Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa
File:                     78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa (raw, json)
Hash identifier:          QYcNdViWXZ6edsxZ8NdnlAfgw1Ggfr54qpKuOHhONJc=
Subject key identifier:   09:63:81:BB:D2:89:2F:71:FE:54:35:2B:F4:F0:03:FD:7D:24:BE:2E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA787343217DD9026478EE980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20001
IP address blocks:        172.96.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:34:32:17:dd:90:26:47:8e:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=79c7ead9-5c1b-455c-aebf-b5b63267e0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:82:f4:1f:f2:69:c8:21:46:a8:7b:39:4c:
                    96:e3:b6:63:30:7a:2c:70:c1:be:89:16:c7:e0:d5:
                    24:f6:24:fc:f0:9a:d3:01:f9:5f:cd:0a:03:3a:f4:
                    a0:88:53:b5:aa:21:93:cc:43:1e:5d:ff:1e:f5:f9:
                    28:99:4a:8e:6d:73:2d:56:41:6f:a9:13:ba:fb:82:
                    fb:f0:85:92:0d:d0:ee:8e:58:c4:34:77:d5:4a:5a:
                    0f:e0:c3:3a:f9:1d:70:8e:5f:7f:f6:94:55:3e:43:
                    b9:1d:2d:ab:f9:8a:42:71:06:a8:3a:e6:df:da:ba:
                    26:9e:35:ee:57:24:52:d5:fa:09:77:b7:c2:63:30:
                    9c:bd:a7:6f:04:46:15:63:0b:8c:b1:d1:65:c8:54:
                    3e:46:b0:a6:ec:88:cf:d5:bb:1e:4f:28:86:47:c2:
                    b7:cf:a5:e7:04:e2:71:52:11:19:8f:75:f2:96:9d:
                    ae:57:62:6c:dc:0e:fb:37:58:1c:ce:d2:9e:06:60:
                    7e:0a:fd:bc:fe:95:09:2e:69:ac:19:49:94:e4:37:
                    ac:eb:ec:09:c6:81:68:b5:2a:01:54:38:77:8d:e7:
                    2c:88:84:da:46:66:ba:c8:19:b6:94:9c:54:96:39:
                    a5:bd:ab:31:98:51:88:7a:87:4c:ac:82:83:c3:24:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:63:81:BB:D2:89:2F:71:FE:54:35:2B:F4:F0:03:FD:7D:24:BE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:f5:7a:7a:6d:1c:7b:a1:97:2a:21:22:a3:81:35:34:5a:be:
         e6:66:9b:99:4c:d3:75:b4:07:a6:37:de:ae:12:4f:0b:03:8a:
         66:66:11:15:b9:dd:61:01:e8:ce:d6:83:cb:c9:32:6d:0b:9b:
         0c:a6:4d:dc:6a:87:0f:61:61:ac:9a:d2:fb:1a:df:de:0b:b5:
         70:a6:f9:e9:fa:e7:1c:b9:e9:9e:fe:48:94:3c:42:86:e0:fb:
         00:8c:88:bc:04:65:a0:4f:56:36:b1:47:77:73:3d:9e:14:0c:
         86:1f:ab:1c:10:1a:51:76:8f:24:fc:c8:1a:2b:6e:c7:80:a4:
         83:f9:15:8a:30:1e:16:6c:bc:2d:7f:70:e2:a0:b1:89:fe:f5:
         a1:dc:87:ac:ed:f0:ee:42:75:13:e9:e0:61:c0:06:48:c9:7b:
         6f:3d:90:2f:1b:90:b5:38:0f:e5:20:e9:2b:89:7b:cd:b4:af:
         ab:db:f6:39:95:00:16:fb:a8:10:21:7f:0b:12:58:7a:84:c6:
         61:92:77:4f:65:40:9a:e7:b5:b6:9a:6f:f3:45:ae:53:c9:44:
         bd:24:58:d0:77:60:d5:28:b1:33:c2:fe:c3:65:08:7a:9d:15:
         bc:9e:ae:ef:04:94:fb:9f:9f:d1:0f:ba:d5:8d:8d:c1:1e:70:
         6d:1a:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:10:48 2026 by rpki-client