Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa
File:                     5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa (raw, json)
Hash identifier:          TwYBGoew44pMRWG+Re4SDxwmGTKDHphg2oiTvlum1FM=
Subject key identifier:   D5:E2:14:1B:3D:EA:CE:60:E1:B2:87:B0:80:DA:1F:83:7C:73:25:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DEF45EA4966EDF366CF085B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     33661
IP address blocks:        96.85.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:ea:49:66:ed:f3:66:cf:08:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=ee4253f2-48f5-4974-87a6-284f064420ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:d7:47:b1:b5:52:ec:25:3c:1c:61:de:14:
                    ec:c0:09:dd:a2:1f:57:28:2e:63:0d:35:46:90:27:
                    59:69:de:8f:96:d8:3b:35:f5:81:1d:2e:c2:24:75:
                    fb:14:12:9f:54:a8:9b:74:e6:0a:49:74:dc:3a:e4:
                    a1:c0:dc:cf:0b:a5:24:c3:98:b3:ae:07:59:d7:23:
                    4b:16:cd:9f:ef:21:8b:e2:b4:3f:d8:86:97:a0:3d:
                    56:80:03:ef:6d:08:6b:f2:3f:8b:88:31:b8:fd:16:
                    b5:6b:6c:66:43:35:15:ba:67:52:5f:6c:8e:f0:85:
                    bc:1b:ba:9e:aa:f9:c0:13:ae:12:45:97:84:93:52:
                    94:3d:51:56:f8:59:aa:41:a7:1a:ba:31:05:50:7f:
                    e6:3a:0d:24:08:fd:f4:22:82:70:0d:d1:3d:b7:b3:
                    a8:b7:d6:10:ed:46:9a:5f:97:6c:9d:f9:b3:de:eb:
                    1b:ee:f4:fe:63:7d:fc:06:0d:27:35:7c:a6:d6:d8:
                    c6:99:5f:d4:e0:46:58:4e:69:0d:d8:cc:56:5e:5d:
                    19:39:fa:2b:b3:4d:ba:14:80:02:2e:bd:90:0f:3f:
                    1d:6a:7f:32:a2:3b:3b:81:06:be:b7:55:a1:46:10:
                    28:1e:70:84:02:e8:63:d9:25:3a:a4:90:a0:7f:1d:
                    63:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:14:1B:3D:EA:CE:60:E1:B2:87:B0:80:DA:1F:83:7C:73:25:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.85.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:6d:c4:84:79:3a:ab:fc:38:3d:2a:75:a7:fc:21:82:98:
         5d:96:11:51:11:6d:34:bc:8a:40:53:b9:99:2f:c3:0a:34:25:
         aa:c0:de:4d:ee:c5:49:04:29:a2:8a:c6:50:38:dc:a7:53:b8:
         bf:b2:8c:1b:64:f0:62:a0:c6:03:b2:70:2f:b2:1e:b9:eb:46:
         ec:19:67:c6:07:fc:a5:93:ff:f7:d7:fe:98:ac:97:69:24:7c:
         9b:bd:ec:9f:03:93:12:47:f9:1b:a1:5c:e1:40:39:f6:7a:3e:
         62:ee:ab:43:db:a3:bf:cf:a7:df:69:06:a7:91:de:a3:25:2f:
         83:2c:24:b2:00:22:43:bd:66:d9:97:e0:26:f7:42:be:96:94:
         41:e2:68:71:e3:3b:b7:98:91:d6:27:62:11:b4:2d:db:82:61:
         b0:7c:b3:8e:eb:6c:37:7b:e2:ad:c1:4f:df:e2:11:b7:d1:b8:
         2f:d9:1c:af:57:2b:7b:b5:4c:28:61:cf:eb:17:26:e9:3b:21:
         a0:1e:ec:f7:17:7d:2f:5f:5d:46:19:24:c7:0a:ce:0d:c0:f7:
         82:49:2c:61:64:8a:26:6f:69:83:d7:7f:e1:64:1f:3b:b2:55:
         32:70:60:19:ff:22:45:90:a3:08:ab:ca:ad:1c:d3:29:3f:00:
         df:c1:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:13:14 2026 by rpki-client