Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7fd32906-2445-3b4c-bb92-b29efe899b2a.roa
File:                     7fd32906-2445-3b4c-bb92-b29efe899b2a.roa (raw, json)
Hash identifier:          K9hWPP8v/v4xKy0UPcou7PFfWUD+g+N9BE7CBTeA6aA=
Subject key identifier:   76:AE:4C:5A:C6:79:4F:87:88:2C:C3:81:EA:2A:D9:1C:09:58:2A:5B
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584DBCD225ABDFB5F3D18A3DEA40
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7fd32906-2445-3b4c-bb92-b29efe899b2a.roa
Signing time:             Tue 05 May 2026 23:16:58 +0000
ROA not before:           Tue 05 May 2026 23:16:58 +0000
ROA not after:            Mon 03 Aug 2026 23:16:58 +0000
asID:                     55256
IP address blocks:        158.95.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:d2:25:ab:df:b5:f3:d1:8a:3d:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: May  5 23:16:58 2026 GMT
            Not After : Aug  3 23:16:58 2026 GMT
        Subject: CN=8b097a0d-afcc-42a1-a4ee-fded49946b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:3f:ad:3c:64:8c:49:8a:3d:b1:db:ab:d6:
                    b2:17:01:b4:89:6a:60:64:ab:4a:a0:8f:86:d4:bb:
                    32:a8:4c:30:8d:96:f4:53:f2:ab:a4:37:ea:e1:39:
                    8c:a4:f1:d3:58:aa:14:fc:aa:19:d5:78:13:d8:f9:
                    1c:04:63:b3:08:1c:df:b1:e1:f9:a1:fb:4b:cd:d8:
                    5c:b7:1a:89:96:57:4c:02:94:25:82:3b:b0:62:c4:
                    a5:df:b0:a4:de:7b:1a:2d:58:54:71:b1:a6:07:35:
                    b5:6c:e5:48:2c:b9:a9:08:65:73:6d:ae:6d:aa:ce:
                    bc:df:63:b5:0e:5f:42:bd:46:dc:95:f3:20:1a:65:
                    9d:73:b4:7a:3e:8c:88:45:ab:16:fb:9b:33:08:9b:
                    9c:f1:42:9f:85:42:86:cf:2e:b9:83:59:5c:9b:a2:
                    b9:0a:59:bb:73:d4:26:60:a8:02:a9:ba:cb:1b:84:
                    98:9f:98:c0:48:60:86:5a:f0:af:59:85:33:05:7c:
                    40:fe:01:76:47:db:2a:3f:f4:d4:a7:6d:80:6c:c7:
                    ae:d3:a4:d8:75:59:52:1e:66:92:99:c7:e1:a1:ae:
                    db:32:84:6a:3c:f3:a6:1b:3b:16:1a:8c:2b:3c:82:
                    e9:05:cc:e7:fb:8b:9e:0b:32:69:dd:10:55:02:7b:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AE:4C:5A:C6:79:4F:87:88:2C:C3:81:EA:2A:D9:1C:09:58:2A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7fd32906-2445-3b4c-bb92-b29efe899b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:02:df:b7:3d:de:d7:45:d8:03:49:0c:4d:17:5f:2c:cc:
         c0:57:a4:00:d3:a4:63:04:5a:72:dd:d8:48:23:69:0a:36:cb:
         c1:72:60:9d:34:7c:08:ce:6b:54:c4:b7:7f:42:20:2e:be:15:
         30:2f:6b:72:40:32:14:ed:2f:1b:b0:6c:6b:b0:a8:f4:aa:5a:
         36:8b:61:58:44:0b:ff:b1:a5:b6:18:5b:91:a9:bf:36:5a:15:
         0e:cb:7d:09:dd:46:13:4a:c2:35:63:81:81:1e:0d:a2:cf:6a:
         a2:9b:19:fa:23:11:35:2a:d9:f4:8d:8e:56:c4:9f:7f:e7:62:
         a3:89:a8:2c:35:41:72:74:5b:42:e7:77:12:de:fb:6c:b3:ce:
         5e:dd:d9:dc:f0:a8:fc:8c:4e:ad:5d:1a:9a:53:7f:fd:e1:f4:
         05:fb:f8:59:32:29:91:ba:0d:11:bc:4f:aa:11:a5:35:b3:41:
         9f:73:91:2a:3b:27:17:25:1c:35:ba:65:77:fa:97:90:5b:b1:
         65:36:ab:ec:94:aa:ea:2b:ad:e2:87:f9:14:6b:db:08:90:d1:
         12:6e:ad:ab:97:6f:df:68:a4:8a:aa:f4:15:cf:d4:aa:3f:9e:
         38:20:6e:bc:10:e8:96:04:31:ce:4b:cf:f7:b5:61:06:a0:36:
         af:80:5a:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE280iWr37Xz0Yo96kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj
YWQ5MB4XDTI2MDUwNTIzMTY1OFoXDTI2MDgwMzIzMTY1OFowLzEtMCsGA1UEAxMk
OGIwOTdhMGQtYWZjYy00MmExLWE0ZWUtZmRlZDQ5OTQ2YjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3I/rTxkjEmKPbHbq9ayFwG0iWpgZKtKoI+G
1LsyqEwwjZb0U/KrpDfq4TmMpPHTWKoU/KoZ1XgT2PkcBGOzCBzfseH5oftLzdhc
txqJlldMApQlgjuwYsSl37Ck3nsaLVhUcbGmBzW1bOVILLmpCGVzba5tqs6832O1
Dl9CvUbclfMgGmWdc7R6PoyIRasW+5szCJuc8UKfhUKGzy65g1lcm6K5Clm7c9Qm
YKgCqbrLG4SYn5jASGCGWvCvWYUzBXxA/gF2R9sqP/TUp22AbMeu06TYdVlSHmaS
mcfhoa7bMoRqPPOmGzsWGowrPILpBczn+4ueCzJp3RBVAnuuRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHauTFrGeU+HiCzDgeoq2RwJWCpbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz
MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvN2ZkMzI5MDYtMjQ0NS0z
YjRjLWJiOTItYjI5ZWZlODk5YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz
ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy
Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3
MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESjAt+3Pd7XRdgDSQxNF18szMBXpADTpGMEWnLd2EgjaQo2y8FyYJ00
fAjOa1TEt39CIC6+FTAva3JAMhTtLxuwbGuwqPSqWjaLYVhEC/+xpbYYW5GpvzZa
FQ7LfQndRhNKwjVjgYEeDaLPaqKbGfojETUq2fSNjlbEn3/nYqOJqCw1QXJ0W0Ln
dxLe+2yzzl7d2dzwqPyMTq1dGppTf/3h9AX7+FkyKZG6DRG8T6oRpTWzQZ9zkSo7
JxclHDW6ZXf6l5BbsWU2q+yUquorreKH+RRr2wiQ0RJurauXb99opIqq9BXP1Ko/
njggbrwQ6JYEMc5Lz/e1YQagNq+AWmA=
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:42 2026 by rpki-client