Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa
File:                     4f097ada-9f5a-31c6-89e9-e080c153edce.roa (raw, json)
Hash identifier:          QvhWFz9zdoDpyqoqvHjQmbEm1bpFv17QdwBhc/6S/4I=
Subject key identifier:   FA:AB:D2:D1:45:D8:7E:AA:7A:B6:13:FA:7D:79:80:EA:A4:A3:62:6D
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584D5E1A54F875C0316CC10D41C0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     393398
IP address blocks:        96.47.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:54:f8:75:c0:31:6c:c1:0d:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=cbd17cc9-ea13-437f-99dc-83c9511cff78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:a7:17:2c:05:68:b0:8f:e2:6e:39:b7:22:
                    78:eb:8d:97:92:58:4d:13:5c:c2:3e:cb:69:80:42:
                    78:53:b6:c6:d8:7c:38:f2:0c:64:69:e2:25:9b:93:
                    6b:f9:a2:4f:6b:83:84:18:84:2d:ad:35:e8:41:0e:
                    81:4e:48:0b:55:70:bd:50:c8:99:39:9f:f8:8d:b9:
                    c0:00:27:9d:18:84:33:5f:43:b2:d7:8d:d5:42:07:
                    52:48:00:fc:22:f6:32:eb:be:cb:2d:08:eb:53:48:
                    ee:b6:5a:95:8e:72:62:6b:ab:e4:b8:94:fe:33:fd:
                    a0:1d:03:00:ac:79:15:8c:92:47:9b:77:b7:b2:e0:
                    64:26:c8:6e:72:82:8b:66:f3:db:7f:b4:9f:46:28:
                    34:b8:92:c5:ac:aa:82:2d:d9:81:07:1d:64:16:ed:
                    9c:cd:f4:dc:ce:dc:3b:f2:4b:58:ac:c8:c7:9d:ae:
                    7d:8e:b4:98:d3:28:7e:3d:4e:5b:d2:93:d7:35:02:
                    ab:7e:80:e2:b9:6d:4c:19:c0:68:86:cd:11:67:ed:
                    a9:4d:a1:fa:5f:ed:f3:3a:0c:68:38:8b:6a:8b:be:
                    93:22:35:96:51:10:d3:02:ae:bc:cf:3c:1e:8d:74:
                    71:f3:66:e7:1e:99:16:4d:d6:38:40:12:24:f7:76:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AB:D2:D1:45:D8:7E:AA:7A:B6:13:FA:7D:79:80:EA:A4:A3:62:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:3f:d5:7a:f5:4f:21:d3:c1:35:3b:aa:a9:f8:3c:07:32:
         b6:08:70:a1:9c:a6:4c:84:62:0e:c1:61:04:2c:f2:65:dd:54:
         ad:78:fd:88:c8:fd:f1:8f:be:26:12:02:4d:e8:82:62:42:3d:
         21:bd:cc:cf:53:05:d8:b1:7f:f0:cc:88:f3:23:cf:c4:61:89:
         03:14:0c:7b:f6:ec:aa:bf:72:8b:22:f8:0a:95:67:47:d3:bb:
         72:92:8b:1f:74:03:2d:b9:87:4a:6f:aa:e2:e7:35:e5:04:40:
         38:58:e2:9b:d0:f4:27:eb:37:a8:a9:d1:22:21:04:21:b7:7d:
         e1:cd:80:1a:c0:7d:4f:71:77:20:b1:be:a3:25:9c:12:2b:40:
         27:4f:d6:c2:51:60:6f:9f:22:17:23:3b:a7:b9:55:05:8f:ed:
         a3:f0:59:5a:5b:05:be:c8:e7:41:f5:b4:6a:63:a1:4b:32:72:
         08:90:7e:27:f3:85:ed:9c:34:9a:ca:e4:7a:92:b5:3c:06:ca:
         45:b1:b0:fb:34:d3:86:ce:3a:e8:ca:e2:27:af:bc:68:e4:fb:
         0f:dd:1a:30:66:e0:7e:8b:50:7a:41:c4:29:01:01:35:c8:3e:
         07:35:15:f9:13:aa:53:05:7a:27:13:76:1b:58:f8:c4:14:dd:
         62:bf:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:11 2026 by rpki-client