Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dacf5e02-33a4-3413-ab7b-2e1ee8369104.roa
File:                     dacf5e02-33a4-3413-ab7b-2e1ee8369104.roa (raw, json)
Hash identifier:          XaW865J5fH6EPbVUIsSX/xIl8pl1ZSxetBmr+PbdvoQ=
Subject key identifier:   0D:1A:0D:FD:86:F1:56:3F:C9:E6:BA:72:F8:C0:D5:2F:AC:0D:70:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E640F8B6DB7E5FF91A6556040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dacf5e02-33a4-3413-ab7b-2e1ee8369104.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     33489
IP address blocks:        96.216.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:8b:6d:b7:e5:ff:91:a6:55:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=301b3c6a-96e7-41c9-96f7-c79a24f115de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c3:a4:40:70:c5:a7:c6:51:cd:0d:27:df:9a:
                    09:2b:df:d2:8b:73:2f:7c:7f:dc:63:64:bc:27:0e:
                    99:29:d3:7d:c7:fe:cc:9b:58:56:a4:6c:d4:72:9d:
                    f4:f5:77:d6:e5:d4:be:79:cb:cd:85:b9:98:3e:6e:
                    ba:8a:f1:5f:4e:bd:44:aa:bd:ea:a2:10:6f:0c:18:
                    f1:5c:90:1e:e4:3a:85:55:34:61:5a:11:69:30:24:
                    d5:c6:84:c7:f3:99:f8:4f:85:19:4d:3c:ee:ae:d0:
                    eb:e2:bf:10:08:31:94:0f:1b:93:db:e0:55:4c:91:
                    db:2d:0f:d2:6b:4f:29:f0:84:11:93:af:4c:a0:3b:
                    e5:18:9a:c0:23:40:48:ad:4c:74:49:7d:ec:29:4a:
                    9f:03:5f:3a:41:34:7d:00:d9:ec:83:d2:df:2d:c0:
                    84:1f:80:67:90:6a:14:74:94:f6:b9:7e:67:38:b0:
                    84:59:43:92:60:de:7d:dc:5d:31:ca:f6:c9:79:b3:
                    a9:93:83:f9:64:64:a7:65:3e:92:ec:fb:ac:ef:74:
                    ca:38:58:e2:e9:a1:67:a3:b9:0c:76:33:b9:fc:27:
                    8e:09:bc:12:be:db:cf:06:f3:46:f1:ca:f1:7d:cd:
                    f3:8d:0e:bb:d8:d2:a4:75:a4:87:a2:0c:e6:0c:fe:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:0D:FD:86:F1:56:3F:C9:E6:BA:72:F8:C0:D5:2F:AC:0D:70:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dacf5e02-33a4-3413-ab7b-2e1ee8369104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:29:b1:ce:42:3d:8f:08:81:38:5b:1a:c6:f1:8d:46:c2:18:
         c5:eb:97:42:d9:ce:8e:a5:81:ec:f2:c5:4a:9c:59:dc:6f:74:
         60:d7:d9:f5:41:75:20:d7:f4:0f:d4:bb:c6:dd:d7:39:f7:20:
         d7:d8:31:eb:93:8c:3a:87:13:c4:96:a7:0e:30:5f:18:96:26:
         fb:be:17:0f:b7:56:38:ca:ab:5c:70:c5:5a:bd:ed:8b:98:d9:
         98:eb:91:ec:99:cf:54:0c:2b:b7:90:5a:aa:84:fe:db:81:65:
         e3:1e:03:db:a7:c4:31:7b:53:d9:5a:64:68:0f:9e:35:b9:86:
         de:45:b5:12:70:78:3f:e8:ff:73:16:be:ed:09:64:02:e4:90:
         1c:2d:c3:bf:39:6a:20:0c:22:00:4e:00:b9:dc:c6:61:b7:4b:
         93:dd:64:3b:78:74:05:9d:a7:a4:e6:37:76:a9:52:6b:ad:01:
         e1:d9:a1:f0:7b:80:0a:b0:ad:a9:a5:bd:f4:1d:fc:d3:e6:ce:
         31:9e:51:be:88:d2:18:60:ab:9e:94:8f:77:62:d6:9c:0d:6b:
         f8:ef:43:9c:51:1a:52:5b:ad:ce:ef:9e:4f:08:52:f4:ab:22:
         89:8c:1e:86:f0:49:ad:e5:28:e4:b1:b0:91:4a:a4:d5:29:f0:
         d2:49:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:08:59 2026 by rpki-client