Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ceffb9b-e9a6-3922-917b-db356f1599ff.roa
File:                     9ceffb9b-e9a6-3922-917b-db356f1599ff.roa (raw, json)
Hash identifier:          vUfzjs39FGRW9lCvMwtQ6lWldKVQCnTETUnBIkRF/6M=
Subject key identifier:   E5:8C:A6:80:59:C2:C1:7F:5E:51:B3:97:E2:25:98:3D:B1:5F:3F:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49787EE2D87D339641FD7A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ceffb9b-e9a6-3922-917b-db356f1599ff.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33650
IP address blocks:        96.108.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:7e:e2:d8:7d:33:96:41:fd:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=183bc83b-1f0d-4ee8-840e-0aa7fadb4d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:6f:f3:dc:75:7a:74:5c:13:ed:ff:27:27:
                    9c:8a:ee:e9:6c:b9:2c:2f:3d:14:31:b9:3d:fe:9e:
                    18:2d:32:2c:1a:c5:20:4f:d0:55:db:4f:1b:6a:1e:
                    3b:a3:92:ce:03:75:c9:e7:0e:4c:92:dd:61:e0:55:
                    e9:96:9d:d8:48:95:48:6a:e5:56:cf:d8:dc:f4:22:
                    37:68:98:6d:54:9f:df:cb:45:81:ec:f7:7b:4e:69:
                    96:20:34:f2:7c:b8:19:f1:75:ba:cf:a5:e9:ed:a7:
                    46:c0:88:a8:e8:c7:64:c2:c6:71:97:13:ff:38:c0:
                    cc:ee:62:bc:e5:c9:49:80:41:b5:2b:f0:83:4d:94:
                    39:d4:07:44:2a:02:c4:9e:a2:63:82:df:2f:cc:3e:
                    79:ed:5d:60:ac:2b:6f:47:d0:37:ed:02:58:1f:e9:
                    88:b0:4f:c7:43:6c:cf:b3:be:4b:60:a6:ad:af:36:
                    cc:aa:22:b0:e5:ed:21:1d:b9:7b:50:65:5f:61:26:
                    ad:31:97:c6:51:2b:c7:d1:2a:56:e5:5a:9a:f6:57:
                    f5:32:c2:e4:67:99:67:3f:da:31:5a:5b:9b:a8:37:
                    e4:96:aa:a5:b7:a3:1b:d8:c7:f9:88:90:bf:31:4e:
                    7d:4b:6b:79:aa:70:3a:6f:50:22:83:ed:f3:6c:9b:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8C:A6:80:59:C2:C1:7F:5E:51:B3:97:E2:25:98:3D:B1:5F:3F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ceffb9b-e9a6-3922-917b-db356f1599ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:73:82:81:d7:77:55:73:4d:4e:4d:1c:ad:9d:13:e1:9f:8b:
         92:04:94:3e:29:8d:86:de:83:6c:3d:6a:00:a8:0e:cb:6e:58:
         86:f0:2e:2d:32:b3:c2:b6:70:c4:40:3f:6b:93:b9:d8:8a:e2:
         e4:90:9f:59:60:3e:08:d1:6e:69:41:ef:72:d0:04:0d:2c:95:
         24:e2:de:73:ca:0d:35:a1:9f:70:ff:3f:66:42:8b:80:c4:17:
         75:ea:76:98:95:1d:62:23:e3:08:24:b6:a9:52:5e:18:d8:eb:
         ea:e9:5d:68:4f:e7:ff:5d:45:cd:2b:0e:3e:ba:98:74:11:00:
         2b:6c:82:5f:cd:85:9a:d0:16:27:54:7f:90:95:8e:15:3f:e2:
         d8:5f:eb:60:37:a5:23:c7:79:3b:67:06:cd:0e:eb:63:e0:7c:
         c3:d5:6f:15:ad:36:7d:da:7b:69:b7:1c:23:41:9a:7a:29:fa:
         c9:8e:61:6f:e8:eb:38:7b:1a:e4:61:26:3b:81:20:8b:67:36:
         03:47:59:78:d3:b3:92:6b:4d:81:48:be:de:48:f6:1b:7f:bd:
         bd:68:4e:a4:1a:37:10:37:ac:2f:36:f5:ba:67:b6:74:e4:c6:
         97:ab:ce:63:71:cd:48:9f:12:42:ea:19:4e:ab:cc:91:06:05:
         1d:14:f1:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeH7i2H0zlkH9ekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTgzYmM4M2ItMWYwZC00ZWU4LTg0MGUtMGFhN2ZhZGI0ZDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/Jv89x1enRcE+3/Jyeciu7pbLksLz0UMbk9
/p4YLTIsGsUgT9BV208bah47o5LOA3XJ5w5Mkt1h4FXplp3YSJVIauVWz9jc9CI3
aJhtVJ/fy0WB7Pd7TmmWIDTyfLgZ8XW6z6Xp7adGwIio6MdkwsZxlxP/OMDM7mK8
5clJgEG1K/CDTZQ51AdEKgLEnqJjgt8vzD557V1grCtvR9A37QJYH+mIsE/HQ2zP
s75LYKatrzbMqiKw5e0hHbl7UGVfYSatMZfGUSvH0SpW5Vqa9lf1MsLkZ5lnP9ox
WlubqDfklqqlt6Mb2Mf5iJC/MU59S2t5qnA6b1Aig+3zbJsKoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWMpoBZwsF/XlGzl+IlmD2xXz8wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNlZmZiOWItZTlhNi0z
OTIyLTkxN2ItZGIzNTZmMTU5OWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYGwLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALdzgoHXd1VzTU5NHK2dE+Gfi5IElD4pjYbeg2w9agCoDstuWIbwLi0y
s8K2cMRAP2uTudiK4uSQn1lgPgjRbmlB73LQBA0slSTi3nPKDTWhn3D/P2ZCi4DE
F3XqdpiVHWIj4wgktqlSXhjY6+rpXWhP5/9dRc0rDj66mHQRACtsgl/NhZrQFidU
f5CVjhU/4thf62A3pSPHeTtnBs0O62PgfMPVbxWtNn3ae2m3HCNBmnop+smOYW/o
6zh7GuRhJjuBIItnNgNHWXjTs5JrTYFIvt5I9ht/vb1oTqQaNxA3rC829bpntnTk
xperzmNxzUifEkLqGU6rzJEGBR0U8QU=
-----END CERTIFICATE-----
Generated at Sun Oct 25 09:58:07 2026 by rpki-client