Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82cb0e35-73f9-33a8-89ca-8dfd1393bd6b.roa
File:                     82cb0e35-73f9-33a8-89ca-8dfd1393bd6b.roa (raw, json)
Hash identifier:          Q+AQuLVhapV6lDJNWQWL6VMtptj9XiUsGqEsJRW0tsc=
Subject key identifier:   43:F8:52:E7:28:F8:A3:24:29:2D:21:CC:5E:35:4D:5A:C4:0F:13:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141CE23FB5DDE85B9783FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82cb0e35-73f9-33a8-89ca-8dfd1393bd6b.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        96.113.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:ce:23:fb:5d:de:85:b9:78:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=17d8c3d3-a2af-4d15-8833-b496a00f6f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:4d:59:ae:b4:d5:e0:0c:7a:52:54:2c:41:
                    2e:86:73:7f:b0:97:85:2d:19:3f:07:43:d3:79:c7:
                    01:3e:47:9f:81:bf:dc:2f:f7:87:c7:f8:b4:61:26:
                    e4:01:34:b2:8d:c5:ab:94:56:b2:63:f7:1d:30:c6:
                    20:4e:49:47:d4:73:2e:df:31:cf:30:d4:9e:3e:33:
                    62:a1:c9:5f:b1:5f:b0:57:5e:8e:06:b6:57:01:40:
                    d3:b9:2a:10:09:2c:6b:58:29:68:29:a6:25:dd:b6:
                    30:76:7d:89:27:19:0c:f2:97:b7:9b:5b:1f:16:ce:
                    73:bb:8d:6f:6f:59:93:45:56:ff:32:7c:09:e3:af:
                    d5:1c:00:60:82:8c:94:f3:62:88:b0:57:07:1b:ba:
                    d8:b1:ba:af:4e:25:90:38:6d:a2:40:5a:e6:c8:93:
                    a9:48:6e:7a:71:79:1f:52:7f:6c:f5:97:eb:c9:31:
                    c8:0e:ea:40:ca:05:f6:f0:52:0c:e7:f3:ef:cb:e2:
                    aa:f3:80:e6:40:b7:ab:30:6b:a7:ad:ae:37:4c:c1:
                    30:d4:da:4e:97:b7:ac:0a:8e:9c:15:8b:0a:0d:b5:
                    50:6f:f6:12:c4:45:8b:ff:b6:bc:3c:95:8c:6d:6c:
                    06:36:0e:e0:46:25:b5:7c:33:cc:7b:f4:ae:00:c6:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:52:E7:28:F8:A3:24:29:2D:21:CC:5E:35:4D:5A:C4:0F:13:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82cb0e35-73f9-33a8-89ca-8dfd1393bd6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:8e:56:43:cf:fc:e4:fc:09:14:56:7c:ba:85:b7:ed:cc:f4:
         e2:e7:a7:b1:a5:25:76:c4:de:57:17:6b:a0:80:43:59:47:ac:
         53:77:2e:cc:85:86:86:49:c4:a6:6f:6b:93:69:96:e1:03:7f:
         99:cd:ac:49:24:63:23:83:8a:46:36:d7:f0:8a:0b:78:44:f9:
         60:0e:af:4d:6a:51:2e:20:e2:2c:6a:01:48:9a:a7:30:fd:35:
         9a:ce:3f:a0:ba:91:21:f5:70:d5:8e:f1:81:28:7b:0b:5b:cf:
         3a:35:ec:38:01:a2:36:e8:3f:b6:f6:c2:11:f6:34:ac:ec:1b:
         55:39:f6:cf:d4:70:f5:0d:f0:c2:f6:6d:60:9a:4a:e2:3f:15:
         40:6b:13:27:fa:0f:47:fc:63:d3:d1:8f:99:b7:6d:30:5a:4b:
         ec:cc:39:ae:40:b0:2e:fc:6f:15:35:bf:01:6d:49:03:81:83:
         31:62:a4:56:c2:f6:67:57:28:22:e3:12:1e:8b:94:65:b8:35:
         44:30:06:c1:45:7a:71:38:fa:a2:74:df:72:95:d1:c0:32:5f:
         58:7b:37:c6:40:c5:55:53:9e:4f:40:09:31:ef:65:9e:00:0a:
         ec:8c:8d:3b:aa:01:b7:d0:c8:c7:d0:c0:fc:82:b7:f7:1b:20:
         20:7a:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:01 2025 by rpki-client