Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
File:                     b6aef4d5-7853-36ff-91b5-a441b0020316.roa (raw, json)
Hash identifier:          fLT5LX9h75lSoeYe7BtfTSV4mAleCmAeommiu+CrmyQ=
Subject key identifier:   CF:6B:63:B0:A5:CC:16:9A:1E:C3:08:13:82:FE:0B:30:92:45:C8:75
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584F63F81F3857635D9F019B6080
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     1403
IP address blocks:        96.127.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1f:38:57:63:5d:9f:01:9b:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=86f153e3-d023-4890-bbe3-7012f9614faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:dd:d8:8b:f7:c9:38:eb:4c:63:80:ee:79:
                    57:d7:36:a2:09:6e:40:b2:83:43:f6:b7:89:9d:a0:
                    b5:23:92:f1:8d:4f:01:6b:57:7c:2f:8c:44:2b:cf:
                    bc:d6:ac:e1:5d:be:c6:c9:23:d9:ed:33:48:5d:f0:
                    01:cb:96:b7:0e:d5:42:8d:26:8c:e5:ea:71:ce:04:
                    24:22:26:42:aa:4d:e0:c3:c6:a4:7e:37:1e:1f:d9:
                    6f:40:f1:f0:76:1a:48:6f:ec:4c:a1:70:99:a9:79:
                    43:a1:62:35:7c:89:f5:54:7c:02:ac:5b:e1:fa:a2:
                    ac:27:d5:80:93:8e:73:60:2d:0d:d0:db:f2:9b:9b:
                    d8:72:ec:38:4d:8a:8e:81:7e:5b:e3:99:c3:53:f6:
                    d9:01:90:1f:d7:84:5c:18:2e:d1:2b:e1:ef:5c:19:
                    47:ce:99:cb:82:9f:54:ae:dc:6e:09:06:99:50:51:
                    da:4e:b1:99:77:3c:2c:02:8f:b3:9b:fb:26:8b:bc:
                    5a:06:33:4e:1f:d9:82:0d:5f:df:7a:82:a4:3b:e9:
                    18:73:d2:72:35:b6:76:ed:66:ab:a3:84:53:e2:9a:
                    8e:8e:fd:d5:30:e5:8c:2f:26:e1:7a:e6:a5:92:e8:
                    82:ce:25:31:18:11:0f:c5:7f:cf:c8:2a:81:57:7e:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:63:B0:A5:CC:16:9A:1E:C3:08:13:82:FE:0B:30:92:45:C8:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:68:0f:83:2d:2e:8d:59:fd:5c:53:37:9e:d1:a0:cf:69:56:
         ff:a1:99:48:df:f1:8e:05:7a:5b:b1:7c:82:44:29:a1:dd:72:
         f3:45:bc:d9:2b:91:e2:43:52:6c:1a:19:36:30:37:7d:cf:52:
         42:6c:0d:47:ac:3c:83:da:86:33:3e:ea:27:17:84:7a:04:23:
         d3:a3:12:e6:63:df:45:e3:ed:b0:c3:bb:f1:54:59:c7:46:a4:
         6c:9d:58:89:6a:e7:c3:b9:8d:3e:2d:ca:ad:55:4c:ea:50:e4:
         ab:a3:11:b7:8e:e8:44:3f:47:70:d5:96:b4:11:75:11:b4:f1:
         ab:3f:c2:aa:5f:ab:63:19:aa:6e:de:f9:34:7c:d1:73:50:85:
         cf:ab:fd:3b:17:28:4f:a4:5b:7b:3c:01:b3:9b:c6:f9:ea:78:
         9e:72:d8:af:63:75:2d:4f:27:a9:8d:15:e1:32:7d:b0:36:9e:
         e4:45:19:a2:b1:90:2e:c5:a2:e4:d1:07:bd:06:27:80:34:aa:
         18:10:12:25:2f:c1:40:eb:4c:82:a0:4a:17:ae:37:40:81:50:
         df:70:12:34:1c:a2:c3:1d:25:15:d3:cf:3a:40:fe:d5:fb:75:
         b1:74:a8:a1:a7:45:94:e9:93:e6:3b:2b:67:eb:12:8d:02:02:
         a9:33:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:20:25 2026 by rpki-client