Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95ff6746-5810-37c6-b3ac-f64b7c3b70a9.roa
File:                     95ff6746-5810-37c6-b3ac-f64b7c3b70a9.roa (raw, json)
Hash identifier:          g0N5h1PpBKu7dN24ZALYUDO8wbwcDlP21SQ3TkmDFOA=
Subject key identifier:   90:F8:2D:BD:8A:9F:90:98:8C:DB:58:84:F2:D0:C7:60:1A:2E:0D:13
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584D422F8D6097A4E5FC4EBABB80
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95ff6746-5810-37c6-b3ac-f64b7c3b70a9.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     21433
IP address blocks:        170.251.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8d:60:97:a4:e5:fc:4e:ba:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=69e928ea-0344-4b07-ac80-156fb320c003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:35:aa:c4:dc:c2:01:53:29:b0:bd:bc:c5:
                    c4:54:dc:33:0a:46:03:e3:de:4d:e4:31:44:93:4e:
                    71:1d:87:d1:7e:b7:ca:cb:71:53:1f:3e:d9:39:2f:
                    0a:4a:5f:16:15:6d:b0:4c:8b:12:10:ed:6f:8a:d0:
                    c7:01:4a:e2:dc:7d:b4:52:20:04:37:53:63:61:c0:
                    dd:ff:cd:d9:97:3f:c8:15:23:23:a9:45:48:30:8b:
                    f8:a9:80:24:e5:d1:8e:46:d8:ee:64:4a:1d:3b:52:
                    a0:d4:41:2b:86:c7:2b:b8:98:1c:8a:d4:88:6e:9a:
                    39:97:96:b9:7a:21:e8:8c:20:2f:a6:10:f9:65:38:
                    f9:00:f3:f3:d2:a0:6e:8d:52:db:3f:52:85:c6:3a:
                    b3:dd:7b:d4:44:30:24:02:18:0c:f0:1f:13:ea:eb:
                    99:d6:53:06:8d:a6:36:8b:8e:ed:d7:d9:55:5c:e3:
                    09:4e:ba:66:39:20:2c:21:a4:9f:1c:bb:f5:17:27:
                    9d:27:f1:49:b6:01:b9:2b:ab:8c:39:8f:a9:16:62:
                    51:87:0b:a6:10:f0:87:a7:10:90:d8:08:30:0c:94:
                    b1:56:e5:0b:1d:c6:db:28:0b:98:7f:f1:45:cb:60:
                    b3:b2:85:7e:97:22:46:99:6b:38:c5:75:29:07:d4:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:2D:BD:8A:9F:90:98:8C:DB:58:84:F2:D0:C7:60:1A:2E:0D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95ff6746-5810-37c6-b3ac-f64b7c3b70a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9d:29:9e:0e:71:e4:8f:e2:57:fa:73:92:a7:b7:4a:58:28:
         24:1d:98:31:d1:42:b2:27:6d:3f:d3:be:e1:83:12:90:1c:1e:
         00:5d:b4:72:c2:9c:48:86:1d:4b:f7:8d:50:2b:ce:ca:bd:cd:
         67:3b:e6:b0:8a:1e:b8:3c:a8:b3:0b:8c:fa:9a:c2:fd:54:a1:
         68:10:94:f2:49:bf:64:23:5f:17:68:21:22:be:fd:f5:24:08:
         2e:41:6e:08:9b:75:77:ff:f7:82:46:49:c3:65:f4:9f:5a:a5:
         70:ed:ed:64:3f:31:d2:4e:33:6f:85:5c:c1:d4:47:38:4a:c3:
         42:0b:28:7f:3b:66:09:95:44:d6:d6:6c:fc:a6:9a:51:d1:16:
         ed:55:cb:0a:15:be:a2:67:5c:59:2e:2f:bc:e8:f7:bb:d0:03:
         31:d5:4f:53:f7:64:27:e6:70:57:0b:9c:1f:e0:71:0a:3c:1c:
         46:01:91:c4:18:70:eb:d6:71:6d:b2:d8:b2:6f:30:dd:ed:68:
         13:4f:7b:cb:d1:04:c3:6a:af:29:e4:0e:ec:dc:1f:f7:07:fe:
         8f:8d:81:4f:3e:26:da:7b:39:ec:d5:cb:50:39:c9:d8:c5:36:
         37:a1:7b:16:93:73:48:5f:34:09:48:2e:73:52:15:f5:81:41:
         40:e5:a4:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL41gl6Tl/E66u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NjllOTI4ZWEtMDM0NC00YjA3LWFjODAtMTU2ZmIzMjBjMDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR41qsTcwgFTKbC9vMXEVNwzCkYD495N5DFE
k05xHYfRfrfKy3FTHz7ZOS8KSl8WFW2wTIsSEO1vitDHAUri3H20UiAEN1NjYcDd
/83Zlz/IFSMjqUVIMIv4qYAk5dGORtjuZEodO1Kg1EErhscruJgcitSIbpo5l5a5
eiHojCAvphD5ZTj5APPz0qBujVLbP1KFxjqz3XvURDAkAhgM8B8T6uuZ1lMGjaY2
i47t19lVXOMJTrpmOSAsIaSfHLv1FyedJ/FJtgG5K6uMOY+pFmJRhwumEPCHpxCQ
2AgwDJSxVuULHcbbKAuYf/FFy2CzsoV+lyJGmWs4xXUpB9RAxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJD4Lb2Kn5CYjNtYhPLQx2AaLg0TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvOTVmZjY3NDYtNTgxMC0z
N2M2LWIzYWMtZjY0YjdjM2I3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvsnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKdKZ4OceSP4lf6c5Knt0pYKCQdmDHRQrInbT/TvuGDEpAcHgBdtHLC
nEiGHUv3jVArzsq9zWc75rCKHrg8qLMLjPqawv1UoWgQlPJJv2QjXxdoISK+/fUk
CC5BbgibdXf/94JGScNl9J9apXDt7WQ/MdJOM2+FXMHURzhKw0ILKH87ZgmVRNbW
bPymmlHRFu1VywoVvqJnXFkuL7zo97vQAzHVT1P3ZCfmcFcLnB/gcQo8HEYBkcQY
cOvWcW2y2LJvMN3taBNPe8vRBMNqrynkDuzcH/cH/o+NgU8+Jtp7OezVy1A5ydjF
NjehexaTc0hfNAlILnNSFfWBQUDlpC0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:04 2026 by rpki-client