c7:af:28:5c:90:1f:
                    9c:2e:43:13:86:c5:e5:e1:01:21:49:6d:f6:7a:73:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D7:EC:14:10:9B:D2:3D:79:A5:08:67:03:86:D4:0B:33:AE:7D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a2fa32-9827-3642-bde2-a53d3ee7e48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:c9:e0:12:d8:af:3f:90:88:cc:03:6c:ed:b0:9f:14:1c:48:
         1d:4a:f2:a8:90:21:6a:f0:ca:4c:2e:d3:ee:22:59:6f:6d:2c:
         3d:28:46:52:3d:de:b9:8f:59:48:00:05:1e:6e:3d:cf:3f:52:
         20:6e:47:26:ec:72:0d:1a:bc:af:ab:dc:73:67:14:b1:1d:7d:
         97:0e:24:f8:b8:92:b0:e0:bd:03:0d:4c:37:0c:42:29:c1:ba:
         17:75:f0:26:d3:80:3a:91:a9:da:83:50:d3:59:81:15:02:97:
         2a:6d:54:bc:c1:9b:3e:1a:fb:25:5a:2e:93:40:74:db:59:8b:
         2a:a0:32:0e:d5:cb:59:76:93:a6:23:a9:8c:30:7a:98:e5:29:
         06:73:be:d4:c2:51:93:69:24:cf:40:28:ee:f8:45:6f:65:69:
         60:8e:bc:1e:24:71:85:7f:52:43:db:13:ac:19:c6:24:6b:ab:
         74:df:99:6b:13:d4:da:38:65:f1:55:32:d0:16:1d:10:56:80:
         af:ec:d1:62:01:f7:d6:22:b0:c2:1f:98:cc:88:bc:66:0d:09:
         bc:93:df:19:80:d1:93:4d:96:7f:d0:01:97:8e:3c:18:38:eb:
         aa:d6:4e:d4:70:3b:aa:40:d4:70:f4:05:e6:01:a5:32:db:06:
         5a:12:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:44:10 2026 by rpki-client