Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa
File:                     78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa (raw, json)
Hash identifier:          SRw6SGZaZ6Bd3xzovAenIlT1X9i9e4Mid0OTUm/ik/g=
Subject key identifier:   56:57:8D:5F:47:B7:CB:B9:4C:61:1D:3E:4D:B0:0C:87:EF:E3:09:3D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F49747519FE9739778A4A7600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        172.96.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:75:19:fe:97:39:77:8a:4a:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8b349da6-a62f-4a76-b7c5-765573ca8b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fd:c6:9d:91:28:63:23:65:26:2d:be:f0:38:
                    e8:c7:75:cb:eb:32:a7:4f:72:27:a9:12:d7:bc:2c:
                    fe:72:c9:a1:e8:94:25:33:49:7c:08:6c:4b:f1:5a:
                    d6:d4:7f:79:24:0d:40:df:d9:a9:ec:3d:69:53:56:
                    0e:b9:9d:ad:50:c8:5b:4b:fd:db:1f:9c:ea:0d:34:
                    34:e9:57:08:ee:f0:37:ef:b4:0c:4a:3c:05:8c:b8:
                    0b:54:52:85:cf:01:18:ab:65:fa:56:6a:85:f2:2d:
                    80:7d:ad:71:32:69:fc:37:8a:1d:96:d7:46:23:ec:
                    72:3f:73:94:f9:33:41:f2:3b:c6:cb:32:da:9e:7c:
                    27:ad:21:d9:26:6e:4f:e8:68:5b:e3:32:67:ac:20:
                    67:92:fc:d9:e2:bd:53:af:ea:20:cb:5d:3c:3e:35:
                    6b:e4:eb:7a:fd:e5:d7:00:9d:45:37:18:70:ea:e8:
                    47:4d:84:c9:4a:7a:30:d3:6c:ed:6f:92:a8:31:aa:
                    6f:1f:07:4a:6f:ea:b5:ae:05:45:c4:21:54:6f:2f:
                    b7:41:86:e9:6b:0b:ce:ae:80:2b:4b:31:f0:cb:60:
                    80:e9:2b:27:70:65:a4:66:9c:eb:8d:14:79:67:c9:
                    b2:f2:f5:e4:a0:b7:8d:bb:99:a6:2a:a9:97:ae:ab:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:57:8D:5F:47:B7:CB:B9:4C:61:1D:3E:4D:B0:0C:87:EF:E3:09:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/78bb1b54-9fbe-3fd2-9baa-5768d116111d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:64:52:a5:f4:20:83:a9:1e:71:ac:10:55:de:b4:7f:4a:f2:
         28:74:e7:38:b8:d2:dd:0c:49:a0:f1:c9:86:2f:47:db:35:80:
         d4:f0:bf:47:3d:62:b6:f3:9e:ff:1f:c3:88:fc:78:83:07:b1:
         6f:af:51:b1:61:9d:00:9f:e0:f7:73:a6:fd:4f:ea:cf:5b:e0:
         a7:5a:50:02:ae:7e:76:c8:2e:78:4b:8b:1c:13:0f:4f:e9:f4:
         56:83:e3:c2:bc:d1:9c:d4:69:34:ce:d5:db:eb:27:a4:f0:a5:
         4c:15:c1:24:be:bb:7e:91:6c:23:55:37:a3:8f:f6:9d:02:97:
         ba:5f:6f:2c:e7:d0:a6:a3:4e:a0:a6:a6:71:05:f8:84:8b:1f:
         c1:c2:a5:94:d4:c8:59:cc:7b:55:bb:ee:a8:05:11:8d:d4:29:
         8b:bd:64:f0:eb:1e:9c:65:4f:f2:dd:03:7d:51:db:9f:ae:f6:
         1e:ba:99:6b:22:6b:fb:c5:ef:11:1d:70:12:38:eb:18:85:16:
         21:b8:d8:f4:2c:ba:a7:15:64:32:88:81:de:49:87:7b:4b:db:
         90:c8:6d:18:46:d8:d0:0d:ef:a9:9f:1f:0d:4e:30:dd:0d:60:
         e6:b2:9e:3a:21:0f:6c:58:57:39:1a:cc:08:b2:5e:35:86:eb:
         2c:2d:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:25:59 2026 by rpki-client