Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa
File:                     dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa (raw, json)
Hash identifier:          RuhkGc4Xqun770iHYLQ6esVOkDwiQ5tLOaxRaLQFl4Y=
Subject key identifier:   E0:79:6C:36:95:DB:06:7C:81:6F:87:6E:25:CA:FA:5D:00:64:92:F5
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584F8F3DAAD5F1A3EA5272B56480
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     20454
IP address blocks:        96.47.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:aa:d5:f1:a3:ea:52:72:b5:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=4c27c31f-fd91-407f-a47a-2d04b90801c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:f1:b9:06:04:29:f7:c0:d3:63:73:90:3a:
                    9e:57:2b:34:ff:0a:08:06:e2:12:55:85:f4:23:ef:
                    31:be:c0:4c:21:c5:41:90:73:90:6e:8f:6a:cb:66:
                    bb:f5:82:59:1a:8c:74:ee:c7:2c:4c:f4:26:70:4c:
                    59:7f:35:86:57:16:6a:71:a9:a5:6f:71:4d:e8:0c:
                    57:9e:ec:ec:ba:ea:30:14:0d:91:11:64:7f:29:b5:
                    57:3e:ee:d2:cc:40:62:96:a3:98:6a:74:47:c1:b1:
                    d4:13:8a:44:ef:ef:22:14:0b:98:cd:08:4d:e9:a2:
                    e0:ec:2f:03:ea:35:d6:f8:cc:01:13:6c:ad:19:86:
                    88:b0:04:09:eb:b0:be:6c:76:bb:68:93:fc:5b:a2:
                    ae:03:f7:9c:52:9e:93:78:92:92:61:5e:6b:df:50:
                    f9:8c:a3:cc:c3:95:64:81:07:0d:c4:e8:b8:a4:2b:
                    71:b5:90:8d:e8:b6:f3:67:48:9a:03:10:69:b8:f9:
                    a6:98:c3:7c:b8:e9:f7:c6:a7:7d:42:8a:ed:ea:ea:
                    bb:30:03:66:54:8e:58:9b:b4:d7:e6:98:22:33:a7:
                    b9:db:6b:3d:11:87:5b:2a:69:d6:e5:44:20:66:9a:
                    f7:dc:63:69:58:16:61:bb:c1:63:61:dd:db:82:ec:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:6C:36:95:DB:06:7C:81:6F:87:6E:25:CA:FA:5D:00:64:92:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:89:3e:23:66:fc:5c:0d:66:f5:be:ea:fc:3d:01:ff:f0:
         eb:58:20:87:6c:0d:5a:01:dc:d2:89:62:5c:bc:89:d5:64:a7:
         fe:f2:b4:88:54:81:42:b2:86:eb:2b:a8:ae:da:0f:1b:71:2e:
         2a:e4:9c:97:4a:cc:c4:a3:90:62:6f:54:bc:35:c4:70:2e:39:
         76:c3:cb:d3:b1:ce:24:be:42:a3:0f:09:6d:c0:74:0f:0b:d0:
         9b:90:6d:41:99:3c:3c:9f:42:c6:0c:d2:c5:66:a4:34:ec:ee:
         27:69:42:50:3a:65:79:c6:dd:d3:a3:94:46:0a:f2:57:3b:2e:
         86:dd:c9:14:e1:2e:b7:eb:33:d0:96:a1:ed:e1:ba:de:3d:d5:
         84:52:0f:c0:e1:ab:8a:48:53:a9:89:dd:38:09:d2:3c:66:56:
         8c:8e:d6:b4:e6:25:b3:59:94:b6:ec:bf:77:20:a4:e7:56:55:
         e9:c0:58:ae:05:82:17:56:48:e1:f0:79:a6:12:7b:71:17:14:
         59:2f:db:50:5a:5d:83:36:36:ba:bc:75:65:8f:68:cf:91:29:
         43:32:cf:8e:d2:04:d4:c7:b5:5f:e8:be:7f:0e:d7:d4:67:bb:
         47:0d:12:1f:56:8e:16:04:86:ba:73:06:c3:83:3f:46:01:51:
         59:01:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:29:16 2026 by rpki-client