Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82ed0816-e050-3a9e-9332-b296475bd118.roa
File:                     82ed0816-e050-3a9e-9332-b296475bd118.roa (raw, json)
Hash identifier:          DmEx0hHp3Z5Oa1WJN1KDOiReAtCPgWN8dwk4qVCjPWc=
Subject key identifier:   47:E4:66:FE:55:EF:82:C5:C5:6D:C5:9A:9B:CA:48:C3:A6:2D:C0:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA39D2E423B644BB501BC87C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82ed0816-e050-3a9e-9332-b296475bd118.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     20940
IP address blocks:        96.6.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:2e:42:3b:64:4b:b5:01:bc:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=3482a1d0-c837-430d-81d6-d4c1b072fbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:14:c0:84:63:fc:92:6d:de:8e:69:59:e3:
                    d9:dc:51:22:69:fa:ab:47:05:18:b8:c5:99:89:c4:
                    58:3e:4b:0a:5c:af:d9:4d:c7:cd:ad:9d:cc:15:fa:
                    1b:91:58:33:58:af:d7:34:cb:08:35:36:f1:cc:67:
                    07:73:47:d2:f2:15:36:54:0d:a8:5a:11:dd:2c:d4:
                    c1:fc:f3:1d:9e:1e:27:a7:4a:9e:e3:b5:e5:58:1f:
                    28:33:0c:e8:6c:00:f7:06:c5:2e:24:b7:e3:5e:74:
                    a0:28:d9:e3:d0:9a:89:0b:97:61:e3:9b:ae:4d:df:
                    da:80:08:4a:e6:be:a3:5a:62:9e:98:5c:29:f9:c9:
                    f2:27:97:7a:81:21:7e:65:01:45:77:c3:4e:bc:7b:
                    ec:48:e1:d3:9a:90:3c:8b:c0:20:e6:50:bf:9f:ce:
                    ca:95:ff:c3:ea:8c:69:8d:8d:6e:be:b4:55:96:a6:
                    cd:10:35:04:4b:3f:a8:14:98:56:27:0b:6f:54:ef:
                    00:8c:c8:87:44:7c:6d:3a:73:e5:5b:90:03:b0:7b:
                    14:2a:bd:00:c6:ab:f3:0a:e5:e8:32:fb:de:b2:40:
                    0c:f5:fb:b8:f2:f1:d8:2f:74:3b:da:38:ce:62:b5:
                    d5:83:b9:79:a3:a0:b4:32:7d:19:ef:85:6f:64:6a:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E4:66:FE:55:EF:82:C5:C5:6D:C5:9A:9B:CA:48:C3:A6:2D:C0:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82ed0816-e050-3a9e-9332-b296475bd118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.6.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:84:ae:56:04:f2:4c:25:00:b0:f2:ed:c5:a6:18:f4:f6:6c:
         41:0b:65:cc:0c:fe:1d:ea:2e:e1:f0:d6:38:0d:d1:26:6e:07:
         ae:43:f7:7a:04:4c:47:36:69:64:fe:cb:39:2a:6a:78:33:c6:
         07:5b:8c:ba:4b:e9:cc:25:b5:e3:db:8c:54:3c:ba:a0:e3:df:
         d2:23:fd:bc:e5:fb:75:29:0d:38:ab:cd:b9:93:9f:f8:3a:f2:
         8a:7d:01:38:66:ae:c8:e0:4d:6a:21:03:12:e6:68:32:89:5d:
         2b:b9:0e:87:0e:b7:36:4b:04:47:fc:cc:ae:9a:e3:42:04:41:
         57:ef:bd:ac:3f:c6:75:2f:f4:2b:dd:ca:6c:33:2e:fe:25:91:
         e0:e5:db:20:a0:10:fe:a9:bc:81:76:ee:84:2d:0f:4f:90:c5:
         15:ad:9e:f0:1a:30:ce:25:05:76:7a:a7:0c:df:c0:01:ea:26:
         bf:b4:3a:0a:b5:c1:ec:85:3e:bf:20:45:bd:94:96:cb:e3:2e:
         2c:af:7b:ab:d8:80:25:ac:c7:65:2f:57:77:83:b5:1d:d4:8e:
         9a:b6:7d:e1:f9:90:f5:da:14:09:a5:46:e5:f0:fb:00:01:fa:
         f5:38:51:43:d0:43:e7:d9:fc:64:8b:46:52:b6:20:a6:5a:a2:
         d6:15:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:57:31 2025 by rpki-client