Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2238d39-84bb-392c-babe-7ece8fb5c1df.roa
File:                     d2238d39-84bb-392c-babe-7ece8fb5c1df.roa (raw, json)
Hash identifier:          b6NvJh2tz+0Tsegh4dAKUae8dUyH8TUhn9fbDa/tzWU=
Subject key identifier:   DD:00:96:A6:00:2F:D7:4B:B1:1C:4D:EA:07:D9:21:36:59:A7:27:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87BAE32C938E4C22900C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2238d39-84bb-392c-babe-7ece8fb5c1df.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33287
IP address blocks:        96.110.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:ba:e3:2c:93:8e:4c:22:90:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=ff13141d-eb22-4395-953c-73a32240edb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:3e:9e:ec:68:fd:b4:a9:3c:74:47:3c:42:
                    51:36:68:98:d8:81:0d:54:18:29:a6:45:e4:54:e7:
                    61:1c:c4:21:75:c5:af:a7:82:a4:b8:e3:40:b0:14:
                    8e:f6:e4:db:b2:e7:ed:cc:66:33:7a:b7:46:cf:b2:
                    82:c7:2d:6c:1f:51:f5:69:71:2f:df:06:13:39:43:
                    7c:a8:a5:bb:14:a5:cd:d3:78:75:e1:c5:55:5d:81:
                    4f:3c:63:d3:1f:6d:06:74:3d:59:51:04:91:a7:df:
                    98:94:b8:c4:48:50:52:db:4b:2a:e7:b3:f9:8d:c5:
                    28:dd:33:f2:72:1f:8a:c9:ad:e2:0e:8e:d6:5c:a2:
                    db:10:ab:f0:e2:99:18:50:09:6c:d5:99:0d:c9:aa:
                    bf:7d:3f:a1:4e:1a:93:ed:a6:b0:88:2e:e7:f0:81:
                    6b:36:1e:d6:d4:37:5e:39:8a:f6:51:95:50:dc:f5:
                    72:2b:56:5b:f9:a7:d2:d7:b7:49:a1:88:62:1f:37:
                    3d:b4:e8:79:71:c0:dc:81:38:42:db:56:f6:7e:75:
                    d3:76:bc:8c:f8:1c:e2:86:3f:d3:16:2a:da:5f:52:
                    7f:8d:60:61:cc:76:47:fc:71:30:af:89:05:17:24:
                    8d:8b:9a:9e:04:45:73:93:cd:0e:66:2e:8d:a2:83:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:96:A6:00:2F:D7:4B:B1:1C:4D:EA:07:D9:21:36:59:A7:27:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2238d39-84bb-392c-babe-7ece8fb5c1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a7:e6:ed:44:4b:1f:5a:9f:c9:b4:99:b4:97:29:e2:e1:2f:
         3c:d7:61:4a:25:d8:01:c5:97:ef:74:86:7b:63:2c:3e:40:5f:
         a2:e3:5e:05:3c:40:24:81:f5:52:41:02:d0:b2:03:ea:0b:2e:
         18:46:24:4f:7d:d5:a9:15:ea:53:87:a6:91:1c:1b:7e:b6:4c:
         44:37:6e:b9:be:cd:cd:30:8d:52:d8:ef:17:66:69:6d:2f:7e:
         bb:8d:71:48:a2:f8:6a:52:07:50:c2:93:08:0f:fe:13:68:03:
         c9:7f:a4:a7:42:75:2f:a1:20:19:00:e7:41:51:5f:11:e2:d2:
         68:b9:d4:d0:d7:ee:30:a6:79:26:f9:3d:be:90:c1:4d:91:07:
         68:7f:83:b5:86:10:8d:7b:9f:63:4b:40:a9:a3:84:7c:e3:4d:
         e7:59:cd:9f:aa:c7:e4:7f:99:5d:be:38:52:05:a9:21:e9:25:
         47:78:ca:3e:b9:7e:02:57:bc:39:3a:7d:65:66:44:6f:df:3d:
         9e:41:d8:5b:14:d9:9d:84:47:72:0c:50:0b:07:51:b7:55:e5:
         c2:2d:46:8b:d2:49:59:a9:30:49:28:bd:84:74:1d:d2:b5:a4:
         20:ec:5d:bd:f1:12:74:e5:16:45:65:98:c2:43:f1:3a:d2:7e:
         35:e3:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:48 2026 by rpki-client