Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/96f6d874-5ff6-3048-b568-06006de76f43.roa
File:                     96f6d874-5ff6-3048-b568-06006de76f43.roa (raw, json)
Hash identifier:          OL4mxevXcVCWmDKSY1aNJ5cvVvmT9VLigRGoWTRM3Mo=
Subject key identifier:   3D:C6:DA:76:37:DE:45:32:E5:D4:2A:FB:15:2D:E8:61:9C:E5:1F:D2
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584E104F2F5809064A6CC0A37800
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/96f6d874-5ff6-3048-b568-06006de76f43.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     11096
IP address blocks:        35.128.196.0/24 maxlen: 24
                          35.128.196.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2f:58:09:06:4a:6c:c0:a3:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=33662433-4563-411f-a262-18557a7ee9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:cf:a5:fe:02:a0:a0:44:c8:18:f6:d4:05:
                    c2:3e:9a:d9:dd:01:b7:aa:04:27:8c:36:85:5d:9c:
                    2a:f3:f0:51:ec:79:09:af:43:86:36:ce:f4:f9:06:
                    97:ae:76:7d:2c:bf:3f:73:20:5a:15:11:98:52:36:
                    4a:6b:fb:10:4a:82:2c:f5:02:f5:fb:c2:77:cf:d3:
                    38:5f:36:6b:01:58:6b:68:68:2b:73:76:10:e6:5f:
                    f3:e6:b2:49:59:e1:1f:b3:ed:b1:a5:1c:46:c7:aa:
                    e3:20:94:8f:65:be:62:d7:97:71:cf:31:c5:37:38:
                    bf:84:ef:ee:2c:a2:5b:22:b3:78:3a:ab:42:69:5b:
                    4d:5c:24:86:21:75:44:74:87:86:ec:0a:a4:e5:54:
                    dd:00:e4:29:cd:0e:32:51:dd:48:96:ab:4f:2b:24:
                    6f:7e:7a:81:3e:7f:82:a7:29:1b:5e:9b:3c:61:a6:
                    ad:1e:ff:ab:e6:72:9d:7a:87:9f:51:3c:14:db:fa:
                    42:e5:23:46:5f:31:02:a8:e3:53:4c:5b:ca:0b:3c:
                    9b:f5:1c:51:69:12:fb:32:ee:f1:61:da:18:73:b7:
                    c2:75:42:f0:ed:1f:9a:60:e1:2e:64:b4:17:7c:6a:
                    7b:a9:98:8c:42:98:b3:9e:33:db:b7:c2:02:7e:b3:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:DA:76:37:DE:45:32:E5:D4:2A:FB:15:2D:E8:61:9C:E5:1F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/96f6d874-5ff6-3048-b568-06006de76f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.128.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:26:46:54:2c:df:e2:ae:a0:a7:92:e9:f5:5e:80:34:23:
         5f:08:0d:11:3b:ed:9a:8e:37:9e:30:92:37:fa:fd:8a:1e:c6:
         48:36:2b:b8:de:59:8e:33:58:fc:be:3c:c5:54:73:74:ce:b8:
         4b:63:c1:1d:10:1d:fd:0e:14:f7:b5:a7:e6:49:8a:11:b6:c6:
         38:e3:82:58:c8:b4:ef:ef:46:ed:25:02:4e:15:e8:f4:7e:35:
         a1:08:47:eb:ab:76:1f:e8:6f:00:e9:49:f1:7e:47:de:a4:40:
         ce:67:37:f9:f6:27:ca:05:97:ee:90:b1:15:07:b8:70:6b:d0:
         43:fc:68:1b:8a:cb:cd:b4:0d:79:f1:f4:e8:03:cd:f2:e1:b0:
         e9:44:62:65:55:35:c5:8f:e0:7d:bd:00:51:2b:a2:e4:7b:01:
         4e:94:8e:90:b4:61:51:14:f9:80:39:8d:3a:0d:d8:df:86:6f:
         84:2d:b5:10:94:f0:83:62:d4:59:33:6a:a9:ca:aa:f5:38:76:
         e8:c7:dd:29:34:95:d4:2f:90:52:5b:a3:c6:84:2d:23:d0:9e:
         4d:f5:3c:66:97:8b:d0:4b:95:53:3f:9a:0e:78:de:52:09:e3:
         07:2c:f4:07:e4:a4:35:7d:5a:ad:94:c5:c4:c4:21:16:d8:74:
         46:b1:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:53:01 2026 by rpki-client