Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/bf6493c3-6de1-3868-ab23-2b55f8dd2bed.roa
File:                     bf6493c3-6de1-3868-ab23-2b55f8dd2bed.roa (raw, json)
Hash identifier:          +iL4wUTYm5a89zO4N5vvo8Xv4skCtJSoR9oPRL2yLTI=
Subject key identifier:   52:56:79:21:89:08:57:17:19:FA:6E:EB:6B:76:3E:69:2C:6D:BF:52
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584D0ECE05C4B2A3B54E1F1C9A00
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/bf6493c3-6de1-3868-ab23-2b55f8dd2bed.roa
Signing time:             Wed 04 Mar 2026 15:18:00 +0000
ROA not before:           Wed 04 Mar 2026 15:18:00 +0000
ROA not after:            Tue 02 Jun 2026 14:18:00 +0000
asID:                     55256
IP address blocks:        158.95.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:ce:05:c4:b2:a3:b5:4e:1f:1c:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Mar  4 15:18:00 2026 GMT
            Not After : Jun  2 14:18:00 2026 GMT
        Subject: CN=52f7a74d-6f3f-4143-9d69-2607a8c33938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:27:26:b8:29:96:c1:33:1e:c4:c5:63:90:
                    3b:9b:de:3f:8b:6f:81:c6:e1:e3:ee:c5:f6:75:a5:
                    eb:d2:59:f2:d8:1f:da:ff:7b:8c:b0:8c:da:d5:35:
                    36:17:18:a9:77:74:53:f3:7b:1a:4b:a2:bd:64:3b:
                    50:3b:69:c3:e0:c6:46:48:cf:e3:b9:81:0e:d2:56:
                    8c:9a:4a:b7:87:95:7c:ba:df:97:be:fe:21:b5:ad:
                    d3:c9:9c:9f:97:80:19:94:7c:7f:e7:75:e4:97:01:
                    ec:78:3a:06:96:9c:28:a8:e8:c6:ec:9e:63:42:69:
                    a1:d8:7b:46:98:b2:9d:6f:6a:7f:65:a0:f0:d6:bf:
                    9a:0b:ba:d8:50:dd:65:22:b5:1e:62:3a:16:d4:01:
                    3e:90:f6:ea:c0:cc:c2:24:fa:4d:fe:d6:ec:25:19:
                    8c:eb:7d:ad:c9:3b:b5:7f:1c:b7:fa:4b:72:c0:86:
                    b7:6d:7c:11:00:1f:a2:2d:5e:8b:d8:5f:54:3f:c7:
                    aa:25:38:59:94:a7:06:9e:5c:dc:94:c1:2b:e6:d4:
                    ea:1b:ba:0f:e3:76:8e:41:55:2b:bf:a7:8b:9f:af:
                    73:04:66:3f:a9:1c:a5:d9:8f:8f:11:bc:05:d7:a0:
                    90:c2:0e:19:77:88:35:a6:34:5a:03:9b:26:fd:e1:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:79:21:89:08:57:17:19:FA:6E:EB:6B:76:3E:69:2C:6D:BF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/bf6493c3-6de1-3868-ab23-2b55f8dd2bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:95:ac:bc:2b:4f:c1:b2:57:27:6e:05:91:19:76:60:12:9b:
         03:9c:7f:ea:9c:30:af:1d:23:19:75:fa:86:eb:3d:5d:63:d8:
         c8:af:9d:28:66:4a:67:32:29:be:a8:91:18:52:82:bd:03:65:
         b5:16:87:43:99:bd:96:9f:ed:13:0f:ef:be:4c:4b:94:a2:86:
         5d:c6:22:68:36:bb:16:f9:62:dd:93:2f:8a:94:75:57:ef:e9:
         f5:85:73:9b:34:12:c6:72:9c:2b:d7:18:81:39:f1:8c:dd:ae:
         a9:05:93:45:4f:92:44:d0:12:4e:c9:86:7c:5e:51:07:90:71:
         f3:1f:48:db:65:c3:07:dc:a8:65:42:a2:f6:d3:89:bb:5f:c3:
         96:1f:ac:2f:b0:a0:5f:10:83:9c:4a:69:94:7d:c5:fc:94:78:
         5e:ef:bd:d7:45:6d:f0:ad:fd:9c:a6:95:df:d2:f0:70:91:d6:
         d9:ec:a1:a5:b4:02:76:82:98:1f:05:ce:7f:c5:0e:87:66:c6:
         d6:32:e0:13:9c:e0:c5:df:f5:0b:81:b8:e4:c3:24:78:cb:0a:
         90:21:82:52:58:3b:22:b4:56:0e:3a:75:97:a0:18:7d:a1:18:
         ec:bb:5c:e6:6d:8d:be:db:49:4c:e5:04:91:0c:7d:d9:01:72:
         93:1f:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:09 2026 by rpki-client