Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd14a580-78bb-3506-89cf-f06871a2cfd7.roa
File:                     cd14a580-78bb-3506-89cf-f06871a2cfd7.roa (raw, json)
Hash identifier:          p4Zc4eHfYsayS7m2vC05zabK4zH4+UO1Q8888fQ/TUI=
Subject key identifier:   75:F0:C9:F0:A1:9C:20:31:DF:F2:B1:2B:B9:19:E1:BD:D6:8E:EC:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584FA85E1C3336F471E2EAA87700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd14a580-78bb-3506-89cf-f06871a2cfd7.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     6167
IP address blocks:        96.12.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:1c:33:36:f4:71:e2:ea:a8:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=8604ae6c-17b3-4c62-9a63-83526fb4a476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:b5:48:de:61:20:a9:24:63:03:da:df:0c:
                    48:87:56:b0:e1:4f:b9:fa:d0:ed:46:12:4e:5b:d3:
                    e2:74:b0:98:6a:9e:e9:11:16:d5:55:23:46:d1:f3:
                    39:1c:1b:09:9f:98:ec:2f:2b:ce:1e:34:00:c3:55:
                    92:d8:26:5d:17:7f:a2:a7:56:b4:1c:f9:ba:f9:27:
                    1b:6c:41:3e:f5:af:85:f5:56:4e:4a:9f:87:36:d4:
                    4a:dc:00:b4:30:1c:c2:9f:c5:f7:64:d3:0e:43:9a:
                    22:3a:7c:be:0d:ae:df:a2:05:32:6b:81:82:57:99:
                    0c:fa:dc:ec:34:ef:54:af:25:c5:45:95:1e:75:e3:
                    ef:ea:cb:41:1b:e6:d1:5e:67:eb:ef:0c:1c:69:05:
                    2c:db:cc:a0:e1:29:67:69:9b:0e:1c:f4:c5:f8:8f:
                    dd:4f:15:44:2c:73:4a:91:58:7c:74:99:35:51:26:
                    5d:66:b4:29:4b:66:97:26:16:90:8a:b3:6e:3c:aa:
                    bd:fb:dc:4c:b5:de:c9:af:be:8a:97:d3:55:36:6a:
                    28:25:6a:d1:5f:5b:69:06:40:f8:d8:d2:7b:56:91:
                    0f:d3:1f:6c:12:b8:ce:32:95:f5:c0:ef:81:b6:f8:
                    62:fd:60:7e:72:0d:21:2e:db:d2:a4:55:89:57:55:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:C9:F0:A1:9C:20:31:DF:F2:B1:2B:B9:19:E1:BD:D6:8E:EC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd14a580-78bb-3506-89cf-f06871a2cfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.12.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:82:71:2c:e0:57:a6:90:aa:66:01:fc:60:e7:e2:1a:ba:
         90:88:4f:4e:6e:de:4e:a7:35:59:c8:95:d1:71:a0:b3:96:0a:
         54:4b:e0:d4:91:50:98:5e:d4:17:a2:bc:30:45:55:78:c2:de:
         bc:51:92:36:d9:88:ba:35:b2:68:3a:c7:ed:ba:d0:5c:c9:6c:
         87:0c:21:9b:82:3d:b9:c7:c8:fe:d4:e4:a3:a4:a3:27:06:83:
         45:71:59:98:b2:1e:85:54:8e:09:8e:05:68:13:d7:51:92:05:
         04:9a:0e:66:5e:33:58:26:00:28:80:fe:c0:1b:4c:15:71:64:
         2d:fa:52:4c:f1:ed:57:05:3f:9d:7a:4d:49:5e:c9:34:92:15:
         26:7f:d7:07:e4:13:6a:88:92:7c:6e:c6:0d:64:b9:62:5b:a8:
         d5:f3:d8:76:95:68:a9:1c:48:36:af:98:5e:4b:dc:8b:47:39:
         55:66:22:67:69:7f:e8:3c:9a:40:e1:43:e7:de:e7:da:f5:09:
         f3:22:0f:75:dd:f4:48:5d:a2:12:9d:2c:71:ea:48:fd:7f:8f:
         6f:75:40:52:a2:d1:0e:c7:b1:ff:91:9f:48:f5:9d:29:d6:b2:
         85:07:55:46:1d:8b:e6:04:37:f0:55:95:2c:3f:0f:16:00:cc:
         29:4d:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:34:25 2026 by rpki-client