Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbf3a879-73b8-3222-a64f-b7dfe736d324.roa
File:                     bbf3a879-73b8-3222-a64f-b7dfe736d324.roa (raw, json)
Hash identifier:          JjGQuOYGqhttvy5WfcCmuS6IxFtO+GzHASjBGI+CYAc=
Subject key identifier:   5A:D1:B7:1A:E9:93:72:61:C1:56:0C:4B:3C:25:CF:AA:BC:D7:AC:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB94B530E44FB119C14EE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbf3a879-73b8-3222-a64f-b7dfe736d324.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33652
IP address blocks:        96.109.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:4b:53:0e:44:fb:11:9c:14:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=86e2bb0c-fae8-47af-988f-1b709bdbf937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:dd:b6:70:0d:60:e3:41:32:d0:05:d7:4a:
                    5f:d4:7a:8c:5f:4e:7f:7d:a0:6a:e6:b6:16:82:15:
                    91:9e:80:30:84:66:ee:6b:c7:8c:1f:7c:cb:29:91:
                    41:41:cd:3f:c3:4e:b8:dd:80:80:ad:f5:79:c9:0f:
                    13:93:2e:9a:82:5d:a1:90:1e:4b:e6:c5:68:e2:07:
                    79:8b:16:13:4e:d7:c3:04:41:8d:c7:26:ff:a1:5b:
                    85:6f:9d:1d:9b:11:0b:68:d9:ea:6f:3f:e5:f7:b5:
                    e1:a0:0a:14:5f:32:48:80:98:4d:97:bb:e2:15:70:
                    07:2f:45:2f:02:5a:d3:06:9b:40:29:fe:10:f5:3c:
                    36:ce:86:1d:e1:84:26:0c:d8:c8:64:da:d7:d4:74:
                    47:5b:0b:43:74:e6:ef:05:99:68:55:d4:05:21:d6:
                    6a:df:13:c2:53:eb:80:ba:70:cb:3e:b2:42:f0:f0:
                    d2:72:b8:0c:5d:cb:a1:85:b3:4d:4c:10:18:de:80:
                    53:10:ab:c9:ca:8e:ef:5c:fe:3f:20:67:a4:8d:09:
                    77:52:27:43:db:3b:69:dd:c4:eb:ab:22:c7:f0:d0:
                    e9:65:d5:5a:89:bf:ca:12:86:f9:48:51:52:27:d7:
                    f3:77:57:05:f6:fd:7d:0f:5c:56:2a:dc:79:65:d2:
                    16:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D1:B7:1A:E9:93:72:61:C1:56:0C:4B:3C:25:CF:AA:BC:D7:AC:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbf3a879-73b8-3222-a64f-b7dfe736d324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0b:fc:da:81:64:76:71:ca:f1:73:09:d9:9e:48:3f:eb:e2:
         58:10:6f:e1:9e:14:ff:28:9f:27:8e:8c:93:39:4e:4a:bc:e1:
         cb:eb:c1:f2:5a:fb:a5:e1:17:3c:aa:34:98:05:05:51:1c:9d:
         9c:02:4a:ed:e2:a6:76:b3:9f:17:41:7d:29:4e:7e:3c:d2:bf:
         4f:7f:cb:33:ac:d8:1b:28:0f:f2:26:f4:bf:23:a0:24:c7:19:
         32:f4:ed:84:66:c2:26:72:a8:ff:9a:f8:4b:c2:b6:37:aa:2c:
         db:e7:55:64:36:19:3a:5c:4e:82:6e:f1:70:8c:f6:cb:0e:d9:
         89:bb:8f:9a:22:61:4e:65:78:f1:ad:5a:7d:3c:53:cb:9f:76:
         70:50:7b:73:4c:9d:e3:ce:0a:5c:94:8e:28:f9:b6:46:77:87:
         e3:2f:61:2a:57:e9:af:2e:48:05:42:61:0d:58:e6:aa:41:09:
         f0:59:1f:b1:61:30:3c:2f:43:ea:46:e6:57:5e:91:de:cd:b5:
         63:85:b1:7f:e3:33:61:57:3e:28:e4:2f:d5:bf:13:99:51:b9:
         a3:f2:f5:06:9f:77:5a:d7:bd:84:de:8a:05:ea:cc:37:60:3d:
         b7:21:e6:1f:ef:01:5d:c1:0c:b0:aa:43:03:cf:c9:6b:08:d5:
         de:fa:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:34:39 2025 by rpki-client