Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa
File:                     ffcfc35f-b32c-303c-87a6-754586bddf01.roa (raw, json)
Hash identifier:          n3OO8jX6KZA3h7gA3TOtAlDwPRjLje0vdA563Axrb9A=
Subject key identifier:   18:BD:9B:F4:E9:49:49:42:1E:8D:31:FE:FD:1A:B0:75:FB:0E:A0:42
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FCC1B8A2A9DBB9E6E9EC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        172.96.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cc:1b:8a:2a:9d:bb:9e:6e:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=6a57f964-eb11-421e-bb5b-b6745dd103af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:74:66:69:3f:99:b7:a0:8b:3a:8e:d2:39:
                    6d:76:39:a5:b6:4f:f1:20:0f:6b:ff:2b:10:fd:1c:
                    42:53:21:78:fd:4f:84:3e:93:b4:04:88:49:4a:e2:
                    55:d6:aa:52:41:89:c5:8d:36:77:49:bf:cd:db:22:
                    b8:4a:66:0b:e4:70:7c:ff:ab:c4:73:fc:16:e7:15:
                    d8:c4:2f:2d:12:00:8c:28:98:ab:48:23:b7:53:a2:
                    d3:51:5b:68:09:40:63:e4:fb:31:b0:9d:4b:b8:79:
                    e7:4a:81:e7:9d:c1:ee:95:fb:7f:df:bb:07:fd:d6:
                    86:ea:a1:fa:ea:06:d5:9d:1f:68:96:2b:87:0c:63:
                    3c:55:c4:7c:ae:65:2f:45:ed:c2:b1:80:0d:fc:8f:
                    20:ca:88:da:49:1a:20:31:e3:79:65:27:09:8f:8a:
                    fd:1b:b4:07:a9:75:fb:68:95:e9:dc:ec:af:38:e8:
                    5c:11:5d:35:c4:d2:57:17:24:4c:e8:d6:f0:c7:18:
                    0a:83:66:49:38:0a:05:eb:51:47:1b:e0:97:46:94:
                    1f:83:82:99:f4:3e:89:f3:98:e5:ce:a7:13:8b:c9:
                    1e:10:74:19:94:84:07:37:9b:b7:f5:e9:7e:ff:23:
                    ab:22:c3:42:03:6d:6b:bb:c2:ff:87:05:18:b2:8f:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BD:9B:F4:E9:49:49:42:1E:8D:31:FE:FD:1A:B0:75:FB:0E:A0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ffcfc35f-b32c-303c-87a6-754586bddf01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:21:0d:b0:99:1e:7a:48:87:ac:10:45:f8:ff:2d:2b:90:93:
         20:bc:11:d1:88:77:94:d7:2d:ef:fd:01:58:27:55:4c:f4:43:
         f4:74:38:64:09:76:c4:c6:b4:29:b4:03:73:d1:28:6e:d0:56:
         ab:34:81:a2:c9:ca:6d:b9:e1:bb:42:04:f6:f1:55:50:5f:9f:
         23:a1:38:b1:ff:6f:a7:0b:70:16:cc:77:9c:6a:0a:55:93:b4:
         bd:b3:32:35:4a:3f:ac:36:c0:34:dc:54:58:ec:a9:fe:d3:b7:
         63:66:b7:6a:a5:a3:52:99:dc:4f:83:73:43:74:38:06:c2:de:
         11:bf:ee:88:83:53:66:6a:e4:f8:1b:d4:32:66:c6:6b:26:ec:
         b6:db:4a:67:7c:7d:49:d3:f9:91:58:69:32:20:57:fe:ac:0d:
         82:53:39:df:fe:35:4b:a5:e6:28:fa:72:17:c2:62:75:8c:6d:
         04:99:2c:f4:0f:c6:4d:2d:59:17:1b:62:6b:2e:64:9e:71:b6:
         04:c6:95:61:87:fa:e0:e5:5b:10:90:71:f4:ac:f7:7a:39:73:
         e5:4d:60:25:de:c8:3f:f5:3d:18:11:ba:4b:7d:07:c2:18:bc:
         70:1b:15:f3:6c:f3:a4:66:64:7d:05:f5:03:4e:bb:ed:ec:fd:
         47:fc:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:26:59 2026 by rpki-client