Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa
File:                     3e8828ed-0322-3dec-8145-aa943c8f2112.roa (raw, json)
Hash identifier:          6ADGPmNnbaB0pjG1kxwxHty8GyUduhTQAGAofXXUD2g=
Subject key identifier:   70:E3:4C:D7:E3:95:75:1B:6E:9E:49:1B:C8:9F:59:2F:7B:9B:FA:40
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584B1F0174878B4E56E26D684680
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     53828
IP address blocks:        96.8.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:74:87:8b:4e:56:e2:6d:68:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=00794e33-a8ba-4183-83b1-cb7d70f561bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:01:9f:c4:51:5c:9b:6c:70:48:05:88:bf:
                    8a:02:c0:9e:77:31:cc:b7:4c:62:81:60:41:50:95:
                    41:ef:88:f5:fb:43:99:b6:80:94:d3:e1:47:a7:16:
                    47:74:41:c8:69:3b:e0:66:20:01:5b:dc:28:c7:b9:
                    f0:05:2a:cd:49:47:e3:9e:5f:e3:8e:38:c6:ee:a0:
                    88:19:43:95:1b:e7:ff:95:c1:d8:65:ac:ac:90:8e:
                    d2:fb:db:fb:5e:c6:41:0a:29:3f:5b:ee:20:40:d2:
                    46:0c:3e:85:fe:a7:d6:9b:56:87:bd:a5:3a:3e:73:
                    2e:5d:25:71:1c:f5:79:a9:2f:5d:c9:fd:7f:92:32:
                    12:af:c4:50:30:27:5e:e8:bb:bf:a3:52:e8:e4:9a:
                    1b:bf:be:bf:58:33:20:ff:89:89:4e:60:39:67:ad:
                    c6:36:c4:8b:53:d5:6d:d7:c5:2b:a2:79:39:48:45:
                    ca:63:0e:1e:8d:cb:9c:b1:fa:9e:15:92:f5:1a:98:
                    2a:1b:e2:e3:74:b4:1f:f2:37:5a:68:5e:0b:ab:f4:
                    e4:9d:5b:04:1a:68:cd:1c:9a:cb:a1:a1:29:c0:de:
                    68:24:43:eb:db:12:76:d7:2e:01:6b:0a:5a:58:8b:
                    d1:ee:e3:72:b5:66:d4:cb:3f:2b:87:49:fc:b0:9a:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:4C:D7:E3:95:75:1B:6E:9E:49:1B:C8:9F:59:2F:7B:9B:FA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.8.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:13:ea:d4:c3:b8:54:21:5f:f3:d0:d1:e4:6b:34:bf:33:
         47:b1:0e:92:88:66:1f:12:67:96:c7:1d:fd:3f:d1:50:c1:3f:
         8f:45:b5:e8:34:9e:96:fe:9c:64:0a:64:a5:71:e2:6e:a9:bc:
         05:8c:fc:3c:f7:a3:7b:cd:ac:3b:58:5f:79:22:d4:bd:90:3d:
         19:cb:a8:92:37:e5:80:d2:67:52:56:4b:dc:23:12:ba:f7:5c:
         0b:f3:f5:7f:bf:0e:14:66:40:d0:01:54:a1:52:f2:00:81:fb:
         cf:20:d0:72:c3:65:31:cf:c9:94:25:b0:e4:7e:b2:64:cd:83:
         42:6a:73:1c:9e:6e:2a:c4:d3:fb:6d:78:a2:9c:e9:91:50:1c:
         4c:9a:07:55:9f:6a:81:b0:4c:6c:0d:56:ea:43:d3:a0:69:e9:
         b4:f0:49:6c:96:90:e5:25:9e:33:54:d6:25:76:3c:0d:ac:1c:
         7a:54:72:a2:f4:f4:eb:6b:3c:8d:4f:fe:c0:45:e2:a2:56:5c:
         80:d4:21:3f:b2:fc:91:7f:75:f9:ff:a8:84:92:06:e5:46:00:
         d4:2f:55:1b:ae:7b:25:97:db:93:cf:84:8e:23:30:d3:c6:16:
         67:aa:74:38:33:bb:88:7b:50:23:44:9f:6d:ac:d9:c7:81:42:
         e8:19:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:27 2025 by rpki-client