Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/87b3aef9-2e02-38eb-b992-85bcb4568f26.roa
File:                     87b3aef9-2e02-38eb-b992-85bcb4568f26.roa (raw, json)
Hash identifier:          yEy/lxwmpwHhaz+yoD8OD2cpfHPXUfK1vdSsPd4J8kc=
Subject key identifier:   6D:28:E8:BC:FB:E2:D9:BF:75:7E:E3:13:94:86:12:D8:33:96:85:39
Certificate issuer:       /CN=4e8d73da-047f-4a47-9523-47bcb685cad5
Certificate serial:       010D0C9F4328584F6F230C88EBBBBE8C4DFB86C0
Authority key identifier: EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/87b3aef9-2e02-38eb-b992-85bcb4568f26.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     11949
IP address blocks:        96.47.96.0/20 maxlen: 24
                          199.27.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0c:88:eb:bb:be:8c:4d:fb:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8d73da-047f-4a47-9523-47bcb685cad5
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=317f8543-b3c3-4597-b414-1f65467e499c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:14:46:c2:a6:2d:6a:78:a3:4e:e5:6d:75:
                    2f:93:c6:fd:ac:c2:99:45:b6:25:42:df:32:10:44:
                    db:05:f6:05:d6:52:31:3f:7b:b6:d4:21:7f:5d:c1:
                    86:f3:55:e4:c9:84:08:82:dc:29:23:32:a2:7f:23:
                    07:65:ee:aa:1e:c6:34:94:16:28:eb:23:f3:ed:c8:
                    bc:7f:d3:cd:7e:7e:28:55:f1:b4:14:5e:79:7e:b4:
                    1c:e6:d1:c9:59:5e:04:3f:ac:a4:ce:4e:88:32:48:
                    e2:ca:ac:86:68:cf:f5:de:69:b6:47:e2:6d:93:d8:
                    b9:01:e6:ce:79:05:46:a0:53:a4:5e:d9:3f:27:a4:
                    12:7d:03:db:a1:c5:ef:7a:43:4b:31:c3:20:71:55:
                    be:fb:ad:24:7a:da:04:b2:b1:73:8f:9b:dd:6f:f6:
                    e7:27:37:aa:67:ea:13:91:aa:60:24:85:8d:a1:b8:
                    8e:8a:82:bd:ee:e8:fe:e6:29:54:82:49:f2:57:13:
                    0b:ca:75:aa:77:99:ad:42:9e:02:16:d3:72:03:dd:
                    a1:74:c2:42:a7:45:9c:16:ab:1c:03:1e:1a:ff:b3:
                    f5:4e:0a:67:bf:56:13:06:c4:ab:9b:dd:39:f0:03:
                    58:fc:a4:bf:41:36:b4:6d:b0:c1:bd:33:a3:0c:50:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:28:E8:BC:FB:E2:D9:BF:75:7E:E3:13:94:86:12:D8:33:96:85:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/87b3aef9-2e02-38eb-b992-85bcb4568f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.crl

            X509v3 Authority Key Identifier:
                keyid:EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.96.0/20
                  199.27.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:62:ec:32:05:66:b5:59:a0:22:c9:86:e0:21:3e:a3:58:c2:
         23:80:6a:26:41:b5:bd:6c:68:fa:0f:b4:ec:d7:4a:c1:db:6c:
         76:34:1a:12:1b:bd:93:3d:f2:49:e8:68:f0:33:cb:cd:41:3b:
         91:6f:93:b2:57:8f:c0:f3:f4:b2:dc:a2:fb:27:18:fe:99:fa:
         5e:73:6c:cf:42:ba:65:d8:c5:02:1c:05:49:ba:d3:4e:ed:6f:
         ef:8c:af:c0:34:f3:2f:5b:16:22:69:b5:f6:45:e1:a9:f8:bb:
         e4:db:60:5d:dc:29:19:da:52:22:fe:8f:5c:8f:55:58:42:2d:
         72:76:28:0e:12:6e:c7:90:23:a7:f3:94:ce:34:0d:a4:3f:47:
         50:87:fa:7c:49:a2:60:a4:8c:5e:88:1e:0f:00:97:32:0c:9a:
         f1:eb:6f:98:30:5c:c4:90:c1:a7:04:6c:2c:cc:96:36:bd:3e:
         ca:6c:8b:ec:b7:9b:af:5b:27:f4:13:e8:66:fb:f8:72:be:72:
         8d:33:4c:22:dd:c5:18:9e:38:a1:cb:73:9e:2b:37:1f:87:ed:
         41:8a:e4:a1:68:cb:ac:d6:03:87:87:f2:38:a0:8b:61:95:e0:
         59:bd:0a:70:f6:2a:62:54:a7:f7:8f:d1:f4:b4:79:0a:a6:bf:
         16:9d:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:42:37 2026 by rpki-client