Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa
File:                     a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa (raw, json)
Hash identifier:          NSFgNfmgc1NKnJqugEN2TT2PasGhhEXX7mMqW2FpTS8=
Subject key identifier:   96:9A:47:D1:42:E9:AF:09:7B:EA:D5:71:77:1E:3C:2D:43:18:01:A5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3722A0E564E1ABD9054D600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        96.35.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:2a:0e:56:4e:1a:bd:90:54:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=bda36901-414e-416d-be4f-493d03a92c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:7f:60:e1:57:98:6c:ea:29:11:f2:ef:2e:
                    4e:86:c4:a3:1a:85:dd:80:3c:a6:fb:af:c2:ef:ea:
                    12:29:c7:e1:f1:3f:d1:c1:1e:b6:be:c1:78:7f:67:
                    7a:23:51:c1:79:42:a7:9e:4f:c7:63:26:d6:72:1d:
                    83:83:95:b8:ea:05:43:84:7e:e1:f4:7a:14:f4:6a:
                    2a:b3:ab:63:f0:93:42:92:d8:b3:bc:7e:88:c7:0d:
                    79:ed:ec:ef:90:a4:77:95:61:01:af:53:3b:bd:d3:
                    d3:5a:d6:4e:8c:24:95:f0:d3:dd:81:70:12:b4:5d:
                    d0:66:a2:fa:a5:0f:3a:6d:d2:f5:14:d7:a9:85:8d:
                    40:e7:58:4f:70:b8:3a:6c:00:6b:3b:44:71:14:51:
                    af:ac:19:12:0d:46:d0:0d:a9:1c:da:6b:34:fd:0d:
                    d6:db:32:db:6b:e8:e5:ba:c4:da:b2:5b:b9:a0:a1:
                    e3:75:d1:0c:63:d4:3b:8f:1a:89:dd:20:dc:ac:a1:
                    aa:11:f1:81:7d:ea:f0:c5:77:37:79:8f:fc:a3:cb:
                    27:d8:f0:60:9f:8c:31:94:0b:b9:79:c9:0b:36:f4:
                    1c:e6:ab:f8:34:9e:de:df:ef:16:fe:53:43:90:70:
                    25:bc:6c:38:ef:7b:db:ff:6e:5f:b7:d9:5c:d6:b7:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9A:47:D1:42:E9:AF:09:7B:EA:D5:71:77:1E:3C:2D:43:18:01:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a4cfffc4-3ccf-34dd-9331-2589619abb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.35.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:28:c3:6d:d0:4d:68:c6:4a:38:b6:66:b8:73:69:9b:e6:c0:
         d4:4d:03:03:36:4e:35:02:75:9f:bf:c9:5f:c4:ab:73:4a:63:
         72:2d:1c:09:44:34:67:1b:be:7f:8a:7e:ab:99:18:89:9a:2a:
         ea:c2:7f:fb:6c:3f:fb:6a:b0:15:dc:19:15:4f:29:79:9c:61:
         be:3f:86:61:75:fd:d5:55:85:1d:92:26:4c:eb:18:df:3e:f9:
         8e:1a:b6:71:63:17:2e:95:a8:33:d4:56:27:cd:f9:88:01:eb:
         79:08:d8:34:4f:db:65:97:3f:93:cc:56:f9:f5:e3:7e:c2:d4:
         61:3c:89:e1:e7:6c:7f:ab:0f:8f:c0:67:a4:51:9e:e7:ca:78:
         a8:af:dd:89:d2:da:d1:27:02:80:9b:f1:48:3c:c5:a9:66:46:
         e0:90:c9:06:ff:5e:12:2a:2c:73:e3:50:8c:09:bb:96:11:7e:
         b0:ae:b3:a6:76:8f:67:a6:0a:ac:60:b2:17:67:c9:bc:61:f5:
         76:b3:fd:5d:45:60:69:2e:8b:49:88:d6:11:c9:9b:e2:94:e6:
         3b:26:42:d6:c8:f9:14:d7:4c:56:2b:30:a8:26:a9:6c:25:89:
         26:4f:b9:7f:48:1e:fd:6a:1d:19:6e:fd:49:f6:e3:07:92:77:
         ad:ea:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:20 2026 by rpki-client