Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa
File:                     7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa (raw, json)
Hash identifier:          zdtRll0+4dKBqncWndRe4NsJcJLTw0u11UZg56qNohk=
Subject key identifier:   A8:1F:B2:82:1B:D6:31:87:16:96:57:A7:FE:F6:01:36:CC:40:85:DE
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584E9EAFEC42DD519A4D79690340
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     266400
IP address blocks:        96.43.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:ec:42:dd:51:9a:4d:79:69:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=96c3decd-670d-4297-a81f-0fa123d366c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:1b:73:a2:35:ea:1d:5f:c4:a0:d3:25:2c:
                    93:db:da:46:31:bc:ac:18:3f:b3:e5:6a:af:b6:dd:
                    05:18:8f:29:90:4b:94:01:ef:d1:ba:d1:2f:ed:9c:
                    d0:e4:0b:e5:f9:bb:aa:49:ca:23:b2:8f:b1:0e:c9:
                    21:eb:31:a9:29:56:ea:ac:df:cf:1e:fa:cb:19:78:
                    04:54:ba:0d:60:1c:a3:c4:26:b0:a1:d0:88:34:20:
                    3e:07:0c:eb:56:20:64:62:61:de:89:38:52:54:c5:
                    34:db:44:49:f6:94:83:95:0c:24:9b:c6:a4:b0:fe:
                    e3:b0:d3:71:77:71:64:11:51:4f:a9:15:09:28:92:
                    e1:10:e2:8c:32:ec:d3:d5:ee:8e:e9:52:fb:0e:7b:
                    57:c5:2b:bd:c8:3b:2f:eb:d5:b0:bc:67:37:53:5c:
                    bd:94:be:eb:6a:97:35:99:57:0c:14:c1:ca:83:6c:
                    62:23:03:e8:ea:53:c4:aa:ad:fe:de:c3:ac:ef:00:
                    68:bf:e2:f7:22:69:69:a6:9c:12:8a:08:2b:c9:ce:
                    aa:da:f0:4a:26:94:88:c3:e1:a3:95:3b:06:c2:6c:
                    71:87:f2:1b:51:15:a9:53:4b:54:57:a9:07:ae:a2:
                    c4:92:49:b5:15:26:b4:1b:c2:38:e6:5e:45:4e:6f:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1F:B2:82:1B:D6:31:87:16:96:57:A7:FE:F6:01:36:CC:40:85:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8f:db:d2:05:b3:80:f8:17:c1:24:e5:d6:50:81:82:83:9a:
         00:98:f4:20:53:bb:59:32:46:13:5e:71:d8:46:e8:57:be:07:
         e1:0f:f1:bb:02:8e:a1:31:0a:81:59:de:79:b1:d0:68:d6:21:
         13:98:a6:2e:2a:dc:c0:6b:b6:2f:f5:6b:6e:50:b6:0e:49:dd:
         b2:03:5a:cd:48:2e:a0:f9:97:1e:8e:ef:ec:5f:3a:83:68:e3:
         81:6b:34:d0:59:59:6a:42:e8:cc:97:2c:cf:80:ff:02:82:11:
         a7:9f:f1:c1:c6:21:e8:31:95:a2:84:58:0b:58:84:2b:e6:a5:
         0b:2d:d7:95:1c:f6:e5:88:5b:dc:7e:a7:97:5b:b5:ac:94:9e:
         59:ce:80:41:63:1b:f2:8b:28:c5:15:7d:05:f1:f3:ab:01:53:
         32:06:3f:e9:5e:a9:32:50:20:a1:a6:0b:32:c0:77:d8:df:89:
         6a:3c:ee:25:e3:13:6e:ad:7f:7e:99:0c:23:4c:53:60:3e:fb:
         64:b4:f9:2f:98:5e:ac:e1:f2:9c:30:57:1f:f7:2e:5c:34:ba:
         cc:43:5c:0a:e9:d8:e6:c2:e2:0c:dd:9e:ab:f1:6d:99:06:9d:
         a0:9c:19:5e:a6:35:02:f9:d1:c8:c3:da:52:d3:18:6c:d8:35:
         fe:80:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:48 2026 by rpki-client