Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c301840-5044-311d-9cca-c5796e26da82.roa
File:                     9c301840-5044-311d-9cca-c5796e26da82.roa (raw, json)
Hash identifier:          jeW3JRFJfM/EPcJJg/D88LWhmiM7Wn+UrrDmlbWqqy8=
Subject key identifier:   3E:BB:09:5C:0F:A4:83:5C:56:03:77:4A:6E:7D:5F:D8:72:B9:13:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DF21094A63AF342839FC829E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c301840-5044-311d-9cca-c5796e26da82.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     7922
IP address blocks:        96.113.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:94:a6:3a:f3:42:83:9f:c8:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=b4e36ef3-4dfc-4007-b086-db35c986fea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:59:16:e0:5e:8a:3c:eb:a3:66:c2:2f:01:
                    0a:43:07:69:1f:28:f4:a4:9e:ce:f1:af:99:4d:6c:
                    1d:7d:e7:cd:42:52:16:22:0b:4f:c2:a2:d5:6b:9c:
                    10:19:e4:47:ab:95:e5:ed:33:8d:fd:21:bf:fe:bb:
                    f4:6c:f5:31:91:45:97:37:40:15:d3:82:ab:a1:42:
                    ce:52:83:35:e7:23:85:57:aa:d0:e8:bd:b6:b8:c1:
                    18:cb:41:63:a6:0a:ce:2a:d7:c7:ba:ce:36:a4:38:
                    65:93:49:b1:9a:7b:76:5d:f3:ac:b2:0b:2b:64:99:
                    e0:89:54:98:ba:a0:84:d1:1d:c5:c3:1c:15:63:4a:
                    b7:31:b3:8e:bf:4f:a2:01:7b:8e:e6:ed:d3:ec:d6:
                    46:35:ed:05:c4:55:20:1f:49:45:7a:08:83:a5:1f:
                    8c:98:f4:a8:9c:d6:01:4c:3b:02:f5:95:35:37:b6:
                    85:bf:3c:71:b8:a8:ac:f2:38:2c:5b:1c:42:7c:c9:
                    d2:86:85:2f:97:e1:d0:b5:b1:b2:31:a1:d7:58:b1:
                    b7:a2:88:46:04:45:38:f4:06:1d:3b:04:9e:6f:2b:
                    c6:31:fc:17:f7:b5:b1:92:c4:48:dd:35:32:d7:3d:
                    e4:87:87:89:17:77:08:dd:d5:9d:0d:78:c4:29:41:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BB:09:5C:0F:A4:83:5C:56:03:77:4A:6E:7D:5F:D8:72:B9:13:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c301840-5044-311d-9cca-c5796e26da82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.113.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:18:cd:fd:64:0a:06:3b:46:8e:e5:d1:3f:ac:f2:8a:56:98:
         5e:a0:74:41:20:00:0b:ea:4b:64:00:c7:0c:6d:6e:22:ca:44:
         83:83:cb:3d:29:eb:7b:a2:30:aa:04:22:ea:32:cd:81:20:65:
         c3:a0:d3:8c:d9:de:31:0e:14:b5:9f:8d:36:40:2e:ff:84:0f:
         0c:ba:fc:0a:9b:bd:8b:4f:54:ef:c4:a5:d3:9c:2b:d1:c8:6f:
         d6:a9:5b:0c:db:0e:a3:e9:1f:32:68:de:fa:9e:81:63:ed:bb:
         ca:88:dc:14:2e:67:5f:eb:64:fe:60:e2:ca:10:7c:10:f7:02:
         4b:e0:87:43:2c:19:8e:4c:e8:2d:35:9d:d3:b9:0c:c5:c5:28:
         6b:b0:6d:9d:4e:26:cf:43:6f:6c:61:29:11:31:5b:29:0a:a8:
         1c:fa:07:59:01:f2:09:a5:2b:68:ff:59:da:65:b1:a9:1c:7d:
         8f:ac:69:c3:42:9f:4e:4c:42:a3:8a:55:43:48:10:e0:51:a3:
         53:47:53:96:87:a2:84:33:9e:b7:f5:12:f5:23:6b:f4:1c:84:
         e6:4d:00:ca:3b:f3:66:e2:a7:ef:04:f7:05:b2:58:42:58:b1:
         20:bc:1f:2d:fb:29:93:9d:eb:92:f7:59:9c:b0:7c:ad:2b:59:
         bc:07:cb:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEJSmOvNCg5/IKeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk
YjRlMzZlZjMtNGRmYy00MDA3LWIwODYtZGIzNWM5ODZmZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx5ZFuBeijzro2bCLwEKQwdpHyj0pJ7O8a+Z
TWwdfefNQlIWIgtPwqLVa5wQGeRHq5Xl7TON/SG//rv0bPUxkUWXN0AV04KroULO
UoM15yOFV6rQ6L22uMEYy0FjpgrOKtfHus42pDhlk0mxmnt2XfOssgsrZJngiVSY
uqCE0R3FwxwVY0q3MbOOv0+iAXuO5u3T7NZGNe0FxFUgH0lFegiDpR+MmPSonNYB
TDsC9ZU1N7aFvzxxuKis8jgsWxxCfMnShoUvl+HQtbGyMaHXWLG3oohGBEU49AYd
OwSebyvGMfwX97WxksRI3TUy1z3kh4eJF3cI3dWdDXjEKUGHTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD67CVwPpINcVgN3Sm59X9hyuRPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWMzMDE4NDAtNTA0NC0z
MTFkLTljY2EtYzU3OTZlMjZkYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYHF6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACoYzf1kCgY7Ro7l0T+s8opWmF6gdEEgAAvqS2QAxwxtbiLKRIODyz0p
63uiMKoEIuoyzYEgZcOg04zZ3jEOFLWfjTZALv+EDwy6/AqbvYtPVO/EpdOcK9HI
b9apWwzbDqPpHzJo3vqegWPtu8qI3BQuZ1/rZP5g4soQfBD3Akvgh0MsGY5M6C01
ndO5DMXFKGuwbZ1OJs9Db2xhKRExWykKqBz6B1kB8gmlK2j/WdplsakcfY+sacNC
n05MQqOKVUNIEOBRo1NHU5aHooQznrf1EvUja/QchOZNAMo782bip+8E9wWyWEJY
sSC8Hy37KZOd65L3WZywfK0rWbwHy+U=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:37 2026 by rpki-client