Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2e5722-96fa-3139-bfe9-e108e33ab115.roa
File:                     7d2e5722-96fa-3139-bfe9-e108e33ab115.roa (raw, json)
Hash identifier:          ApdwRiiFI54lBWm1ushXHOkS9kNg2n+k0P5osY9xwRA=
Subject key identifier:   1B:54:0C:21:DC:77:10:F8:30:80:65:37:57:EF:7E:8F:1C:F3:3E:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7868251586BA5AF478680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2e5722-96fa-3139-bfe9-e108e33ab115.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22258
IP address blocks:        96.84.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:86:82:51:58:6b:a5:af:47:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=0e52f018-27f7-462e-8455-2417f776cad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:6a:e8:49:2e:10:0d:5a:9d:89:22:b2:0b:
                    5f:21:f4:91:54:15:70:73:4c:69:13:c2:dd:ca:4c:
                    ef:df:28:5b:26:af:c4:d7:b4:84:85:f7:4a:07:19:
                    8d:a3:f6:65:2b:b8:d4:b5:f6:69:59:8c:e8:7c:90:
                    e6:14:65:da:7e:72:4b:cc:83:be:64:80:9e:84:f0:
                    4a:c2:32:31:79:da:13:08:a8:ab:fe:c2:d2:ce:7a:
                    12:17:31:14:ea:a3:91:ae:77:4b:4b:63:79:e1:1c:
                    19:a5:4d:2b:c0:55:59:46:50:ac:94:d7:f4:0b:13:
                    d4:5a:48:b8:7e:bb:65:16:a9:34:0f:71:65:2d:ec:
                    1b:76:30:b1:91:9f:9c:b7:82:93:7e:9a:52:2b:99:
                    8a:c6:af:ab:b9:8c:ef:e3:ea:10:84:08:d3:8e:b8:
                    17:bd:7f:8b:9e:c8:54:07:08:f1:6a:07:4f:54:61:
                    ee:0b:63:5f:80:6d:aa:15:93:df:82:c1:44:32:23:
                    7b:85:2a:40:5a:b6:1f:ff:10:02:54:2a:c4:82:c9:
                    e7:16:72:18:17:46:d9:09:c1:64:4f:de:38:cc:81:
                    3f:44:51:3e:59:35:ae:53:36:c3:60:22:69:3b:a9:
                    21:9e:2f:eb:68:04:62:a7:ca:7d:8e:3a:f3:0c:af:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:54:0C:21:DC:77:10:F8:30:80:65:37:57:EF:7E:8F:1C:F3:3E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2e5722-96fa-3139-bfe9-e108e33ab115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.84.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2e:66:ea:10:5e:01:4f:58:68:4d:40:83:d7:67:50:f9:81:
         f2:6f:3c:bc:f8:d7:bd:44:64:e0:2f:a9:93:5a:2e:12:44:08:
         28:85:e5:ce:69:cd:9e:df:8c:c9:75:9a:f1:90:45:1b:52:f3:
         89:61:1c:ab:cb:15:94:60:95:05:e0:b6:5c:c6:64:d6:08:5a:
         6e:a6:f7:73:b6:9b:9c:f3:1e:f2:3a:91:a4:f2:38:cf:19:16:
         d1:98:24:89:0e:8c:82:23:04:27:c3:67:5d:27:ff:5f:1a:2e:
         f0:43:22:81:f5:ac:5e:46:2b:c5:0a:0d:a5:fb:0b:83:2b:3a:
         8d:f9:9f:f3:9c:a1:73:1b:c6:bf:fd:51:e8:73:02:b5:1f:75:
         48:8c:62:ab:ea:49:36:0d:90:19:18:23:62:25:84:98:9a:8a:
         7c:eb:81:a4:97:2c:99:0f:f0:c3:71:51:1d:0a:e6:b3:9a:03:
         e4:46:73:19:cf:4a:07:ed:58:67:56:73:64:41:0e:c4:dd:23:
         77:49:48:30:49:5d:81:4b:32:d6:4e:64:e5:91:7f:d5:4a:d7:
         f8:6d:5a:05:16:b1:79:ed:54:dd:9e:3d:10:44:37:e3:18:5e:
         93:37:09:3a:e7:72:e7:fc:49:1c:da:61:5a:65:49:73:dd:d2:
         66:5e:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:21 2025 by rpki-client