Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96dab0df-e8eb-3b13-a738-471f0399ab92.roa
File:                     96dab0df-e8eb-3b13-a738-471f0399ab92.roa (raw, json)
Hash identifier:          wRHapQroIDnrFA13Yk15VlXOAJx2sprE60j7G8UNBlE=
Subject key identifier:   60:C4:55:C9:CE:D0:58:1A:AC:83:AC:DB:CC:88:00:F7:CE:97:BF:86
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F1897A8B9BA02CB6AE7DDC080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96dab0df-e8eb-3b13-a738-471f0399ab92.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        165.254.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a8:b9:ba:02:cb:6a:e7:dd:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=1cbf38f3-bb9f-445b-8f82-5d79886ac828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:31:d3:25:35:b6:a3:6f:13:2a:57:d4:28:
                    ae:e2:ce:88:11:92:37:16:32:7a:35:37:30:1c:d7:
                    82:75:a8:2b:86:c3:b0:ae:a0:81:a7:16:84:1d:a4:
                    2c:ec:d0:b2:95:2a:e7:10:c1:64:0e:70:e7:2c:0f:
                    35:2c:d9:3b:f1:15:1f:0b:8f:78:2b:89:7b:58:72:
                    ac:c9:64:0e:6e:ed:e6:b8:e7:62:f2:76:a9:ca:23:
                    67:4c:5c:ed:20:39:51:64:ec:05:30:e0:cc:35:69:
                    a7:8f:b7:d5:9b:16:50:c8:c4:c5:da:93:79:14:70:
                    ea:a5:72:f8:7d:22:85:5c:f6:ae:0f:8d:f3:b7:94:
                    50:f4:af:5f:4c:42:53:5e:59:e7:1c:1f:3e:be:20:
                    33:f4:43:d7:ec:07:a3:96:bf:75:35:ed:94:2a:a3:
                    f6:f9:1e:7d:a8:72:fa:c0:53:fc:a9:7b:12:28:b4:
                    aa:d6:aa:df:58:19:04:9d:b1:6f:17:fe:a8:0d:90:
                    0b:6f:fb:a4:d8:30:63:50:c8:c6:c4:ec:6a:46:ac:
                    ff:18:0b:b2:40:f6:68:07:d9:62:61:52:61:88:26:
                    dc:ec:21:7a:23:87:cc:ba:b6:39:8d:86:f6:7a:05:
                    ed:69:37:31:96:51:36:77:c2:dc:03:12:7f:5c:2f:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:55:C9:CE:D0:58:1A:AC:83:AC:DB:CC:88:00:F7:CE:97:BF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/96dab0df-e8eb-3b13-a738-471f0399ab92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:79:03:cc:81:3c:ab:10:3b:bf:12:88:9a:13:6e:8c:1f:79:
         38:bd:eb:d2:ab:f1:d0:ea:be:4f:46:f7:68:a7:09:c3:cb:97:
         0f:78:14:2e:54:f4:c7:54:02:ab:dc:78:57:09:8a:ed:e8:88:
         c7:84:91:be:ed:1d:d1:be:07:ca:cc:a6:e5:69:7e:81:63:2e:
         64:5b:f0:c1:33:10:d2:26:a0:4a:0b:06:cf:f2:2b:10:81:6a:
         6a:60:6e:1e:f5:14:4a:a6:6b:bf:f5:ff:1d:1e:11:3f:28:05:
         92:af:40:3b:5b:e3:8d:c3:ee:55:cd:82:7f:ac:d1:d5:8f:58:
         f9:bb:f1:cb:38:69:d6:41:63:14:d7:fc:22:44:ef:9a:13:22:
         ee:7b:32:4a:90:1d:72:24:c3:ea:85:40:df:a1:ee:3e:dc:5d:
         90:b8:57:48:9e:33:2c:59:d5:e4:eb:7f:2a:b2:7d:4d:72:ac:
         0c:c4:c6:fb:01:f3:97:33:c7:41:50:18:5b:64:d9:02:d9:02:
         9d:4a:de:31:b4:3b:84:f1:7e:b7:18:1e:45:e4:6f:37:1f:8c:
         99:2a:5a:9c:db:39:51:9a:11:14:99:a8:94:69:77:f5:4e:e0:
         66:23:a5:0b:7b:74:c8:c8:13:72:e7:92:25:b9:c7:32:dd:73:
         40:a5:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:30:44 2026 by rpki-client