Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c01c791-cab7-3022-9f4e-7e3572992b64.roa
File:                     9c01c791-cab7-3022-9f4e-7e3572992b64.roa (raw, json)
Hash identifier:          aLJDtaFLt/hPYoMCKAzShePUT8A+kipXI6ZDzEDx0l0=
Subject key identifier:   A2:B1:F9:D1:C2:BC:D8:06:C3:78:88:86:3F:49:9F:78:17:3B:36:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141E4800535A08FBAB8A3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c01c791-cab7-3022-9f4e-7e3572992b64.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        96.110.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:e4:80:05:35:a0:8f:ba:b8:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=885ea751-fa1f-41cd-8127-19cf1ed9166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:d2:23:3a:66:76:60:48:48:28:be:a9:fc:
                    c3:ce:62:26:0b:6f:82:8c:cd:c2:3a:60:ba:53:b3:
                    3e:3e:18:be:cd:c4:32:3b:b3:c1:bd:1e:a4:21:b7:
                    7f:ee:7d:2c:69:3c:37:44:26:df:10:3d:4b:df:b2:
                    a5:a3:76:b5:3b:4b:45:1a:86:b2:42:46:49:e6:ad:
                    35:f2:cc:d5:1b:aa:8d:81:df:05:ed:51:fd:c4:fe:
                    e7:a7:05:cf:33:44:8f:fb:f8:b7:ef:93:40:a0:a7:
                    07:fc:c7:a0:4f:99:b8:1c:d5:f3:15:dc:f9:d2:21:
                    5a:e0:92:c4:3c:4a:db:97:c0:63:7a:94:78:c1:9f:
                    ce:7a:83:b1:c3:c8:ad:74:a8:c1:e3:df:75:dd:57:
                    0e:37:0d:48:1c:27:64:5b:fb:a4:50:35:ea:30:64:
                    8e:d2:cc:24:78:09:a8:bf:bb:e2:6d:6a:80:2a:8e:
                    52:39:53:9c:17:7f:c7:09:03:67:8e:9c:f9:43:fb:
                    a9:2a:40:74:61:08:f6:78:3d:40:78:f5:0e:59:06:
                    73:a1:96:29:0e:6d:ec:8f:f7:e2:3f:c4:64:1a:13:
                    a9:5c:51:f4:74:d5:4d:ed:53:6c:a2:76:47:d3:52:
                    3a:7d:40:46:47:46:28:a6:07:4a:e8:44:5e:23:5e:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B1:F9:D1:C2:BC:D8:06:C3:78:88:86:3F:49:9F:78:17:3B:36:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c01c791-cab7-3022-9f4e-7e3572992b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:5e:3a:0b:bb:68:c1:cf:58:38:be:14:fc:92:bf:99:85:
         7a:b1:cf:08:02:d6:32:fa:d0:fc:60:66:08:bf:76:ae:bc:ed:
         e3:41:5d:58:99:47:e7:98:d3:b1:ff:a7:c2:ea:ba:16:97:19:
         d4:2f:a3:c0:3f:c3:e1:42:3f:07:98:20:32:3b:13:c2:b4:aa:
         95:2a:9b:18:ee:57:b3:e3:86:72:7f:8d:38:5c:57:05:ac:d7:
         87:62:16:61:d7:a2:c8:55:7a:a1:59:7e:07:93:aa:4a:0f:b5:
         09:60:2a:29:41:75:12:84:20:95:95:c4:36:92:10:7e:63:5e:
         82:82:46:71:2a:0f:54:bf:6e:1e:6d:41:aa:d8:9d:8d:5d:17:
         3e:08:ee:64:db:3b:67:a9:0e:43:11:42:2b:7d:2e:6b:b3:5c:
         45:58:ca:ee:14:64:2e:3e:b8:09:53:54:31:05:ed:ba:13:9c:
         fb:9a:fe:7e:f8:16:97:48:0b:e0:89:3a:50:30:ba:23:20:98:
         72:82:e3:d0:f3:cf:c3:ef:4e:ae:cf:31:39:6e:14:61:12:6b:
         f6:32:38:99:31:50:c0:95:5a:18:28:c7:c4:9a:8e:5f:4d:bc:
         d5:b1:ef:6d:a8:dd:73:63:e3:04:89:58:63:ab:d0:20:be:f4:
         72:e6:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:36 2025 by rpki-client