Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
File:                     04eca2f6-f0e9-3553-a9ed-47e06df97943.roa (raw, json)
Hash identifier:          snkN/aj2lVDQfZfQDtv4Xsflir70UXi/kFnvH+BvoJk=
Subject key identifier:   51:B4:71:EC:83:17:F8:5D:4E:CF:6A:B2:83:F4:FE:F6:72:C5:5B:47
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584D422F7EB113B7827097CB52A0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     21433
IP address blocks:        144.36.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:7e:b1:13:b7:82:70:97:cb:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=07aa3da2-6598-4bb9-b629-0f2c57d97d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:1c:3f:f5:70:f0:6c:e5:3c:0d:2a:25:d0:
                    74:9f:19:6b:15:67:ba:ac:a2:31:26:db:78:d8:57:
                    95:06:bb:f5:ff:45:57:31:c8:3f:22:73:7c:ef:0b:
                    a8:8b:c7:ad:0f:19:9a:43:40:7c:e6:e1:7c:69:d4:
                    fc:d9:55:ed:91:1c:18:08:c0:08:8b:f9:a6:91:77:
                    b4:a5:13:cd:10:e9:4d:eb:b3:8a:d6:cc:c6:fe:4e:
                    a5:87:13:20:6d:33:05:76:ee:84:0e:b9:97:a3:d0:
                    f1:ec:6f:14:a7:1e:8d:c6:1a:89:6d:c9:97:1f:5d:
                    2c:2d:5e:6a:5f:7c:a5:57:8f:1e:6f:54:34:46:66:
                    cc:7f:22:15:b0:8f:db:a6:9b:43:53:ea:6b:ba:02:
                    28:b4:15:37:c0:24:89:50:8e:84:e8:4d:2d:ba:83:
                    ec:97:e5:61:0c:39:44:17:ff:05:48:7f:fc:c9:67:
                    dc:f8:bd:2a:be:03:3d:03:bf:db:e2:69:bb:2c:3d:
                    86:87:98:cc:fb:a3:b3:fb:26:79:12:5b:67:c9:19:
                    ae:8d:67:67:a3:8c:0f:f5:c6:0b:19:1f:52:10:da:
                    85:0a:64:f6:3d:53:d9:97:49:ab:33:cc:ce:4d:71:
                    b8:a7:55:75:8b:37:a4:be:27:d6:d8:d4:20:ac:a9:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:71:EC:83:17:F8:5D:4E:CF:6A:B2:83:F4:FE:F6:72:C5:5B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1d:b8:82:c7:a5:bf:7c:8a:11:64:a2:68:c3:66:55:31:a7:
         dc:39:46:7e:02:10:82:78:e3:43:a8:2d:37:56:06:6c:2e:25:
         c8:3a:b3:4b:03:06:2b:b4:61:f4:c4:ef:94:32:7f:81:ca:e6:
         f8:ef:8f:0a:73:e0:6b:d9:ed:3e:89:a8:a0:4a:7e:0f:a2:6c:
         fc:67:30:1d:30:97:dd:9d:56:6f:fe:17:ff:6b:8b:d3:a3:19:
         75:66:b3:25:6d:89:ef:09:cc:be:d2:93:00:63:60:47:55:26:
         4e:6d:12:83:ef:4c:38:0b:4e:41:e8:67:e6:de:2a:03:ed:71:
         b5:c1:94:40:a9:4c:37:91:be:6b:0e:e4:30:95:05:10:58:6b:
         a3:12:88:79:5f:08:f5:2a:05:39:78:c0:40:35:52:ec:ef:06:
         79:d7:79:a5:16:a2:5f:40:3d:ba:4c:c2:22:46:77:d2:c2:24:
         2c:5e:4e:cb:1a:b9:2d:01:dd:c2:2e:01:6c:e5:05:7f:c8:ec:
         80:b3:ae:0b:39:6e:0a:50:34:38:2a:98:0d:95:8c:a8:11:8d:
         f7:5f:36:47:ad:3f:86:f8:02:e7:11:67:e9:75:cc:2c:8a:aa:
         0e:f6:32:e3:1f:0f:41:d9:00:f9:e0:45:98:0d:d6:4d:66:a1:
         fd:35:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:32 2026 by rpki-client