Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6a5ba6c-0ca8-39fe-a3a1-e47d21a5c3f3.roa
File:                     b6a5ba6c-0ca8-39fe-a3a1-e47d21a5c3f3.roa (raw, json)
Hash identifier:          PArT0cgqoUMjWALpI0iAmh121XDOQ4gGbaQtFtrjj8o=
Subject key identifier:   7B:A2:10:B6:27:BE:B7:28:C2:C4:00:4F:B9:42:33:9B:74:47:EB:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7786E6B74BC88CAB1AA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6a5ba6c-0ca8-39fe-a3a1-e47d21a5c3f3.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     20214
IP address blocks:        96.85.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:78:6e:6b:74:bc:88:ca:b1:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=86960b6f-ad22-43b6-8190-b178043cd7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:1c:92:1d:ad:1c:5f:ec:df:7e:6a:f7:ee:
                    74:38:ea:c4:01:c1:5e:cd:8e:50:0e:7a:51:e4:87:
                    0a:94:b3:da:ee:30:58:9f:b7:73:c7:f3:23:dc:a7:
                    02:f7:f3:b6:52:81:2c:02:89:06:a7:9f:24:71:ae:
                    6b:1b:1f:8c:99:1b:34:c1:8a:e9:7d:ba:87:0e:bf:
                    f7:c2:a1:b8:b6:4a:cc:a2:aa:6c:1f:45:be:9e:1c:
                    70:8c:d2:89:6f:f5:4f:68:13:4c:b6:7d:17:66:1f:
                    f9:4e:3e:64:0d:24:fd:d3:52:9d:81:53:57:9a:52:
                    d1:1d:ac:f4:bc:06:8d:c3:7a:65:59:30:b5:e4:18:
                    17:2c:e5:29:a8:b2:ee:b2:4f:3d:1e:96:2d:ad:dc:
                    19:2b:c3:d6:be:d0:13:ac:5f:f7:20:18:67:0c:c3:
                    df:40:12:3a:28:95:6a:71:a9:c1:a0:29:38:d3:62:
                    36:99:18:42:71:04:7c:63:e1:ca:d0:8b:4d:8e:79:
                    54:1e:91:75:e4:d6:d3:7d:93:4b:83:f9:d2:c5:35:
                    d4:40:7c:2e:ad:d5:3c:18:90:47:05:b4:0c:1a:13:
                    0e:0a:89:5c:9a:92:a1:67:13:a2:26:57:3d:e8:7a:
                    9f:94:e6:d7:70:91:59:b2:03:18:a5:9a:2b:79:b0:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:10:B6:27:BE:B7:28:C2:C4:00:4F:B9:42:33:9B:74:47:EB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6a5ba6c-0ca8-39fe-a3a1-e47d21a5c3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.85.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:31:45:fc:14:a6:4d:fd:4f:9e:45:03:ed:bf:6b:19:e5:0a:
         49:16:51:e0:9b:67:8c:a8:43:58:6e:77:08:f6:b6:52:58:b0:
         f3:18:76:77:93:1f:c3:89:7c:38:e0:fe:b3:11:b7:5d:62:a7:
         a3:27:6d:23:ac:97:3a:b0:51:d5:82:11:d3:5e:29:2b:96:7a:
         23:f7:b2:3e:d0:3f:73:3b:9d:2e:fd:37:dd:54:26:16:dc:d5:
         95:16:6e:db:b6:51:e4:55:5c:3d:75:83:30:f2:e3:d1:7f:b5:
         d0:5e:69:18:d6:ad:22:1c:6d:8b:6b:91:7e:68:3a:52:db:48:
         11:94:8d:a0:fa:b7:1f:32:2a:a6:f7:6e:00:e0:f2:4b:a2:26:
         0b:1f:8c:89:ec:2f:1d:af:16:f0:31:4f:b0:60:44:20:f2:a5:
         c4:ae:9d:41:55:c7:82:a0:a4:c9:9d:ca:32:41:b5:03:38:f5:
         c0:42:6c:af:23:3e:b0:3a:33:e3:69:5d:47:f9:bc:4e:ec:59:
         1d:b2:a1:b8:57:c7:b2:69:ac:b8:3e:75:78:fb:c3:64:c2:70:
         6c:9f:7c:98:9f:37:a5:38:a6:b9:9d:bc:1b:17:fd:fe:6f:3e:
         26:c3:6d:8f:a5:41:6a:95:5a:e7:4c:99:4c:cf:48:2e:fa:20:
         a1:ba:f1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:28 2025 by rpki-client