Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c050c4e4-383d-3367-943c-3f088f11c702.roa
File:                     c050c4e4-383d-3367-943c-3f088f11c702.roa (raw, json)
Hash identifier:          lXqkQV7F89sGb7pN7Fa9G6NOADvYmiHaU5t7IQGJEcA=
Subject key identifier:   36:C4:E6:D0:59:05:88:E9:E9:AF:83:40:3F:C6:B7:EB:39:34:0B:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB922DD1D12189308127A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c050c4e4-383d-3367-943c-3f088f11c702.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33489
IP address blocks:        96.110.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:22:dd:1d:12:18:93:08:12:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=5a18ab1d-c496-4683-9f0f-62de3d88af23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:4a:49:e5:2d:17:9e:aa:23:53:06:f5:95:
                    2b:93:9f:7f:0c:a8:12:96:ef:b3:0f:21:42:6e:dc:
                    f0:cf:63:dd:ff:c1:42:ec:73:95:05:e8:43:78:5a:
                    bc:16:98:df:b4:d3:ac:41:80:35:12:a5:02:e9:00:
                    2f:cb:80:1e:37:02:53:b1:70:87:fa:4e:1b:c5:b1:
                    f7:71:28:4f:6c:6c:1d:d9:68:94:53:3e:15:db:d1:
                    54:c5:74:59:a4:80:ba:51:93:f4:cf:03:6b:7b:35:
                    ec:e4:4c:49:5e:d6:1d:c1:7e:c8:b9:b2:80:ce:24:
                    ff:d0:46:70:eb:8f:6d:17:bb:80:cc:38:fc:f3:fd:
                    cc:3d:d1:15:7c:b0:8a:0e:20:6c:71:a4:81:9e:81:
                    96:4f:f8:56:4c:01:ac:e4:ea:f4:6f:73:07:5c:7e:
                    3f:d2:72:33:5c:1d:25:9c:94:12:b4:e8:93:b2:e1:
                    fb:23:c2:5b:7e:eb:83:a7:ec:3f:22:38:c2:47:6a:
                    36:fb:a3:94:cb:b7:0d:b6:3c:10:40:5d:9a:79:31:
                    71:06:75:59:f8:5c:2e:2e:90:6d:07:84:ab:0b:46:
                    c3:bb:d9:f9:11:32:6c:25:0c:c4:90:99:c4:7c:d2:
                    d7:6c:49:36:13:87:6e:6d:2b:6f:2b:95:da:83:20:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C4:E6:D0:59:05:88:E9:E9:AF:83:40:3F:C6:B7:EB:39:34:0B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c050c4e4-383d-3367-943c-3f088f11c702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:1c:d9:0d:2a:1f:36:20:23:0d:cd:2d:10:b1:6e:06:e5:35:
         9f:21:3d:39:c6:79:16:2c:ce:bb:9e:cd:ff:f8:b3:9d:28:d2:
         66:67:0b:47:b8:8a:49:c0:48:ca:71:0d:75:a9:a1:fb:83:07:
         94:58:07:7a:e8:11:9d:cc:9f:97:c4:b4:0a:a4:ed:88:d8:60:
         69:ad:14:e0:c5:24:0d:46:c5:88:92:ff:13:e3:81:bb:3d:fe:
         6f:f0:f7:ac:e5:eb:db:0e:d0:7f:ff:de:72:7f:77:ef:d0:e8:
         e0:a8:c3:ea:78:c6:30:96:2c:8a:e8:b5:23:5b:d5:62:64:45:
         a3:96:f1:33:47:06:ad:61:45:60:18:69:73:2c:bd:91:d5:2c:
         ab:54:37:36:30:6b:55:cd:25:86:b7:30:58:f7:1a:7a:53:05:
         63:6e:d8:e1:5d:f7:3f:f9:87:28:dc:d8:8d:28:81:44:70:72:
         d3:66:26:f0:df:18:bc:b7:2c:0a:f7:c3:cd:4b:94:45:12:a1:
         30:39:0e:51:39:08:0c:07:d3:8f:6b:c5:82:29:68:a6:9c:0e:
         bb:6d:49:10:44:e4:54:8b:7d:ae:75:19:ad:78:26:6b:49:6f:
         fc:4e:64:43:97:c7:ab:e5:44:41:d5:ed:b7:67:ac:9f:ea:3a:
         5c:a6:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:04:52 2025 by rpki-client