Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e86c700-3d92-3063-a31d-4390c83b9119.roa
File:                     0e86c700-3d92-3063-a31d-4390c83b9119.roa (raw, json)
Hash identifier:          5G8JAoGd0YfftKX8BTaIvebtrtGewQzOlrDbCtSgiLA=
Subject key identifier:   96:F4:07:8D:05:43:DC:3C:A5:0E:48:2D:82:83:92:71:DE:C7:51:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78E695C0700AF2BE606EC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e86c700-3d92-3063-a31d-4390c83b9119.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33491
IP address blocks:        96.69.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8e:69:5c:07:00:af:2b:e6:06:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=028e531b-96cb-4bce-8bbf-438744ff450f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:10:85:4c:95:1c:41:5f:35:64:f9:f7:98:
                    4f:92:2e:a2:82:48:9e:06:bd:f4:5b:4f:7d:d4:22:
                    82:24:70:54:9c:fa:0f:9e:7b:c1:59:a5:18:6c:96:
                    e1:e0:b1:1c:88:cc:7b:80:09:b0:d3:19:c5:66:e1:
                    b8:ac:10:95:76:e0:a0:0f:31:5d:7c:8a:63:e4:61:
                    80:91:1a:01:db:2c:a5:7f:81:04:ac:79:e3:80:84:
                    bf:e1:a2:05:02:a4:07:f8:c0:d1:0b:ec:4c:4d:fc:
                    69:8a:e4:6c:13:38:5a:b1:57:f4:4c:20:66:15:77:
                    c4:c4:e6:92:0f:05:d9:ae:51:8e:07:8d:63:4c:cb:
                    cb:d4:98:b8:02:67:b6:6f:74:7c:c0:dc:b2:c0:6a:
                    47:5e:3e:4c:25:f8:9d:bf:ed:fa:15:47:34:f8:fa:
                    7d:8f:15:3e:51:4c:a6:cf:72:29:18:03:4f:c1:ce:
                    fe:9e:6d:98:ef:80:c9:27:34:d5:71:e9:40:46:04:
                    b4:e6:ac:eb:88:6a:b5:8e:92:bf:20:02:c8:9b:84:
                    58:11:12:90:de:01:e9:4c:58:87:a9:15:a1:8f:c3:
                    4d:82:ca:7a:09:c0:aa:ad:ca:d1:0a:d6:b6:dc:0f:
                    53:76:3d:56:09:77:3a:d9:1b:fc:b7:34:52:5e:7c:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F4:07:8D:05:43:DC:3C:A5:0E:48:2D:82:83:92:71:DE:C7:51:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e86c700-3d92-3063-a31d-4390c83b9119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.69.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bc:ac:d4:15:76:68:fd:29:29:18:01:90:7f:71:3f:bb:41:
         8b:1f:a6:d1:8d:07:bf:33:7a:e4:43:4c:a8:cc:c0:e3:e2:6f:
         19:3e:2c:92:c6:d8:71:01:89:aa:fe:65:86:16:dc:37:e4:ad:
         6f:89:f3:32:73:f2:e1:ff:fa:a9:9c:57:86:89:c6:46:0b:2b:
         91:a8:43:f3:40:ea:b4:69:ce:49:dc:b3:17:ed:09:90:98:e0:
         cf:cd:ed:2b:34:49:02:d2:dc:08:cf:b3:c1:25:7d:74:98:73:
         39:26:a8:d4:db:8c:9a:ca:3b:9e:aa:65:20:32:28:58:d8:25:
         52:60:98:cf:b5:89:7c:b6:70:a7:86:77:5f:a2:08:da:d0:2a:
         97:eb:b0:17:59:66:d1:b5:b0:90:95:76:e8:dd:83:19:67:35:
         96:4d:97:d0:bf:3b:88:79:f8:b4:ab:6d:5e:02:01:22:6c:e6:
         09:a7:1b:de:9f:3d:22:47:03:58:2b:36:1d:27:da:ac:ce:30:
         dc:9a:ca:88:6c:b4:f2:dd:35:97:e8:13:21:0e:32:8d:94:91:
         5f:a2:a7:f8:fe:48:25:9b:92:45:03:57:20:cc:55:10:4c:a6:
         75:81:b3:bd:fd:15:5d:5c:0b:d8:85:e9:8e:ec:ff:87:23:61:
         8f:cd:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:10 2026 by rpki-client