Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa
File:                     7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa (raw, json)
Hash identifier:          +Y20a6omV4vfe6hVol2Jb3oAnUPU/BZFc87EVfeEqNM=
Subject key identifier:   38:BA:76:8A:C0:20:DD:E9:14:AF:F8:D0:CE:60:FB:41:53:81:D5:5D
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584D422F81F4736C3E831BFDCCE0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     21433
IP address blocks:        144.36.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:81:f4:73:6c:3e:83:1b:fd:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=651585b1-5d24-4b34-a2cc-3c4e2c58bd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b4:0c:b9:60:c3:49:6d:ca:55:23:2f:24:bf:
                    37:94:e6:4d:86:e3:85:2f:f9:2d:1d:8c:1f:e3:37:
                    6f:59:3b:9e:55:ce:62:29:b0:b6:e3:c4:86:95:6e:
                    d0:3c:26:8c:3d:1d:1b:6d:86:66:bd:ea:7f:fe:7c:
                    0f:23:8c:f5:9a:02:04:db:1f:ed:38:ac:3e:01:9b:
                    b5:c0:ac:ee:1c:ef:5a:ff:a1:1b:77:7b:90:73:fa:
                    74:9e:94:43:1c:87:0c:3b:23:0c:33:ea:6d:18:cf:
                    8d:16:f4:2a:fb:dc:6f:a6:2a:db:4b:58:09:a1:50:
                    f5:d6:b8:e3:05:07:b7:44:47:5f:51:b5:a0:ff:58:
                    40:b9:e7:46:7b:67:fd:22:89:99:d8:f8:30:ad:db:
                    38:8d:94:4b:d2:cf:85:e9:e9:52:11:35:ae:be:15:
                    38:13:8a:c8:05:c4:c3:88:00:17:a9:3c:75:a9:85:
                    c5:8e:5f:5a:97:92:9c:13:72:75:5a:56:1d:7a:83:
                    7b:62:a9:43:1e:a7:31:a0:da:ec:eb:49:ff:3d:59:
                    58:f0:89:15:f8:be:5a:f3:d1:f8:c4:03:06:30:46:
                    a6:32:ab:ab:57:1e:47:2e:68:81:07:70:20:51:8f:
                    32:a5:00:b8:9c:ab:90:c5:f3:46:4f:11:ee:9e:38:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BA:76:8A:C0:20:DD:E9:14:AF:F8:D0:CE:60:FB:41:53:81:D5:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:79:32:c9:ca:b9:8c:23:77:6e:71:95:05:30:67:9a:59:9e:
         79:3a:56:e3:0c:6e:18:9f:6a:2a:7c:a4:df:bf:63:a5:c2:ea:
         66:89:a0:5d:e8:dc:d8:57:fc:92:25:99:36:a3:dd:37:15:f9:
         da:eb:53:4c:96:23:6d:29:0e:60:3a:c4:7d:d3:68:d2:56:f6:
         8e:69:a3:51:19:3f:a5:28:02:c9:43:7e:e8:94:9c:06:a0:ab:
         52:1a:d8:20:51:61:aa:37:e4:e2:c5:ed:c4:89:49:e9:7d:d5:
         ce:ff:55:ed:cc:d9:d5:5a:09:69:0b:9e:62:68:4c:cd:b6:b5:
         3d:14:be:fc:59:a7:54:68:cf:9b:17:4a:9c:50:87:b3:53:8c:
         63:5e:69:2b:5a:ac:a3:b2:79:42:71:57:05:72:ba:a6:56:52:
         4f:67:79:dc:5f:b7:f0:26:95:f6:6d:f8:6b:b5:69:a9:73:a9:
         23:c2:b7:b7:e2:24:93:6c:40:7c:33:8b:d0:41:97:a2:56:aa:
         e5:e2:ab:03:62:94:7e:dc:e1:0a:f2:fa:a5:e2:eb:c7:f6:cc:
         e7:ed:9c:25:5b:6a:3a:50:1e:4f:20:5b:a6:c6:98:38:4a:ab:
         dd:51:42:b2:55:ab:18:5c:30:8e:a7:27:b9:61:bd:05:c5:f8:
         c0:ce:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:52 2026 by rpki-client