Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcc02890-4310-33f1-ab2b-742ba609e700.roa
File:                     bcc02890-4310-33f1-ab2b-742ba609e700.roa (raw, json)
Hash identifier:          bkUheXv0At3cuq8FvbNhz+88o8fbFfqUXFfIUArpBWk=
Subject key identifier:   30:14:52:A1:41:BA:42:0E:B6:42:4B:EE:7A:8E:F4:4A:19:42:20:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4982ED7913AA773DEF089750
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcc02890-4310-33f1-ab2b-742ba609e700.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        96.112.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:ed:79:13:aa:77:3d:ef:08:97:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8f8f1c27-01b5-46c0-8ee7-1e96c0837201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:20:26:91:64:d5:e6:f5:f7:43:99:05:9d:
                    d6:39:58:5c:09:5b:08:51:4c:9e:67:7c:7e:01:35:
                    84:54:21:4a:76:5c:35:f3:e3:63:e1:b7:d2:bc:0e:
                    2f:5a:58:67:86:7d:f9:82:2d:e3:0e:2a:57:5c:21:
                    df:b2:f2:6f:91:9a:37:ae:60:e0:ac:35:56:7c:ff:
                    98:29:a3:dc:1c:2d:b6:51:73:04:2e:a0:4e:c2:e2:
                    dd:92:f9:f1:f2:fc:22:85:92:bf:f4:a9:cc:97:57:
                    02:df:b9:a2:64:ef:86:66:d6:0a:d4:90:7a:4b:87:
                    df:76:8a:ec:85:29:0b:04:12:32:20:be:97:0d:b7:
                    8b:34:53:02:4d:34:6b:75:33:24:0f:78:e2:59:ae:
                    66:a4:73:06:de:81:2a:a8:6a:ad:d7:5f:66:6f:14:
                    b1:6f:13:bc:27:8b:9f:28:3d:fa:46:67:62:40:a3:
                    8d:f6:dc:9c:03:34:8f:32:bb:dc:cb:aa:f5:93:44:
                    48:6f:fb:62:5a:03:5a:3c:5a:69:0e:57:75:0e:c9:
                    06:01:72:6e:5d:58:9a:a1:02:f7:30:09:71:ca:7b:
                    42:88:82:c0:84:ec:c9:0b:33:71:9e:74:95:b2:b9:
                    d2:92:df:f8:11:24:1c:d8:f1:81:3a:e1:16:59:07:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:52:A1:41:BA:42:0E:B6:42:4B:EE:7A:8E:F4:4A:19:42:20:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcc02890-4310-33f1-ab2b-742ba609e700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.112.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:4d:20:eb:c8:79:b4:ff:1c:8f:13:34:13:e0:09:b3:5d:
         b3:da:01:71:db:d6:41:d6:2b:42:8b:24:98:19:cb:31:a1:c6:
         95:12:0c:58:36:29:cd:d4:ba:43:25:90:c4:21:88:5b:31:e0:
         5a:55:ec:c9:8d:1c:92:f1:3d:0f:df:67:81:a9:17:d2:ac:10:
         fe:85:e9:34:a0:c4:1c:08:ce:89:6b:14:6d:22:9c:64:8e:5b:
         df:8f:c1:cb:0f:2d:0e:55:b5:31:c2:78:a8:f8:7c:ae:e1:a1:
         b5:84:89:e2:24:c5:5a:27:6e:94:22:e7:d0:aa:ea:63:6e:0b:
         24:34:b7:5c:d3:4d:e5:3c:b4:88:e6:05:3f:55:13:11:38:89:
         3e:a8:f1:6c:99:f3:f0:bf:1f:b9:6d:34:1c:87:7a:02:eb:a1:
         16:37:e7:89:cb:c8:bd:a1:66:53:5d:36:a2:fe:68:dc:27:1f:
         0b:49:ae:f2:72:fc:6d:4b:1f:78:2c:4f:b6:7e:f0:3d:f4:e0:
         04:57:c1:af:a9:74:1a:1b:2a:a6:da:33:8c:a5:ad:f8:d8:df:
         a2:e3:f4:33:1e:34:9c:ca:f8:e7:68:df:51:82:36:f8:92:9f:
         a6:4d:8a:d1:53:30:6f:9e:c4:32:cf:ea:57:43:80:94:54:85:
         6f:54:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:46:09 2026 by rpki-client