Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa
File:                     95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (raw, json)
Hash identifier:          zYsDiN3kOfnoovlPgUiZsmjpZTACuCY3mczDeySLGJM=
Subject key identifier:   2A:F5:B8:FB:86:F0:30:51:F4:36:BE:20:AE:D9:98:33:69:41:FB:4A
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F4328584D9A200B3F8A1B6827ADAC2C00
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     36329
IP address blocks:        155.254.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:0b:3f:8a:1b:68:27:ad:ac:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=ad70b1e4-d63e-45d4-bab0-643988614050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:98:50:3a:2c:da:de:d1:6c:c0:47:59:b4:99:
                    b5:5b:be:8c:41:26:0e:4d:3e:59:15:61:83:5e:e1:
                    5b:4d:1d:7e:2e:a8:2b:a9:d9:3c:f5:73:ab:fb:32:
                    8d:b1:f2:48:43:0b:f0:e0:ed:d9:59:c2:90:52:2d:
                    bd:3c:46:16:8c:5f:c9:7b:8c:1b:c9:d6:10:aa:31:
                    6f:fe:69:4e:54:26:2d:61:01:18:f9:81:ff:ae:02:
                    30:fd:08:39:f6:00:64:c6:da:d4:54:e5:c0:d3:56:
                    fe:84:3b:aa:1a:5e:b7:f8:96:4f:00:08:4f:55:0f:
                    41:91:d5:0f:08:68:cc:d0:ed:9d:96:79:39:2d:15:
                    a7:96:44:89:f7:ae:3d:18:30:59:d6:96:8f:68:14:
                    7b:2d:48:d5:4c:32:7d:fb:e6:90:8a:df:69:83:f5:
                    89:23:a5:de:12:35:5f:4f:e8:07:2a:8e:3a:6a:b8:
                    69:a8:8a:8b:aa:5b:30:6b:64:ac:3f:60:69:7f:08:
                    20:7e:a0:a6:1f:5f:77:06:2c:32:5e:5f:69:c8:d0:
                    a3:af:01:ef:fe:10:7e:1f:23:cb:21:15:4b:cd:0c:
                    76:8e:4e:50:3f:df:63:e5:06:da:0a:01:5c:bb:2a:
                    a9:f3:f0:b4:bd:5b:99:b7:9f:19:79:3b:1e:29:4b:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F5:B8:FB:86:F0:30:51:F4:36:BE:20:AE:D9:98:33:69:41:FB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:68:ad:74:ea:61:9f:f9:9e:50:68:fb:58:87:5c:bc:93:
         63:69:d5:eb:55:29:e4:b4:a3:67:e8:0f:5b:85:c4:9b:b0:63:
         fb:de:32:d0:a1:ef:8a:c9:0f:61:02:36:2d:51:bd:96:af:e9:
         bf:ee:03:1b:c5:c1:4f:ca:ce:17:1d:5c:75:9b:ca:57:2a:ec:
         50:31:ea:df:54:2b:41:41:72:d3:2e:6c:c5:27:29:01:50:31:
         ae:13:1f:ac:20:04:22:fc:50:97:69:7a:0c:b5:cb:1d:b7:7f:
         13:2c:d6:1b:32:fc:aa:cb:08:2e:19:b6:46:b4:c8:21:62:51:
         b4:2c:65:2e:5d:cd:4a:a3:7d:30:09:ca:cc:91:5a:bb:e2:99:
         61:35:39:77:67:dd:44:b9:20:0b:7a:0d:51:1d:09:6e:8b:e3:
         55:01:cb:75:fb:50:c1:b6:ec:dd:79:fd:e9:76:f7:38:56:08:
         61:c6:c2:6a:0c:0a:a0:47:28:a2:69:a5:38:c9:d6:80:85:43:
         ee:d5:1c:e8:06:a7:c5:cf:0a:f2:e3:cd:7d:63:34:24:51:d4:
         e0:ba:28:e2:0b:bc:c1:00:23:4c:dc:c2:ac:f1:9f:28:48:32:
         64:04:34:92:3f:8d:99:d3:63:ea:9f:2e:b0:31:1b:b9:99:50:
         e0:57:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:45 2026 by rpki-client