Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa
File:                     96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa (raw, json)
Hash identifier:          ir9VwP30Nf4PFaY2nkJ+nra0wgHSZJt4WQKff8OorLk=
Subject key identifier:   10:28:05:93:1D:53:28:38:3B:19:51:44:7B:82:F7:96:95:10:9E:7E
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584E640F63F09FB588AD61AAB200
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     1632
IP address blocks:        65.51.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:63:f0:9f:b5:88:ad:61:aa:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=4c9cfd97-7dab-490c-aaac-fcbdca3fcfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:28:1f:e7:16:37:8d:73:0b:0c:49:b2:3f:
                    51:63:5d:a6:eb:24:3c:e3:8d:a3:f3:13:8b:bf:b7:
                    f2:cf:c2:16:d6:9a:f3:79:8c:af:02:b9:f9:f5:3a:
                    b8:0b:73:54:57:fd:18:a8:94:3f:c5:a0:8c:af:af:
                    f4:1d:8e:bd:2b:08:7a:ce:d3:6f:3d:72:7d:49:90:
                    42:ef:a9:ce:97:bb:7e:73:98:b6:e1:b0:52:c8:d1:
                    6a:10:ff:43:7c:0b:2f:2a:07:81:02:2b:7c:89:b1:
                    52:b5:02:ca:38:fc:12:01:e2:60:78:cd:d9:a9:d9:
                    51:2d:da:0b:64:1f:cb:68:39:69:7f:bf:9a:5f:a8:
                    fe:8b:63:16:35:52:35:25:47:bf:a8:44:18:7e:1d:
                    ee:8e:75:31:c3:33:6f:6e:cc:0c:25:b9:49:bf:06:
                    31:26:a2:f0:51:d6:bf:1e:c2:15:28:31:c2:36:f0:
                    d1:ba:af:7b:ba:1e:4c:e7:f5:93:84:86:c3:e9:14:
                    52:3f:f7:a2:7f:73:3f:27:e4:6e:09:6f:c8:72:d0:
                    f5:51:00:6a:ee:2d:15:22:a7:ef:77:44:ff:7c:95:
                    ef:53:21:9b:8b:10:42:26:b9:36:1e:8b:8b:f1:f6:
                    53:ae:ae:16:1c:93:25:67:9a:cd:ef:22:24:8b:a5:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:28:05:93:1D:53:28:38:3B:19:51:44:7B:82:F7:96:95:10:9E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:5c:d8:af:e7:a3:96:d3:c4:00:91:3d:8d:bf:2c:52:cc:
         db:0b:44:63:ae:94:71:65:d7:18:42:63:97:96:1b:79:2f:30:
         67:0c:f3:ed:78:4a:5a:72:9e:a2:e5:10:2a:30:a4:72:a5:cf:
         00:26:12:ff:fa:68:b7:62:19:8c:ac:c0:d2:9a:9b:51:6a:ed:
         01:06:9d:e0:67:e2:fa:7b:86:84:7d:d0:b3:5d:d2:40:59:be:
         66:7b:2c:7d:85:2b:15:ee:53:46:7c:40:9f:54:4d:25:bd:4c:
         cf:f8:c8:27:e3:24:be:b0:ef:c6:dc:da:5a:b8:2f:ff:8b:a5:
         d2:78:08:2b:95:c7:0a:04:80:d0:fc:0a:00:67:cb:5a:45:bf:
         b3:91:5a:21:e7:7b:d9:47:55:bc:d8:db:bf:61:44:e8:4f:52:
         58:ba:e0:bc:e7:ae:db:56:0a:47:21:44:1f:ca:04:35:a4:52:
         a3:e3:56:19:9a:c7:37:1f:32:75:e7:a5:45:73:dc:0c:bf:03:
         e0:4b:c7:7f:61:9b:6c:c3:7b:5f:39:d4:73:1b:74:8d:37:38:
         fa:af:04:f9:5b:ae:44:26:d6:3f:d2:99:f1:44:4b:d1:38:ca:
         6b:be:d5:df:d3:da:02:3a:64:37:b9:40:17:bf:5f:ab:02:89:
         1e:a4:33:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2Pwn7WIrWGqsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NGM5Y2ZkOTctN2RhYi00OTBjLWFhYWMtZmNiZGNhM2ZjZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/coH+cWN41zCwxJsj9RY12m6yQ8442j8xOL
v7fyz8IW1przeYyvArn59Tq4C3NUV/0YqJQ/xaCMr6/0HY69Kwh6ztNvPXJ9SZBC
76nOl7t+c5i24bBSyNFqEP9DfAsvKgeBAit8ibFStQLKOPwSAeJgeM3ZqdlRLdoL
ZB/LaDlpf7+aX6j+i2MWNVI1JUe/qEQYfh3ujnUxwzNvbswMJblJvwYxJqLwUda/
HsIVKDHCNvDRuq97uh5M5/WThIbD6RRSP/eif3M/J+RuCW/IctD1UQBq7i0VIqfv
d0T/fJXvUyGbixBCJrk2HouL8fZTrq4WHJMlZ5rN7yIki6VT3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBAoBZMdUyg4OxlRRHuC95aVEJ5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvOTZkMmNmMTEtZTBjZC0z
MDk2LTk0ZDgtNGY0MmJmMmVmMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTNfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKV8XNiv56OW08QAkT2NvyxSzNsLRGOulHFl1xhCY5eWG3kvMGcM8+14
SlpynqLlECowpHKlzwAmEv/6aLdiGYyswNKam1Fq7QEGneBn4vp7hoR90LNd0kBZ
vmZ7LH2FKxXuU0Z8QJ9UTSW9TM/4yCfjJL6w78bc2lq4L/+LpdJ4CCuVxwoEgND8
CgBny1pFv7ORWiHne9lHVbzY279hROhPUli64LznrttWCkchRB/KBDWkUqPjVhma
xzcfMnXnpUVz3Ay/A+BLx39hm2zDe1851HMbdI03OPqvBPlbrkQm1j/SmfFES9E4
ymu+1d/T2gI6ZDe5QBe/X6sCiR6kM38=
-----END CERTIFICATE-----
Generated at Mon Jul 13 11:35:54 2026 by rpki-client