Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa
File:                     6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa (raw, json)
Hash identifier:          2YBUpN5ymhpKHmy7TO/RHWcFy/ClBd+yWWJeTG91REo=
Subject key identifier:   98:D1:53:26:C6:69:49:77:82:F5:D0:99:FB:C2:31:07:6D:C8:24:F4
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584E0435F574D646EE9C1393B700
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     20454
IP address blocks:        96.47.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f5:74:d6:46:ee:9c:13:93:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=902f65c4-bce3-484c-9332-ee8e3f42c801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:f3:60:f0:87:ae:ba:84:0e:27:2c:98:58:
                    90:69:3d:ba:e6:70:14:4e:05:c8:77:3b:04:1f:99:
                    db:fe:5e:23:ef:e1:b6:59:5e:2c:73:9f:51:44:d5:
                    c5:3b:98:76:6b:a9:89:1e:7f:62:32:ae:ca:18:18:
                    2c:9e:42:24:3f:92:8e:f8:ba:38:fe:9d:77:9c:32:
                    e2:ea:8c:ba:0c:95:8e:2b:0a:a4:57:41:20:00:05:
                    b6:3b:4c:cd:5e:17:69:aa:e8:86:9d:a8:7c:c7:79:
                    a5:a0:06:d3:0e:d5:6d:a4:d1:23:f5:b7:5c:47:bb:
                    1f:23:29:60:81:ae:45:04:9a:17:98:11:48:50:f7:
                    22:64:45:5a:5d:27:a0:c8:f4:2c:d9:ab:9f:74:3c:
                    3c:69:e6:55:2f:65:ce:48:97:92:e3:36:09:88:e3:
                    3c:5b:8d:2e:ec:56:7d:cb:c1:32:4d:3d:ba:2a:f1:
                    b9:1b:c5:d0:e8:95:cc:93:c6:54:b1:3b:16:c2:b8:
                    b4:e2:c2:9e:5c:1a:31:50:f7:86:ae:80:b0:4f:f7:
                    b3:84:f3:db:76:fe:c9:9a:8c:60:6b:86:0c:bd:0f:
                    ad:c7:56:25:5f:88:10:97:a0:15:45:a7:55:7c:94:
                    d4:9b:47:77:b5:30:c5:48:3a:b4:d9:5b:04:fd:ab:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:53:26:C6:69:49:77:82:F5:D0:99:FB:C2:31:07:6D:C8:24:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6323e789-7f69-3d7d-965b-3f00c3ad09d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:15:d8:cc:20:6b:3d:ee:21:9a:e8:92:1b:01:8a:d6:a0:a0:
         cd:a8:08:8f:9a:cb:d2:88:c7:a9:39:56:dc:c4:12:31:dd:30:
         4a:9b:c0:bf:ca:89:14:3d:ab:6a:9b:52:87:08:a2:cc:a2:93:
         8e:72:7f:17:76:c6:52:8f:8c:77:4d:8e:e4:36:80:47:f0:66:
         36:9e:5a:83:aa:31:54:e8:b5:b2:64:9d:15:2b:cb:be:3f:5f:
         d6:07:06:a9:e2:fa:b3:27:a1:f5:79:c4:60:f0:fe:ae:5e:f1:
         0d:10:aa:83:99:b5:0a:a7:e4:36:e3:be:9c:27:f1:ec:d7:a9:
         b6:66:c7:38:d1:b3:fb:fa:75:ae:e3:ab:b6:d4:4d:e3:7a:ac:
         38:bb:7d:84:db:52:2a:0a:67:fd:32:63:60:48:9a:6e:55:f3:
         77:f9:e8:eb:d9:72:e2:dd:58:ae:ea:13:8a:f4:b4:00:f4:0f:
         33:d1:24:3b:b1:82:6b:2e:ca:c6:13:96:d2:c9:6c:4b:f7:4e:
         18:8f:76:c8:b0:40:cb:af:ff:da:01:32:9c:8d:12:7e:0c:3f:
         7a:18:d7:73:ad:78:8e:73:f3:73:dd:3f:fc:6a:66:9d:0e:ae:
         c9:3c:7b:7e:ac:96:e4:d8:46:cf:aa:d0:4c:ef:80:e2:5b:6b:
         17:44:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:22 2026 by rpki-client