Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec41d7f9-bc32-3e05-b7bc-d4f3b61d8cc3.roa
File:                     ec41d7f9-bc32-3e05-b7bc-d4f3b61d8cc3.roa (raw, json)
Hash identifier:          5Esg/liqX/BI0fBE1fteq3bHgftQVjClOcZBJT9YWdk=
Subject key identifier:   97:8C:51:E4:FF:9A:80:F6:66:3B:6A:40:CB:66:F8:D4:B5:EA:63:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497AC52D3FD3CCD3C887C3A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec41d7f9-bc32-3e05-b7bc-d4f3b61d8cc3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        96.109.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:c5:2d:3f:d3:cc:d3:c8:87:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6e7a3327-933d-4755-a1d4-09611dad510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b5:17:93:2d:e2:24:fe:6f:9d:73:97:63:b2:
                    4c:93:5e:05:3b:e2:bc:1c:52:6c:a6:19:82:f6:e7:
                    51:90:a9:a9:2f:a4:7a:0e:27:42:8a:84:d4:93:08:
                    92:f7:6d:24:1a:af:f5:6f:02:10:0f:fa:f8:ff:25:
                    b7:8c:a3:f2:e3:a3:0d:f6:dd:11:6e:ee:0f:a1:ef:
                    80:e8:92:56:e8:57:b2:5e:54:fe:03:03:9e:01:b2:
                    11:ab:30:86:6c:de:32:a6:95:49:5c:34:e5:de:eb:
                    e9:0d:11:f1:8e:b5:37:70:a3:65:18:c3:a4:59:ad:
                    36:d2:5d:59:4c:a4:86:5c:47:c3:b8:97:25:d7:0a:
                    59:94:ba:81:2f:73:59:47:a4:9f:61:24:91:97:ec:
                    ec:d8:78:99:29:24:31:8e:5b:93:71:81:f6:8b:55:
                    fe:4c:00:85:f8:2d:15:01:c3:8e:5e:ab:5d:d0:73:
                    53:03:63:e5:69:71:58:a3:b4:cf:52:2a:c6:ab:80:
                    21:a1:d1:09:a0:a2:2f:53:20:07:fe:04:0c:fb:39:
                    63:3c:67:ac:41:ef:dd:06:0f:fb:bc:b7:b6:dd:db:
                    fe:60:f4:13:07:b6:cd:eb:00:5f:70:09:13:7a:93:
                    97:2d:c4:a2:c7:9e:9f:68:13:f7:ce:52:50:c7:b4:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:51:E4:FF:9A:80:F6:66:3B:6A:40:CB:66:F8:D4:B5:EA:63:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec41d7f9-bc32-3e05-b7bc-d4f3b61d8cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:33:95:71:3b:d3:8b:6b:5e:66:6e:74:7a:fc:2f:0c:92:81:
         1b:1b:34:98:a5:ee:1f:7e:ef:07:47:a9:7c:2f:a0:5a:1f:70:
         f2:61:07:6b:fc:95:74:92:00:90:b3:43:89:d5:17:86:7d:88:
         4f:ad:a4:02:82:78:46:2b:a2:47:e2:3c:77:37:c5:a6:24:39:
         b4:7b:56:77:a8:9d:dc:02:38:f2:a6:74:d6:55:9b:5c:a8:17:
         33:02:76:c8:6b:6e:62:88:8d:b3:44:df:06:c3:a9:21:60:7e:
         99:92:ab:61:45:8e:6e:27:cd:86:63:dd:be:9b:65:a0:5f:76:
         3c:76:c2:31:ed:d2:be:15:84:83:67:83:0e:2e:a0:29:3b:c9:
         9a:32:bc:91:8c:28:ca:10:a6:b4:80:75:cc:8d:9f:ac:ec:86:
         63:66:19:e8:3c:c1:91:5c:ee:5e:62:be:7a:5d:dc:37:0d:de:
         92:d2:70:21:24:00:cb:32:b0:5c:91:52:e0:3b:23:f1:fb:18:
         02:ab:b4:25:da:91:58:43:27:27:d9:3c:25:37:51:ab:d2:2e:
         bc:7d:0f:cd:86:19:7c:8b:5c:23:76:0e:6f:fd:76:04:54:03:
         7c:9a:87:45:ea:80:32:0c:b6:88:68:51:8c:84:1b:ec:d7:88:
         5f:2c:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:19:02 2026 by rpki-client