Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0cd6d189-f363-3215-9ac7-5e901bea5bd9.roa
File:                     0cd6d189-f363-3215-9ac7-5e901bea5bd9.roa (raw, json)
Hash identifier:          zvigDFxGieoh+tAcg8qCKKaemcxvdkO6XhvSJ0xSPh8=
Subject key identifier:   3C:E5:81:91:CE:32:FD:39:D8:D4:CF:DB:C6:A1:62:67:4A:EF:D4:D6
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584F63F8094831D979A43E6B0580
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0cd6d189-f363-3215-9ac7-5e901bea5bd9.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     215607
IP address blocks:        96.43.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:09:48:31:d9:79:a4:3e:6b:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=2bddbead-d931-48e7-87c9-1126af7553b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:8a:af:c6:38:4e:e4:5b:96:e0:df:42:6b:
                    8c:9e:ea:c7:a3:2d:2b:25:4e:df:86:e9:f3:d3:ea:
                    65:36:98:dc:fb:3e:e3:0b:ce:6c:55:d1:3f:a9:54:
                    5b:c2:7e:95:3f:06:8e:28:36:ad:28:8a:b8:7c:2a:
                    a8:8c:34:9d:b2:7f:e0:fb:0e:86:04:09:6d:4c:b9:
                    ef:d8:13:d6:88:0e:db:9b:ad:c1:f2:30:49:d6:0a:
                    8e:0f:18:3b:ad:24:a2:85:7e:18:d8:b7:84:75:5a:
                    b5:ff:48:f1:a0:f0:7c:0b:f4:22:b4:b0:75:b3:82:
                    5b:53:9c:f1:71:c8:ae:c2:5a:be:46:69:db:22:45:
                    1f:8d:89:45:5e:8b:5f:79:27:8d:eb:90:b3:86:6d:
                    73:68:af:92:b4:e0:46:ac:f5:e7:39:92:73:41:71:
                    18:23:e7:b5:35:cb:a1:41:c7:cc:64:67:31:f2:0c:
                    06:b7:b7:17:4f:b0:96:25:5d:d3:d2:6c:5b:91:c7:
                    3e:40:ff:71:92:58:e5:34:53:bb:1d:c5:63:b1:cf:
                    09:d2:fa:b8:63:2e:7e:b0:c7:9e:61:13:03:6e:af:
                    17:6c:c2:70:89:32:2d:44:c9:85:35:6c:7c:b5:c2:
                    da:45:8b:33:9c:fa:75:53:45:fa:55:45:e7:e2:0f:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E5:81:91:CE:32:FD:39:D8:D4:CF:DB:C6:A1:62:67:4A:EF:D4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0cd6d189-f363-3215-9ac7-5e901bea5bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:8b:ad:fa:26:34:6d:c6:f4:49:3f:5c:fd:82:8a:37:14:
         27:4a:69:a8:56:9c:a3:83:c7:d9:30:e8:ed:5d:fa:fb:ef:5b:
         c0:13:46:f8:8b:14:8d:06:85:ac:69:3c:91:09:5a:8e:e8:4b:
         8d:81:b2:f7:d6:e9:bd:da:e8:ca:b7:e9:59:c7:2b:c0:36:f1:
         42:36:ae:37:38:d2:bc:e4:a2:6c:06:61:32:53:02:4a:6b:66:
         0b:64:6e:de:d8:92:64:b0:8e:b1:6a:5b:62:02:99:ea:5e:bc:
         4d:2e:01:27:20:f1:25:66:88:23:8c:cc:71:37:e2:e3:35:b5:
         b2:1b:9f:5a:e8:bf:e7:ba:42:f1:06:66:0e:eb:56:5d:5f:b1:
         51:9f:95:10:5f:6e:54:0c:93:7b:87:16:32:3d:7a:0a:83:37:
         6a:a3:8a:12:52:d0:c6:a2:f5:58:09:de:07:70:02:cf:63:8f:
         04:1c:7b:56:86:77:44:9e:14:bd:35:f7:01:7b:fe:b3:4a:14:
         1a:4b:e6:b3:09:01:2f:f3:4b:d3:7d:de:df:d4:38:5f:40:bf:
         f2:5c:fb:f0:1b:ff:28:ff:fe:cc:76:9e:32:19:3d:e7:ae:2a:
         11:79:b5:a9:e1:11:f6:cc:7e:de:49:27:99:04:3a:4f:f6:46:
         09:73:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:38:23 2026 by rpki-client