Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa
File:                     dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa (raw, json)
Hash identifier:          x3T86VdD0O81sQXUNF7luHZ4e2FHSiiIiPfGPTIQyN8=
Subject key identifier:   5F:2C:78:46:35:D9:57:87:84:BD:81:DA:0D:59:93:8A:83:50:55:B6
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584EED5200509F53B03BDECD1BF0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     20454
IP address blocks:        96.47.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:00:50:9f:53:b0:3b:de:cd:1b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=7afef1ab-ce54-430d-93c5-5efb315d95f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:ce:60:f2:8a:9a:c6:ae:1a:e0:30:e5:fb:
                    d4:7a:0b:47:e6:d2:1d:f4:dd:d6:3c:0d:10:53:5d:
                    92:89:87:63:96:fd:ec:75:dd:fe:6c:4e:1b:03:20:
                    2f:c5:d6:df:7a:30:5f:17:93:64:1b:a8:0c:e7:08:
                    6b:af:36:62:50:2d:d9:b9:7f:1e:77:85:fd:21:fe:
                    a6:84:3e:74:eb:3a:b5:b9:09:7d:1b:86:03:21:0e:
                    19:09:6c:a1:05:05:d4:fe:e9:ec:a6:00:4e:e1:a9:
                    3e:33:e7:95:e7:ae:32:07:0a:e6:7f:d2:fe:33:31:
                    11:c5:43:85:b6:d7:3e:03:f2:ee:82:99:86:32:f6:
                    34:92:09:41:31:e3:1f:01:27:7e:0a:13:86:f2:04:
                    62:84:e6:90:71:8f:10:fa:f7:e6:2a:ee:63:55:0d:
                    8f:72:28:91:07:4f:61:95:78:d6:cd:0e:be:3c:bd:
                    6a:bf:67:d9:54:dc:f0:d3:76:4e:95:b9:b8:eb:ff:
                    17:86:9e:47:1d:49:53:20:28:c1:2d:29:fb:95:54:
                    e7:50:98:55:0d:cb:c0:b4:75:c2:d7:4d:0b:10:66:
                    e0:94:41:d2:51:13:1f:62:ed:a6:4a:ad:8c:23:77:
                    99:4b:2f:bc:4b:1d:ba:32:c7:a1:d3:04:00:6f:8e:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2C:78:46:35:D9:57:87:84:BD:81:DA:0D:59:93:8A:83:50:55:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:88:ca:3f:0c:d5:60:be:29:7d:1d:b7:74:f8:79:2f:25:96:
         c3:a4:8b:7d:70:b5:38:67:74:88:52:49:a4:94:91:ce:4c:7d:
         b2:66:d2:d2:86:89:5b:60:70:4c:ff:ee:ac:e3:ba:e3:5a:f6:
         05:26:35:1e:f8:6b:de:39:33:34:2e:ae:05:cf:4c:ab:cc:28:
         86:dc:73:2a:3d:6d:f4:1f:3a:ad:64:89:42:d1:19:2b:1e:32:
         dc:c0:8b:0b:78:4f:1c:fa:26:c5:ad:ca:92:96:1c:e8:5c:44:
         5b:c3:63:0e:e0:5d:c5:46:79:8c:88:3f:fe:8b:30:e7:3b:6a:
         d4:d9:4e:4b:40:90:a5:51:5c:67:b1:f1:f4:47:e0:07:fe:70:
         70:41:37:1a:9f:82:29:fb:10:91:9e:54:4c:e2:3a:8b:e4:da:
         57:ab:a2:68:7a:6a:ad:b9:84:93:46:55:60:4d:a4:61:97:56:
         a8:06:77:4a:ab:27:a7:e3:ec:42:42:ae:f2:12:00:3b:32:69:
         0a:d9:ac:66:25:a4:b3:e2:d9:1e:01:99:44:3e:8d:83:dc:a0:
         73:56:06:43:71:09:2c:41:60:a9:af:6c:5d:c6:5e:b7:ad:29:
         ad:48:cf:68:3f:11:e1:c6:4b:cc:f1:25:f2:40:5f:0c:1b:fb:
         95:b0:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:57:00 2026 by rpki-client