Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa
File:                     2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa (raw, json)
Hash identifier:          qVdoysyOA1oOfEJqLd9ZR6Q5RrmYFDDBoTlWKZBTcRw=
Subject key identifier:   0F:36:7F:27:39:3F:39:22:62:ED:0E:39:A0:A0:24:C9:D8:E9:70:C5
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584E38E4A5179A267D448921A180
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa
Signing time:             Fri 19 Jun 2026 09:54:28 +0000
ROA not before:           Fri 19 Jun 2026 09:54:28 +0000
ROA not after:            Thu 17 Sep 2026 09:54:28 +0000
asID:                     21433
IP address blocks:        170.252.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:38:e4:a5:17:9a:26:7d:44:89:21:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jun 19 09:54:28 2026 GMT
            Not After : Sep 17 09:54:28 2026 GMT
        Subject: CN=e68a6db6-a7ba-461d-b59d-8af63a9f8aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:a1:b4:dc:b4:51:e6:55:d3:5a:4d:53:5d:
                    78:40:e2:1b:9b:c8:cb:70:0a:54:0f:7d:6b:32:f3:
                    1a:dc:e1:70:0e:74:6d:f7:f2:f3:4d:92:a2:85:97:
                    23:a6:9c:2b:4b:ea:da:b0:c0:77:26:3f:80:f2:4b:
                    71:90:2f:ba:80:67:a2:42:67:a4:b0:67:d0:26:4c:
                    75:6d:c1:01:b9:db:82:71:07:42:4e:f4:4e:91:7b:
                    b3:d3:ab:7c:08:bf:8f:1a:6d:75:ff:eb:f5:77:43:
                    3e:07:32:59:f4:99:8d:3d:cc:5e:90:60:e3:bf:8f:
                    09:e4:c0:94:ef:45:3c:d4:a9:5d:bb:fa:af:26:1d:
                    a4:1f:c6:cf:a3:8f:40:34:ca:77:96:06:c6:3e:b9:
                    a3:50:2e:e0:44:8d:7f:5c:7d:39:9e:cc:cb:a4:5e:
                    a6:aa:96:f5:67:1d:3a:03:7c:84:05:7c:35:ea:82:
                    c4:42:e7:78:1a:52:e9:b0:c1:e1:94:b8:8b:08:03:
                    03:41:da:bb:d9:71:5f:83:99:ef:40:2d:20:c6:0f:
                    49:9e:7a:7a:79:37:f9:8d:02:22:0d:ee:bb:fc:13:
                    88:79:87:af:71:a8:0c:5d:3a:f0:2b:66:86:28:ec:
                    d6:3d:2d:99:85:9d:12:35:fe:cb:9d:ff:3e:0b:6c:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:36:7F:27:39:3F:39:22:62:ED:0E:39:A0:A0:24:C9:D8:E9:70:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.252.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:57:5b:1a:c9:2e:72:65:f2:ea:0f:72:dc:cf:75:04:73:
         bd:b6:76:d6:5c:85:e2:9a:b1:e0:e4:fa:74:fd:c6:ba:dd:94:
         02:18:ca:32:60:b8:a5:36:29:4d:e5:ed:a4:de:06:d4:23:f4:
         a5:44:20:7e:af:2c:38:e6:9e:10:fa:02:31:6c:22:e0:19:e5:
         3e:34:48:0a:d3:7c:09:c2:a2:6c:fd:b5:b1:b2:d8:db:c2:4c:
         1c:43:13:c8:2a:83:00:b7:2f:48:ff:67:66:0e:63:a9:36:42:
         63:c1:11:3e:fd:b8:85:cb:9d:21:92:74:b4:ab:6e:91:54:cd:
         7f:2b:46:40:b5:88:2e:3c:ba:b2:46:e8:bc:9b:cc:40:a2:a9:
         06:e0:7c:46:40:8e:18:8a:c5:e8:f1:60:5f:52:53:17:3d:b4:
         58:45:5b:35:67:f0:41:8c:b9:3f:1a:e1:8b:5e:28:9d:c2:de:
         8f:09:18:50:24:1f:af:a5:ed:5f:fe:37:ad:23:8d:40:87:91:
         8a:80:b2:0a:a6:bb:4a:cc:98:9e:ab:5c:c8:08:20:13:7c:1b:
         d5:8c:01:36:ea:e1:29:f3:90:7f:43:72:97:ff:bf:bc:40:41:
         cf:f6:4c:e6:30:ce:53:79:14:a2:ed:aa:62:d1:74:5f:0a:17:
         e3:32:e9:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE445KUXmiZ9RIkhoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDYxOTA5NTQyOFoXDTI2MDkxNzA5NTQyOFowLzEtMCsGA1UEAxMk
ZTY4YTZkYjYtYTdiYS00NjFkLWI1OWQtOGFmNjNhOWY4YWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphmhtNy0UeZV01pNU114QOIbm8jLcApUD31r
MvMa3OFwDnRt9/LzTZKihZcjppwrS+rasMB3Jj+A8ktxkC+6gGeiQmeksGfQJkx1
bcEBuduCcQdCTvROkXuz06t8CL+PGm11/+v1d0M+BzJZ9JmNPcxekGDjv48J5MCU
70U81Kldu/qvJh2kH8bPo49ANMp3lgbGPrmjUC7gRI1/XH05nszLpF6mqpb1Zx06
A3yEBXw16oLEQud4GlLpsMHhlLiLCAMDQdq72XFfg5nvQC0gxg9Jnnp6eTf5jQIi
De67/BOIeYevcagMXTrwK2aGKOzWPS2ZhZ0SNf7Lnf8+C2zrqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA82fyc5PzkiYu0OOaCgJMnY6XDFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMmQzNWZmNjUtMzgyZC0z
YjFkLWEzZGUtOTdkY2E0YzgyZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC00V1sayS5yZfLqD3Lcz3UEc722dtZcheKaseDk+nT9xrrdlAIYyjJg
uKU2KU3l7aTeBtQj9KVEIH6vLDjmnhD6AjFsIuAZ5T40SArTfAnComz9tbGy2NvC
TBxDE8gqgwC3L0j/Z2YOY6k2QmPBET79uIXLnSGSdLSrbpFUzX8rRkC1iC48urJG
6LybzECiqQbgfEZAjhiKxejxYF9SUxc9tFhFWzVn8EGMuT8a4YteKJ3C3o8JGFAk
H6+l7V/+N60jjUCHkYqAsgqmu0rMmJ6rXMgIIBN8G9WMATbq4SnzkH9Dcpf/v7xA
Qc/2TOYwzlN5FKLtqmLRdF8KF+My6Wg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:18 2026 by rpki-client