Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e397b54d-b890-34eb-8913-6c12b250dfad.roa
File:                     e397b54d-b890-34eb-8913-6c12b250dfad.roa (raw, json)
Hash identifier:          GM5l+3/i+g8+ymtNkOwzZsYEKvKPCUT7ySxE6plyAWw=
Subject key identifier:   44:90:61:78:92:21:62:C5:2B:92:32:B6:B6:5B:FD:D9:A3:FC:7D:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980960F41C4D811962A62C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e397b54d-b890-34eb-8913-6c12b250dfad.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21508
IP address blocks:        96.82.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:96:0f:41:c4:d8:11:96:2a:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e91bcecf-91bd-4270-92cb-8bc9df6207bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:64:c6:ae:7a:ef:e3:2e:50:79:80:e3:4f:
                    34:a5:56:19:60:af:22:fe:7d:b9:de:a6:8c:f3:fc:
                    32:9b:63:08:37:2d:44:3c:29:6a:0b:db:50:ef:40:
                    8d:64:31:87:1f:31:33:38:b1:7d:06:eb:32:f6:41:
                    c3:69:df:60:1b:f5:d8:6d:83:da:d8:f4:de:d3:fc:
                    b2:eb:46:5b:f7:c1:d4:06:99:32:20:94:da:a7:26:
                    d2:be:22:54:cb:a2:e7:df:0f:3d:d1:1e:7d:cc:41:
                    1c:55:86:eb:05:70:89:11:59:fe:e1:be:3f:0f:e7:
                    33:a6:c1:d4:81:ec:37:34:f6:1f:a2:df:0c:8a:f7:
                    3b:b2:51:d4:74:11:fb:b7:a0:c6:dc:03:1a:67:39:
                    d4:1f:78:33:ac:68:b8:32:16:81:59:8d:8e:39:ad:
                    af:b5:66:dc:ba:10:f0:11:d5:c7:dc:4c:a5:2c:cc:
                    46:1e:d1:fd:50:fd:19:b1:61:e1:02:bf:07:85:51:
                    46:ce:35:b4:02:c3:6d:29:01:26:52:01:0b:7f:b8:
                    32:b3:c1:60:a2:bc:c4:a5:84:c2:62:72:b8:73:2b:
                    bb:bc:71:3a:71:b5:51:92:9e:56:a2:aa:9b:38:78:
                    18:eb:06:c5:c1:39:26:e6:0b:25:df:2c:d1:6e:ed:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:90:61:78:92:21:62:C5:2B:92:32:B6:B6:5B:FD:D9:A3:FC:7D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e397b54d-b890-34eb-8913-6c12b250dfad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.82.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:65:64:b3:3f:6b:11:d3:53:a5:82:b3:7e:17:9f:d3:dd:
         78:af:59:c2:54:e7:df:f6:97:a5:a1:fd:96:dd:da:3c:25:d3:
         7f:74:f2:55:48:22:ba:d2:75:1a:0e:1a:b3:14:d2:e7:23:dd:
         b9:64:e3:c4:14:d4:0a:a4:62:e6:a5:4b:ed:7e:bc:b5:44:41:
         46:24:29:e8:d1:a7:b6:96:ce:91:76:9f:8b:02:be:5d:44:19:
         d2:de:8d:3c:5e:6d:f7:fe:2b:c4:a8:3b:18:c1:30:b7:b0:0b:
         99:20:71:02:44:56:75:ad:7b:2d:b7:77:88:bc:7f:21:73:b6:
         7e:d1:ca:7b:78:78:09:10:17:e5:75:5a:45:dc:d5:58:8e:b5:
         47:7f:3d:7b:05:9a:b7:af:58:be:19:44:3b:5f:8b:0b:4b:4a:
         e9:2d:64:0c:19:28:81:d4:18:aa:51:86:b6:e0:e3:08:c2:a1:
         c9:c9:6b:fb:0d:6d:80:0b:cc:0e:54:f5:c5:a5:99:c1:9c:12:
         a1:e5:a4:37:f6:ee:d6:e3:85:f4:53:60:48:42:30:66:db:02:
         d4:04:f5:63:6b:14:cf:5b:54:ae:17:99:fe:f1:bb:eb:c0:49:
         f3:8e:77:e5:e3:c8:73:56:74:39:53:d3:b8:2c:e0:d2:5c:10:
         df:83:91:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:38:34 2026 by rpki-client