Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eadb7e65-af2c-3bb2-b4f3-fd590e5e5f38.roa
File:                     eadb7e65-af2c-3bb2-b4f3-fd590e5e5f38.roa (raw, json)
Hash identifier:          HjUFCAn1l10XL0BTPtWhVPM6RATQNINm8BR7RK7WALU=
Subject key identifier:   8F:74:8F:B6:03:FE:09:98:6C:00:4D:F2:F8:DC:E8:32:A0:7F:63:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141D2355D95B793E99B0280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eadb7e65-af2c-3bb2-b4f3-fd590e5e5f38.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        96.116.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:d2:35:5d:95:b7:93:e9:9b:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=55388cb4-d720-4e91-bb5d-8c9013868a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:30:26:d0:46:20:36:43:9d:c2:b4:d8:8c:
                    c3:09:91:9c:c3:97:2a:0c:db:1b:1f:eb:09:cb:2f:
                    a0:b2:c0:73:3d:d7:e3:31:e6:81:7e:a3:68:7e:f0:
                    a0:aa:5a:7e:3e:a7:b3:a6:28:69:8f:e0:e3:ec:8c:
                    99:ed:6e:2e:60:7f:e5:1d:09:f1:c4:ee:43:15:6a:
                    9b:36:e1:fd:ec:c0:ed:76:99:c7:14:bf:1b:9e:04:
                    24:90:dd:97:52:3d:22:24:58:82:9f:8f:9a:2a:9b:
                    78:60:0a:74:4c:87:44:c2:2f:2f:d1:25:b4:d6:e5:
                    6a:c9:40:78:5c:d3:70:23:37:23:90:1a:80:7b:65:
                    de:dc:47:f3:e1:e3:03:5f:7c:9f:ae:9d:a4:fb:69:
                    a2:f9:03:94:8f:6e:bd:4a:8b:6a:28:2c:90:1a:97:
                    20:f9:e0:97:d8:90:a6:d6:c1:ab:d0:8a:99:8b:2e:
                    9b:d1:b4:a5:05:c1:78:83:ea:6c:80:fb:9f:a9:46:
                    8c:00:21:50:98:a9:b4:b7:c1:ca:62:d6:e2:5e:8f:
                    b0:e5:e5:9f:86:dd:8c:33:f3:fa:cb:3d:f9:ee:93:
                    17:40:16:39:7d:4e:80:16:5c:b2:71:a0:c8:0e:21:
                    31:fc:2d:e4:de:79:a4:ce:6a:ca:7b:8f:5f:98:3f:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:8F:B6:03:FE:09:98:6C:00:4D:F2:F8:DC:E8:32:A0:7F:63:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eadb7e65-af2c-3bb2-b4f3-fd590e5e5f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.116.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:8d:cb:cd:5d:b6:5c:1a:e3:a9:4d:3a:bc:59:a1:13:d5:
         42:54:30:ba:ff:80:51:9c:04:4e:b6:fc:bc:29:f0:59:b3:42:
         ca:71:13:2f:04:d6:91:d4:5d:ab:56:a9:66:24:84:ca:71:70:
         87:9e:01:c2:f2:a9:eb:d6:da:b1:7a:e5:91:aa:66:f5:1c:58:
         12:00:1e:80:40:a5:9a:de:30:86:61:a7:de:03:96:62:dd:9d:
         bc:f9:bc:54:6d:a6:f3:8d:b7:c7:eb:27:4d:4e:1c:e8:e6:3d:
         e4:5e:60:f7:d1:a0:65:3f:b3:55:3f:a7:93:5c:ba:85:f6:f4:
         45:01:f7:ab:5b:eb:0f:63:f8:7c:16:d4:55:e0:4d:3b:41:b3:
         89:15:8f:1f:07:39:2f:7e:f3:ae:0d:bf:20:00:1e:6c:13:44:
         e2:cf:18:eb:a8:bc:32:66:45:0a:66:c6:19:bd:4b:93:81:d9:
         82:1f:d2:58:9e:41:d5:67:cb:3f:a2:ee:a9:56:87:4f:e0:3f:
         39:b7:f5:25:d0:1d:ea:a4:5c:2b:2d:70:30:38:1f:dd:0c:4a:
         a6:2f:34:6e:c4:ac:b4:b3:e8:96:48:77:d7:95:85:fc:0f:aa:
         40:77:ed:28:58:f3:16:52:96:8d:e2:27:8f:f8:83:6f:f1:88:
         06:33:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:57 2025 by rpki-client