Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c50445b-94e0-3c15-9c9b-bfde48109287.roa
File:                     6c50445b-94e0-3c15-9c9b-bfde48109287.roa (raw, json)
Hash identifier:          DVnFBqpoWDtY0Us1CxNMPisSMiEZ+HRQjbuZG6VKK6s=
Subject key identifier:   35:42:55:79:12:86:95:AC:1B:E9:33:9A:45:BB:FA:E0:DC:58:29:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B52A777A49B6127F3C780DCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c50445b-94e0-3c15-9c9b-bfde48109287.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        76.96.96.112/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:77:a4:9b:61:27:f3:c7:80:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=8dbaeea5-8839-4bd2-ac6f-daaa79f34202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:43:32:0a:d9:87:4b:c0:86:6d:27:56:e2:
                    36:cf:9a:6a:e2:3a:18:a4:09:ff:9a:5f:de:74:b8:
                    98:b6:39:2d:8b:8e:aa:92:d8:6e:60:15:50:a0:86:
                    ac:23:5b:6f:56:d3:c8:32:2b:5c:e9:b0:c7:20:0e:
                    9b:01:30:8d:7a:65:bd:36:59:01:61:1d:90:d2:0a:
                    c1:4d:45:87:7f:af:b0:13:98:e8:6e:c7:15:d4:3c:
                    d7:7d:c7:4f:8d:e2:46:69:70:3f:51:69:da:12:59:
                    d0:5c:e3:fe:b6:01:4a:fe:8f:2f:16:33:59:12:f1:
                    69:6e:fe:03:4e:6c:65:1f:ff:45:7a:cf:51:25:92:
                    9b:24:5c:11:20:29:3e:bc:1c:d7:22:aa:79:1b:69:
                    e9:ed:78:25:2e:69:fc:d4:c2:d7:e1:7a:d0:d3:71:
                    3d:91:5b:1c:8b:43:5e:64:a3:73:03:66:1a:77:af:
                    2c:31:3b:d1:ad:bb:cd:96:d2:76:38:8c:43:8f:0b:
                    2b:48:99:42:d6:1c:71:9a:6b:9a:12:87:09:36:be:
                    3e:11:7b:13:ab:a5:ca:bf:0f:2a:33:cd:d2:eb:91:
                    6e:77:e9:56:e5:e7:64:93:51:64:67:b5:b3:ad:0a:
                    1f:a2:52:c0:ae:51:d6:28:1b:89:85:26:52:84:9b:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:42:55:79:12:86:95:AC:1B:E9:33:9A:45:BB:FA:E0:DC:58:29:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c50445b-94e0-3c15-9c9b-bfde48109287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.96.112/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:69:59:f8:c5:2d:56:b2:7e:cc:2f:92:a4:2e:19:9b:50:5e:
         c2:16:b0:d2:5f:de:df:c1:ab:e0:49:00:3d:b1:d4:c3:9e:86:
         de:30:49:ce:fd:a5:aa:a5:f0:06:2f:b1:ff:fd:17:d8:8f:d4:
         ac:f9:f3:05:a2:48:42:d7:72:ce:39:39:47:9a:50:62:f7:05:
         fc:ce:21:5a:01:a6:8d:f5:49:78:49:99:d3:b5:fc:e0:18:aa:
         63:58:78:34:18:14:6d:2c:40:a3:9a:0e:3f:a1:cf:32:e6:9e:
         30:b2:5a:8d:21:44:a2:ad:df:b3:12:c3:17:56:29:c9:75:80:
         fd:2d:d6:ec:5e:d7:25:60:6b:07:80:c6:3d:ea:d9:94:8e:47:
         f7:2d:ad:29:9f:11:23:f0:78:fe:dc:95:5f:92:42:af:46:c0:
         4a:ae:68:6c:8c:32:d1:34:16:f4:ca:78:a6:66:33:78:eb:82:
         9a:98:89:f0:0f:a4:f5:c4:42:89:b9:f0:83:28:9b:08:16:4f:
         c0:af:7f:44:d1:14:ca:2f:6e:b5:ad:33:33:ce:6f:a6:47:8e:
         66:ba:8f:a4:00:c1:40:b6:3d:60:f3:07:a5:0d:83:e4:27:88:
         17:50:44:2b:61:b2:d7:e1:3d:45:44:7f:f8:ca:16:30:3b:4f:
         6e:38:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:17 2025 by rpki-client