Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8686edcf-c148-33af-9805-e27c3ce4abca.roa
File:                     8686edcf-c148-33af-9805-e27c3ce4abca.roa (raw, json)
Hash identifier:          aErdcSmIl6KqxhtV2ck+LRH6WjPuxH5dWdSSp/gxPSk=
Subject key identifier:   4C:39:A1:6C:97:D9:9E:DE:DA:06:24:46:9C:E5:1D:88:A2:B3:5E:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980D1D26BC945FCA873E4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8686edcf-c148-33af-9805-e27c3ce4abca.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33650
IP address blocks:        96.66.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:d1:d2:6b:c9:45:fc:a8:73:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7ff1b645-5942-4972-8de9-5270c6c7de45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:8c:10:77:c9:2e:d4:9b:d2:0c:50:f7:89:
                    8c:1e:b7:02:c7:4c:13:19:da:d4:67:67:e2:e0:8c:
                    a8:71:39:70:08:d1:e7:86:da:6e:04:8d:79:4f:bb:
                    81:df:a6:3e:a0:c4:d8:04:6a:7a:95:2e:e7:c5:70:
                    5a:13:f3:90:fd:9a:ea:c1:76:32:80:8a:6c:03:51:
                    f8:29:fb:a3:d5:25:ee:2c:11:ad:d5:76:5d:0f:cd:
                    e6:8a:b9:68:df:f3:b1:92:27:30:f0:e1:a8:09:e8:
                    82:cb:22:a3:75:2f:d5:87:ba:8b:62:3d:de:9b:af:
                    c6:26:88:5c:52:cb:37:0b:44:50:33:fc:e3:56:28:
                    06:27:95:ae:06:6f:5b:2a:f2:50:11:7f:4a:b0:4c:
                    7c:75:fe:c0:71:c5:46:31:dc:6d:37:c2:97:ac:81:
                    8b:54:1c:17:e0:4a:61:c9:78:9d:70:a1:9e:c2:33:
                    3d:1f:ef:9e:40:da:4d:e3:d2:82:7a:f6:f7:60:27:
                    06:fd:6a:14:72:15:b0:ad:fc:1c:5d:d2:65:65:35:
                    62:26:c7:08:ad:99:37:be:06:c4:87:42:79:cf:02:
                    f3:59:2c:dd:e6:20:48:99:37:50:83:9c:4e:a6:a4:
                    7b:83:e7:86:d2:ea:a4:14:40:5a:14:7b:ea:6f:2f:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:39:A1:6C:97:D9:9E:DE:DA:06:24:46:9C:E5:1D:88:A2:B3:5E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8686edcf-c148-33af-9805-e27c3ce4abca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.66.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:81:b0:4e:39:26:1c:68:a0:37:e3:e7:6a:32:63:23:30:bd:
         0b:6e:58:13:11:b4:91:d5:ff:8b:fa:c5:66:93:50:d1:5f:bb:
         b0:c3:c9:f0:1d:41:41:c8:1f:d4:68:a2:79:02:f5:e8:2e:48:
         86:68:cc:1b:f8:76:39:10:40:68:94:22:8e:11:39:ef:cb:cf:
         85:74:ed:a6:0a:d4:21:0f:7c:e4:d4:f7:5c:4b:dd:57:c7:56:
         c0:23:f5:26:1d:18:07:de:c2:08:f4:f5:8d:c9:5a:de:ca:b3:
         04:48:99:8f:f2:53:c7:c7:49:ac:b8:b6:76:d6:aa:bb:92:41:
         f8:5d:7c:c9:37:12:44:88:96:3e:6b:3c:c0:5d:d9:5e:7c:d8:
         4f:3b:b0:0b:50:b6:13:2f:26:b1:ce:7e:91:e2:6d:d1:b3:dc:
         16:e4:a6:6b:d4:be:88:ef:72:d8:01:42:bc:ab:fe:13:8a:5b:
         c2:01:d3:52:75:e8:67:c9:94:1b:8c:81:33:5f:0b:56:f5:7f:
         28:29:a3:47:a4:22:52:4f:6e:03:f6:1e:63:07:3d:8f:f2:d6:
         83:35:b0:24:7a:11:07:ea:ad:ac:57:75:ad:9e:31:3e:ae:8a:
         83:d7:2a:1e:bd:58:5f:5b:8d:9c:0e:85:a7:73:0e:9a:91:08:
         f9:1e:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:12:41 2026 by rpki-client