Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
File:                     834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa (raw, json)
Hash identifier:          Qs68X37drDZcxQgWFrV+2ciyEkcEwt0AHamCeNE0dys=
Subject key identifier:   8A:08:B0:3A:57:6C:42:F0:1F:82:1B:46:9D:AE:FC:FB:72:7E:35:5C
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584E4989D9DE7EEC1DDCD36D8DB0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     21433
IP address blocks:        170.248.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d9:de:7e:ec:1d:dc:d3:6d:8d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=29471931-7e71-4b57-9179-3235d2d49371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:32:3a:43:87:18:9c:99:74:37:5b:ec:7f:
                    67:fc:ed:56:8c:1e:8d:bc:ea:f8:86:2e:bb:ff:4e:
                    db:3e:6a:a8:f5:10:df:09:83:b3:bc:d8:71:37:84:
                    74:90:08:21:b6:59:78:e9:b9:89:ad:22:1e:1f:9e:
                    a9:9c:ff:77:49:86:e3:3e:90:bb:59:2f:10:fb:61:
                    cf:c2:a2:66:f5:da:34:4b:2f:22:de:2a:8f:90:db:
                    a9:62:7b:25:be:bd:5e:0c:e1:31:b3:48:53:e6:2b:
                    91:e7:e2:0f:d3:be:97:34:36:a3:61:1f:cf:c5:ea:
                    8c:8d:f6:64:39:85:06:57:55:97:82:3a:14:1a:0f:
                    a1:46:dc:b6:c2:e2:ff:38:79:d6:87:1a:39:70:0b:
                    d5:62:72:98:f2:d4:35:64:f3:a2:af:f1:08:4b:5d:
                    32:e2:52:4e:3b:e6:fc:5a:14:b9:c6:5b:71:78:18:
                    9c:1f:2d:05:19:2a:ef:7f:41:a1:dc:62:4b:6e:df:
                    35:ff:b4:bd:50:04:f9:24:7e:50:2a:6f:ef:54:f7:
                    f2:7c:91:2e:50:ea:65:04:93:b0:e5:f9:57:6b:70:
                    3b:09:72:ba:c2:12:7c:ef:b0:e5:b0:6c:f7:bd:d8:
                    91:36:6f:84:e0:cd:a3:64:63:87:a1:73:09:ac:03:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:B0:3A:57:6C:42:F0:1F:82:1B:46:9D:AE:FC:FB:72:7E:35:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a4:f4:96:1d:34:6d:ef:48:ec:d0:a5:15:7b:2e:27:2d:c4:
         62:50:80:9d:f4:0f:e5:a2:64:0f:ab:30:de:67:2c:6f:4f:95:
         8a:2b:83:b9:d0:ad:65:90:9e:67:bc:35:5a:a0:c5:f8:e5:32:
         5f:f1:63:55:97:c4:eb:d5:78:c2:d6:3d:3d:ab:65:7f:06:76:
         0a:67:0b:b1:98:a3:4e:7c:1a:f9:95:40:06:b5:b0:1a:00:a0:
         0b:78:98:0e:88:90:e9:6a:05:74:1d:68:78:b6:e0:a8:20:9a:
         39:82:db:ce:09:28:c3:31:b1:00:ac:f6:34:8b:85:c0:3e:c6:
         22:47:b6:4e:e3:38:49:cd:ca:48:84:6b:60:62:4d:03:64:00:
         8a:dd:ae:81:e9:57:0e:b0:71:42:83:ac:0f:3e:d0:aa:be:21:
         4f:e4:03:7b:58:0b:85:82:00:fd:0a:75:65:4d:c9:ba:2a:42:
         3d:b0:e3:b6:68:d4:e2:16:72:6b:c9:ab:4e:05:68:e3:da:52:
         e4:43:7e:f3:6e:d8:a0:ea:97:9d:bf:a6:5d:a9:14:f8:eb:50:
         3d:d8:90:f2:51:33:1d:f0:b3:ba:9d:a9:ee:fb:8d:59:57:6c:
         45:43:f7:29:ac:17:6e:1e:dc:53:da:df:45:4f:10:5d:61:8e:
         b9:b9:b6:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Jidnefuwd3NNtjbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk
Mjk0NzE5MzEtN2U3MS00YjU3LTkxNzktMzIzNWQyZDQ5MzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS0yOkOHGJyZdDdb7H9n/O1WjB6NvOr4hi67
/07bPmqo9RDfCYOzvNhxN4R0kAghtll46bmJrSIeH56pnP93SYbjPpC7WS8Q+2HP
wqJm9do0Sy8i3iqPkNupYnslvr1eDOExs0hT5iuR5+IP076XNDajYR/PxeqMjfZk
OYUGV1WXgjoUGg+hRty2wuL/OHnWhxo5cAvVYnKY8tQ1ZPOir/EIS10y4lJOO+b8
WhS5xltxeBicHy0FGSrvf0Gh3GJLbt81/7S9UAT5JH5QKm/vVPfyfJEuUOplBJOw
5flXa3A7CXK6whJ877DlsGz3vdiRNm+E4M2jZGOHoXMJrAPdTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoIsDpXbELwH4IbRp2u/PtyfjVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvODM0ZjliNDUtMDAwZC0z
ODljLWIzNTktMGE1YjBlM2Y1Y2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqvjYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuk9JYdNG3vSOzQpRV7LictxGJQgJ30D+WiZA+rMN5nLG9PlYorg7nQ
rWWQnme8NVqgxfjlMl/xY1WXxOvVeMLWPT2rZX8GdgpnC7GYo058GvmVQAa1sBoA
oAt4mA6IkOlqBXQdaHi24KggmjmC284JKMMxsQCs9jSLhcA+xiJHtk7jOEnNykiE
a2BiTQNkAIrdroHpVw6wcUKDrA8+0Kq+IU/kA3tYC4WCAP0KdWVNyboqQj2w47Zo
1OIWcmvJq04FaOPaUuRDfvNu2KDql52/pl2pFPjrUD3YkPJRMx3ws7qdqe77jVlX
bEVD9ymsF24e3FPa30VPEF1hjrm5tt4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:39 2026 by rpki-client