Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa
File:                     dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa (raw, json)
Hash identifier:          q8VXLNjysaKtXlE/gHi7LAjUK2VxtzsTsV0YsxqwdHY=
Subject key identifier:   62:81:BD:9D:AE:05:C1:B2:46:ED:08:29:77:DD:57:27:9C:BA:B9:1E
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584E0866534AFEBE42A01512D404
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     13335
IP address blocks:        96.43.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:53:4a:fe:be:42:a0:15:12:d4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=a04a5c48-9313-4a22-9c88-a4b4ef7ff998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:bb:bd:c4:76:16:dc:13:f9:35:63:ee:51:
                    5b:b6:f4:eb:a7:64:bb:3f:c0:da:34:b3:3a:e1:cc:
                    92:29:54:9d:f8:4f:bb:53:f1:42:0e:f2:88:bd:b0:
                    31:e2:f8:7e:a8:8c:0a:e5:30:65:07:d5:85:9b:d6:
                    81:01:91:ed:e1:db:25:b0:5b:7a:c2:79:b7:a5:57:
                    c3:a8:5f:a4:3e:ed:f6:e4:9b:c7:2e:fe:66:3e:03:
                    a4:eb:b2:ac:82:b8:c5:31:5f:58:3c:ba:d6:7e:a2:
                    17:a9:c3:b1:ac:a9:ed:e2:1f:18:b3:c0:44:6d:3f:
                    4f:54:09:ba:2a:d0:06:ab:43:1d:73:fd:24:05:f0:
                    d2:fd:3d:bb:a0:36:2f:af:da:f6:3e:dd:3d:63:c7:
                    d4:4b:5d:63:2c:fc:b4:eb:22:b1:f4:bc:4b:42:6c:
                    66:1c:f8:c3:e0:56:c8:0e:ac:cb:0e:a2:41:98:bd:
                    7f:fb:3b:1f:ec:b1:77:cd:d5:50:f0:10:40:43:b8:
                    0f:ca:57:ca:36:27:d7:b8:3e:4a:87:24:ba:c9:71:
                    64:f8:19:20:aa:4e:12:04:85:3f:22:f3:fe:ce:e5:
                    6c:37:e8:9c:8e:38:a1:79:87:fd:58:39:a3:11:ea:
                    4a:aa:53:f1:9e:b9:59:5c:ae:e0:7e:70:82:a5:5f:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:BD:9D:AE:05:C1:B2:46:ED:08:29:77:DD:57:27:9C:BA:B9:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:71:9e:8a:ca:b3:ab:ac:b3:99:37:8a:46:01:44:61:01:
         69:ca:4f:94:f4:6a:90:63:07:a3:b0:56:fd:a3:d2:23:fc:1e:
         f6:1d:c1:85:46:2f:52:e9:40:df:df:67:cc:8f:b7:b3:ba:7f:
         b7:29:80:ea:47:01:1b:22:69:35:1b:b8:66:df:35:90:89:3a:
         bf:74:7c:12:f6:c2:c6:9e:d8:c0:43:ac:96:cd:23:4b:64:36:
         be:aa:73:1d:bd:a7:d0:f7:54:61:99:ff:e7:e9:e3:03:cd:f9:
         08:68:c9:ff:2c:9b:64:63:87:b0:82:2c:2a:4d:39:30:0c:0f:
         07:af:14:19:4e:a6:d1:54:63:8c:df:6f:8d:1c:38:3e:ff:c1:
         fc:c9:03:86:91:de:25:13:e6:3f:08:88:ce:98:89:ef:2b:fc:
         d0:3d:7e:5e:af:f7:a4:2f:0e:ad:ac:54:62:21:cf:6d:6a:09:
         2b:d9:05:5b:d4:75:cd:7c:3a:03:3d:71:55:d4:d2:fa:36:4b:
         1d:5d:ff:4d:aa:71:0a:8b:f3:b4:81:76:e3:7e:2b:2d:02:c7:
         8d:2a:e5:bd:72:18:55:ed:e5:cf:c8:e8:20:47:04:db:8d:11:
         fc:10:16:bc:73:b5:92:14:13:cb:7f:7e:85:2e:6a:66:44:5d:
         b8:b7:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:08 2026 by rpki-client