Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/963dcdc4-4689-32c8-8cd7-e9d84606994f.roa
File:                     963dcdc4-4689-32c8-8cd7-e9d84606994f.roa (raw, json)
Hash identifier:          DfLrMP7KezHOozbsM+nRGqQVPECYKKi4MFi4nD1u24w=
Subject key identifier:   2B:4F:0F:C7:DA:9E:E8:4E:28:9F:AD:D8:6F:55:32:0E:B7:C4:AB:B5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F89A884F49F752C847C178700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/963dcdc4-4689-32c8-8cd7-e9d84606994f.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     20940
IP address blocks:        96.6.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:84:f4:9f:75:2c:84:7c:17:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=b9248e55-986c-47d6-8527-a78c3c43a6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:58:b7:2d:fa:ea:6d:cc:9b:10:a0:f9:41:49:
                    32:0e:dd:34:f2:ba:98:73:c1:57:b4:82:d7:06:50:
                    42:34:da:a7:79:99:d9:86:6e:eb:dd:e6:88:2e:bb:
                    6e:02:6c:da:9a:c9:97:2c:18:b7:f6:26:f8:6c:08:
                    c8:fd:ce:f2:e0:43:3f:fc:0a:e7:87:96:13:aa:31:
                    ca:88:43:88:95:36:f0:6c:2b:1e:90:cf:e4:bd:d4:
                    1a:3e:a1:11:16:a5:c3:9d:e3:71:91:69:7b:19:ef:
                    47:4b:29:91:2e:d9:d4:18:12:d1:64:4c:3a:44:0d:
                    f1:f3:cb:4f:af:45:42:ad:2a:98:fe:a2:f2:1f:63:
                    74:7f:79:4a:8d:c8:11:ec:35:2c:79:e2:ce:90:7f:
                    80:52:05:23:ec:32:a9:87:0d:8c:fd:db:f0:fd:cf:
                    ef:f9:02:51:08:69:c7:88:4d:13:75:5b:12:5c:ae:
                    fd:27:20:f0:76:81:e6:72:f5:2a:a9:29:d4:2d:32:
                    c3:32:32:df:94:ae:0b:14:23:81:d8:43:89:2c:f3:
                    93:c8:87:b8:b5:28:f3:13:7e:8a:10:ff:0a:80:f0:
                    ae:85:bf:a7:50:24:27:5d:c9:b2:6f:8e:e7:52:0b:
                    1f:c2:eb:e0:46:92:42:5b:47:d4:1f:47:9d:1c:32:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4F:0F:C7:DA:9E:E8:4E:28:9F:AD:D8:6F:55:32:0E:B7:C4:AB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/963dcdc4-4689-32c8-8cd7-e9d84606994f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.6.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:22:10:16:56:5a:f2:66:0b:ad:30:f9:bb:e3:c0:2f:df:
         29:b8:e5:f4:1e:fb:94:25:53:3b:9f:2f:17:59:4d:60:3c:79:
         64:da:3c:4f:5d:35:34:76:ab:f6:2c:f6:25:68:aa:ca:d4:86:
         48:92:8c:84:de:33:47:d9:b3:6d:ce:1e:5e:1f:c7:5a:b6:7f:
         67:20:10:e7:b3:e4:d1:4e:77:0a:83:f5:c5:c8:0e:a2:db:4e:
         45:d6:6c:e1:ca:b2:6b:be:be:f3:64:cd:38:f3:98:81:ae:89:
         74:7b:44:b5:d3:c2:8d:44:7a:3e:a0:31:7b:76:7c:c2:24:77:
         04:3b:8a:7c:35:22:96:30:f6:b9:71:42:4a:78:71:d7:75:48:
         27:1b:96:52:e0:99:07:1d:21:c1:98:d6:4a:04:ef:d4:83:23:
         fa:78:66:7e:64:8c:d4:a4:b9:ca:af:be:99:a8:a8:60:51:eb:
         be:a6:bf:b9:e5:80:ab:2e:dd:1c:f4:13:c2:b2:d5:85:be:24:
         e1:02:19:ae:e2:46:1a:71:42:54:4d:60:4b:17:9c:98:09:f4:
         2d:c2:13:1f:be:f4:01:eb:fc:d2:06:1e:bc:77:25:39:2a:0c:
         75:9a:0b:be:c0:3a:37:19:f7:4b:e4:63:cf:61:64:87:fb:aa:
         22:83:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:28:26 2026 by rpki-client