Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e95773c7-6a18-357d-b1c1-edc6549fd8e6.roa
File:                     e95773c7-6a18-357d-b1c1-edc6549fd8e6.roa (raw, json)
Hash identifier:          955mepwTIQxRGmypOUG3fHfwyi2Fg23CkwYBHfgSRA4=
Subject key identifier:   79:AF:48:9C:B6:91:44:96:51:A6:A1:C7:5C:43:73:C2:1E:B6:73:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA7957429C89213AF30004500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e95773c7-6a18-357d-b1c1-edc6549fd8e6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7922
IP address blocks:        96.103.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:74:29:c8:92:13:af:30:00:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3bc0f8bb-ed10-4900-b03a-2bf3faaa9d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:2b:ef:7f:91:f5:13:5e:fc:b9:2a:80:35:
                    e0:fb:46:f0:e4:67:89:4b:f3:f4:cd:78:2d:b3:9d:
                    2b:d7:ca:46:48:04:44:d3:bf:5a:b7:e8:2f:66:32:
                    bf:75:d7:8c:67:76:ab:fc:11:64:ee:e3:0f:79:47:
                    1d:53:93:b6:fb:d2:eb:9c:01:1c:90:0d:1e:5f:76:
                    37:fc:03:35:a7:d1:ec:bc:1c:7f:b2:d5:14:f1:bd:
                    e3:73:0a:4b:d4:b3:0c:b5:ec:75:41:b0:16:2a:a3:
                    30:53:16:1b:f6:f9:d6:14:90:49:d8:ed:83:12:be:
                    53:73:fb:8c:5a:92:83:c6:98:d4:ce:97:e7:a6:04:
                    ff:77:85:76:f5:a3:e6:5f:44:5d:8c:f3:7d:22:4c:
                    d9:03:ba:82:43:e4:b3:13:a9:2e:b6:02:ed:a7:c5:
                    57:31:16:f1:85:70:2f:79:0e:1c:7e:7d:4e:4e:7e:
                    21:5b:18:0d:97:37:9c:0c:e6:b3:3d:91:26:80:7a:
                    6b:b3:8c:bc:56:a3:20:df:38:65:8a:8f:fd:2c:fd:
                    47:5d:38:32:a5:87:84:fe:1e:c9:97:03:6f:c5:5b:
                    d3:93:83:cd:39:d1:fc:12:08:58:f8:fd:7b:bf:4a:
                    c9:c8:23:c2:be:76:48:47:c3:53:3a:bd:dc:b7:a3:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:48:9C:B6:91:44:96:51:A6:A1:C7:5C:43:73:C2:1E:B6:73:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e95773c7-6a18-357d-b1c1-edc6549fd8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.103.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:50:fe:ce:6b:c7:76:25:8a:13:be:e9:f7:76:1e:97:5e:
         d2:13:03:d0:f5:26:88:d7:28:56:f5:c7:26:37:51:7b:a7:19:
         0e:21:99:32:54:5e:0b:ff:d4:5c:2f:de:d4:4d:e4:16:43:11:
         09:99:7d:0a:03:f5:b0:0c:a3:31:fe:b4:b6:39:00:14:52:ec:
         03:0e:e9:f6:8c:7d:ff:c4:73:d4:58:76:d3:c6:db:ab:44:da:
         3a:ce:f5:89:a7:22:ea:4c:97:63:75:55:dd:c8:44:03:08:84:
         3d:1a:b1:34:f2:ab:3f:c7:ef:77:f1:a5:52:1e:fa:79:ff:8f:
         f6:7c:54:7f:c5:c5:8f:2f:d1:9b:09:38:bc:37:4d:31:90:83:
         b9:de:f3:49:ef:b6:32:6c:5e:6d:60:10:17:5c:e3:6a:d0:f1:
         f1:3b:2e:95:a3:4e:bc:4d:1c:f3:d7:40:88:17:f7:e5:56:14:
         81:df:0a:7b:b7:a2:79:12:a4:02:90:d3:83:64:8a:0f:f9:00:
         cf:9f:e3:5f:bc:ae:8c:ef:50:8a:87:7a:08:2d:09:7d:ff:c4:
         55:bf:5e:61:ef:b7:64:fb:d5:fd:69:e7:38:e5:e4:4d:ce:99:
         88:6b:df:9e:60:79:e7:43:e1:18:75:2f:7e:b9:68:25:df:db:
         2f:07:4e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 09:36:50 2026 by rpki-client