Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/f5fd8cf0-fd63-3351-b88f-e74d9996692b.roa
File:                     f5fd8cf0-fd63-3351-b88f-e74d9996692b.roa (raw, json)
Hash identifier:          L62FHDNLx3EQ9S3NEVl2xyu1rNLKGc1/oeIpHSsOMoo=
Subject key identifier:   0F:28:35:17:62:2D:89:77:9E:AF:32:92:20:E3:7E:A5:B3:37:07:FF
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F4B1F11ECECCFEBBB7F71CDC2
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/f5fd8cf0-fd63-3351-b88f-e74d9996692b.roa
Signing time:             Fri 25 Sep 2026 15:23:41 +0000
ROA not before:           Fri 25 Sep 2026 15:23:41 +0000
ROA not after:            Thu 24 Dec 2026 16:23:41 +0000
asID:                     21433
IP address blocks:        170.251.92.0/23 maxlen: 23
                          170.251.92.0/24 maxlen: 24
                          170.251.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:1f:11:ec:ec:cf:eb:bb:7f:71:cd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Sep 25 15:23:41 2026 GMT
            Not After : Dec 24 16:23:41 2026 GMT
        Subject: CN=715b538d-4b92-44fa-a4ef-2505377cf62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:4a:7e:e2:79:fc:a6:bf:71:06:9e:45:91:
                    e9:53:bf:b9:ce:26:43:56:4b:61:56:1c:aa:eb:bf:
                    02:d6:ea:10:26:8a:b9:34:db:38:f9:ff:b6:bd:3d:
                    76:c7:8d:28:6b:40:67:0f:9e:b8:e2:63:82:43:fe:
                    d0:e7:0f:43:ce:21:fd:5c:f4:2d:e0:b6:1c:09:e1:
                    f2:6c:6c:18:5b:f3:72:9b:c7:48:e1:cf:9d:1e:68:
                    35:0a:ba:4d:ae:b2:27:f0:84:ea:46:25:c3:33:65:
                    4e:8a:16:6e:9f:1f:bb:0f:22:9e:2a:c2:cd:d3:a7:
                    84:de:99:3b:93:67:a6:12:92:97:0e:e2:14:d3:c8:
                    13:2c:d2:0d:96:be:84:59:5e:6f:1a:c9:77:8c:30:
                    75:23:56:24:17:03:e7:20:b7:dd:67:eb:e4:08:17:
                    0d:3c:42:1c:07:a2:c9:59:1f:ee:00:0d:55:e8:2f:
                    02:81:d9:d4:07:f0:27:fb:80:ff:9f:3d:11:69:f8:
                    81:04:25:94:1d:08:fa:be:6f:98:19:3a:cd:c2:ad:
                    a9:00:c3:68:fc:62:d2:23:c4:26:14:42:0b:7d:70:
                    d4:47:3b:fd:56:ff:a7:7e:41:a1:03:a3:07:d5:f3:
                    09:ed:58:a6:52:68:f3:4f:f7:6a:cb:8e:ed:7d:e4:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:28:35:17:62:2D:89:77:9E:AF:32:92:20:E3:7E:A5:B3:37:07:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/f5fd8cf0-fd63-3351-b88f-e74d9996692b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:db:40:ba:2a:fb:d5:90:03:ae:f8:d5:21:0e:f8:9a:9e:3d:
         73:c9:13:5f:14:55:bc:63:dd:e5:38:aa:98:56:e8:2f:26:90:
         7d:f0:d2:1d:2c:83:d9:70:b2:89:e8:f9:54:1f:e9:3f:e6:28:
         94:1f:c1:af:57:fb:71:61:ca:b7:e5:93:6c:ca:11:24:7b:7f:
         63:18:33:77:1d:b6:4e:f6:3e:82:6f:83:a4:fd:7d:b4:9a:4a:
         82:ba:b1:43:d8:d4:c6:6b:e6:ba:55:ae:f0:25:fa:d8:df:73:
         0f:eb:34:09:74:bd:85:bb:f3:a8:f1:97:5d:1f:e0:2a:4e:a6:
         06:6e:b5:1b:6a:a6:dd:37:eb:38:9e:aa:71:59:5a:eb:56:9a:
         58:d8:ae:bd:45:07:e5:c8:03:39:ee:07:5f:49:33:f9:4f:29:
         82:42:2d:6f:50:95:42:7f:b7:6d:c7:ea:7b:cc:5a:00:22:c4:
         f2:82:f7:15:a9:90:92:ef:ba:18:5f:c2:7d:b7:91:98:ea:06:
         a9:96:e8:51:90:c8:bb:26:d1:39:ab:b5:1f:83:e3:d5:c0:53:
         14:f5:77:b1:23:91:64:29:b2:a6:26:8a:9a:44:d2:43:31:66:
         53:5e:1f:9e:ac:a0:18:d7:c9:09:65:7c:9f:93:ce:d6:fc:ab:
         d0:1d:fa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:26:34 2026 by rpki-client