Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa
File:                     ffcfc35f-b32c-303c-87a6-754586bddf01.roa (raw, json)
Hash identifier:          rG/nQi+bNLOPl5u4tN4IZYRrunjExO5uQej6sRXgcKM=
Subject key identifier:   F7:DB:8F:B6:87:BD:16:D4:C3:FE:6D:BF:49:FF:15:B7:4A:BA:39:FE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584DBA3AF6EDFA087B87B8270DD0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     7029
IP address blocks:        172.96.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f6:ed:fa:08:7b:87:b8:27:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=ff3bdce2-f7f2-4f40-9b0c-0607f4957020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:ef:ca:f2:39:be:bb:1c:98:e2:5f:a0:58:
                    3a:04:49:f8:31:ba:f1:d3:ea:d5:18:95:ce:c4:0c:
                    70:bf:e3:45:ec:83:1e:29:0a:52:02:30:80:01:72:
                    4e:7f:23:91:c8:fa:05:f1:be:1a:d0:7a:3a:1e:c6:
                    ec:f6:d7:e3:a4:86:f7:9f:6f:25:b9:6f:71:e3:48:
                    9a:77:be:04:a6:7c:9a:1f:a7:9e:82:a4:48:8a:c0:
                    75:39:b2:97:bb:ef:b0:00:1a:40:13:71:f7:32:e1:
                    c3:5b:2a:eb:d8:da:da:0e:fc:d1:3a:02:b4:e3:3f:
                    c6:ca:5b:4f:1b:92:ef:b9:77:5d:b1:54:19:0e:cc:
                    64:65:52:90:7a:85:aa:74:e8:a9:d3:62:bb:88:f0:
                    f0:04:cb:d6:71:03:3f:c0:92:4a:d8:03:57:ba:51:
                    87:8f:31:71:b8:fb:2e:c9:01:30:9a:4c:ac:aa:12:
                    26:7a:45:bd:94:29:46:b0:98:4a:c7:1d:03:2f:49:
                    ef:a3:69:52:7a:79:71:87:a9:ff:8f:80:3a:82:ad:
                    a3:44:6b:f7:af:ce:b2:78:63:ce:54:35:27:6b:3d:
                    34:bd:b6:ee:1d:70:d9:0a:be:9e:e0:05:af:81:3f:
                    80:3a:89:b7:f7:4e:65:9f:a5:bb:c4:a6:86:e7:67:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DB:8F:B6:87:BD:16:D4:C3:FE:6D:BF:49:FF:15:B7:4A:BA:39:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:ac:23:f4:d3:2b:e9:7a:95:aa:71:6e:fb:9c:a8:09:ab:f8:
         28:b0:7f:f3:71:76:d0:91:f0:2c:22:ec:09:0e:59:d1:21:b5:
         4c:b7:5e:5e:44:24:b7:44:1e:34:18:34:9a:63:30:c5:52:b9:
         d9:06:4c:56:f5:08:67:6f:1b:77:a8:47:c8:c7:cf:44:28:bf:
         1c:7b:25:78:0c:c2:51:88:a1:82:d7:0a:ab:e7:0f:16:b6:df:
         97:7b:93:ac:2a:ce:33:cb:64:3f:c8:78:62:4e:f9:71:23:ed:
         52:46:8a:24:29:2a:e7:c2:ef:2e:58:ff:4e:99:99:eb:7b:66:
         ed:8a:ca:59:1f:da:3e:bc:b4:da:e2:d1:90:eb:f2:18:bc:5d:
         12:0f:73:14:80:4c:51:ea:72:b8:a5:64:87:6a:ef:83:a3:12:
         7d:45:d6:c5:91:bd:10:c5:d5:11:6d:e4:26:4b:8b:30:81:46:
         18:49:3b:6d:c5:12:20:68:aa:93:20:b3:7e:13:2c:0d:2e:07:
         a3:fd:5a:4a:13:f4:1c:73:84:12:86:91:a9:e2:43:95:ba:cd:
         b8:a5:60:01:2c:6e:43:23:19:d0:de:9c:c7:31:b6:ac:85:88:
         14:08:54:01:e8:fb:66:e2:da:d3:bb:d4:21:e8:57:b7:ca:c7:
         ec:ff:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:09 2026 by rpki-client