Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c8dc6c4d-6f4d-31a2-b570-304aec344754.roa
File:                     c8dc6c4d-6f4d-31a2-b570-304aec344754.roa (raw, json)
Hash identifier:          aQkBdF2A4C39hQJWa2KoWe1WvbFMP8fSV/js5LmJfpk=
Subject key identifier:   55:5B:8D:9F:19:45:C3:2B:4A:60:08:27:74:14:92:E8:AB:45:C0:75
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584D422F83D3B02E95DA50C39FC0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c8dc6c4d-6f4d-31a2-b570-304aec344754.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     21433
IP address blocks:        144.36.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:83:d3:b0:2e:95:da:50:c3:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=e0ef58b8-3f16-4b16-b508-d08d51fcc3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d2:d5:59:71:1d:4d:1d:56:d1:cd:7e:ad:5f:
                    9f:22:cb:3d:2f:d3:6a:c0:71:9e:69:1b:32:00:c2:
                    7b:b1:86:09:49:c1:94:1e:ee:cd:f3:13:da:87:9e:
                    86:04:f9:22:72:53:1a:eb:5e:5b:b2:46:1e:15:8f:
                    d9:c6:cf:5d:80:92:d7:0d:e7:dc:f2:51:df:fc:f2:
                    d3:fe:88:f9:58:20:43:12:01:d4:2f:5a:aa:5c:77:
                    f8:a3:bc:68:03:49:65:e1:2b:6f:6c:18:79:39:88:
                    84:f4:07:d6:67:7d:be:9d:b0:80:0d:f6:12:3e:e8:
                    92:46:d8:4e:b7:ca:4a:7e:16:a8:e7:be:3f:b1:f5:
                    d5:ff:12:59:84:0a:ea:7c:1d:7a:38:fc:b3:f1:12:
                    65:98:2d:6f:5f:cc:e1:74:fd:0f:9a:c6:59:1a:25:
                    f1:f1:ae:87:ed:58:7e:ee:52:af:d4:ce:45:04:da:
                    20:66:6d:88:a7:d0:92:f4:92:31:82:25:43:5f:08:
                    a6:90:de:42:a4:9d:2c:75:00:72:04:b4:d2:1c:dd:
                    f0:46:49:90:7c:a5:77:2d:5a:86:64:0a:d7:a1:73:
                    b3:86:bc:82:da:e6:c8:87:60:fa:a5:b1:58:af:16:
                    3f:8a:b1:c5:8f:77:16:cb:67:94:70:c6:25:c8:74:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:8D:9F:19:45:C3:2B:4A:60:08:27:74:14:92:E8:AB:45:C0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c8dc6c4d-6f4d-31a2-b570-304aec344754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:03:01:1a:6f:f5:dd:5a:87:ac:d5:b3:4c:9f:19:5e:7d:
         ce:e8:43:af:b1:0c:f0:3c:bd:f2:7d:02:ef:74:35:5f:6f:49:
         55:0b:b3:ff:53:2d:73:39:b7:f7:ed:c8:e7:da:44:66:d3:a2:
         71:eb:23:76:c8:f5:49:d2:2f:06:07:c2:b9:e1:4f:0c:4a:0e:
         4a:52:5e:82:72:8f:cd:05:f1:cb:1f:3a:0c:50:22:e8:16:82:
         1c:b4:6e:b9:3a:5d:c4:3a:bb:7e:09:01:27:83:cf:d3:5a:ad:
         ef:ee:b3:cc:04:0d:69:b2:21:46:bc:5e:23:04:f7:60:43:61:
         e4:62:7d:5d:99:b3:b3:81:12:32:b3:3f:4d:b1:77:83:97:b9:
         45:1d:69:45:26:2f:e9:04:6d:77:25:14:fb:be:8e:ae:07:d8:
         2a:92:41:d0:63:52:6d:86:c2:0b:45:a4:6a:64:2f:e4:65:bf:
         79:00:f1:78:8a:0b:30:75:8e:bf:1c:36:f5:54:2b:78:1b:88:
         b7:48:6a:3a:21:0c:2d:fb:87:28:71:aa:c8:6f:f9:47:ce:80:
         1b:11:cf:5b:e7:c1:28:82:c9:ca:22:d1:83:c6:49:26:81:66:
         fa:cc:75:ec:1d:76:d1:26:cf:1d:7a:80:2d:08:93:fe:2a:f4:
         4c:b3:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:04 2026 by rpki-client