Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c0b3ff26-226d-31e7-8713-8cc21748d89c.roa
File:                     c0b3ff26-226d-31e7-8713-8cc21748d89c.roa (raw, json)
Hash identifier:          bQwmsspUT2yam54nJ0D2ZDwwmSfMQvmKBu8gUJCGWqU=
Subject key identifier:   22:AF:1D:07:12:4D:54:4E:67:D7:5C:5F:A9:B7:22:ED:F5:60:EB:E3
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584D0ECF181FDFAC18CAD1EAF780
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c0b3ff26-226d-31e7-8713-8cc21748d89c.roa
Signing time:             Wed 04 Mar 2026 15:20:10 +0000
ROA not before:           Wed 04 Mar 2026 15:20:10 +0000
ROA not after:            Tue 02 Jun 2026 14:20:10 +0000
asID:                     55256
IP address blocks:        158.95.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:cf:18:1f:df:ac:18:ca:d1:ea:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Mar  4 15:20:10 2026 GMT
            Not After : Jun  2 14:20:10 2026 GMT
        Subject: CN=42aeac19-8008-49de-8769-4674a172376b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:92:c9:f9:eb:ff:34:ed:03:c0:ce:92:3b:
                    e3:4a:b5:6c:48:dc:e0:30:12:c7:9e:bd:9b:b9:b6:
                    d8:72:48:a7:84:70:76:01:ee:1a:5c:62:dd:c8:e3:
                    84:54:49:a1:26:1f:11:22:97:a7:44:18:ea:a6:93:
                    93:de:75:c2:5a:af:f1:90:b8:db:96:ee:24:4c:a5:
                    e5:77:c5:ac:c6:4b:9d:79:5d:e7:ce:23:e2:37:ec:
                    7f:90:c0:92:5c:35:a3:b4:96:39:f7:6f:2a:b4:70:
                    c7:cb:30:d9:11:3b:da:1c:bf:e5:81:a3:d3:2f:9e:
                    b4:7b:d0:eb:54:3a:1b:f3:52:65:40:83:9a:df:ae:
                    9a:14:b5:39:d0:92:41:e7:4b:b1:d5:0d:61:a1:73:
                    ef:d3:d6:c9:b2:49:87:34:84:a6:f6:1c:ce:72:be:
                    14:37:57:b0:86:bc:64:3f:11:a3:7c:d0:ad:96:4a:
                    60:e2:44:a2:ba:d5:c1:8b:a2:44:85:2d:7c:83:4c:
                    5f:ab:a5:d0:28:7f:77:bd:35:d1:5c:d7:fd:5c:82:
                    b8:a5:34:52:7c:6b:44:32:60:bc:1e:bc:b5:66:63:
                    02:81:85:f8:19:28:c9:17:d2:2c:ae:a9:20:5b:6b:
                    ed:e8:75:16:a8:aa:84:20:f7:2d:d8:4b:3a:70:2c:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AF:1D:07:12:4D:54:4E:67:D7:5C:5F:A9:B7:22:ED:F5:60:EB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c0b3ff26-226d-31e7-8713-8cc21748d89c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:a3:d4:f3:eb:a1:ce:09:38:3c:3d:a4:0a:15:55:3d:26:
         fe:21:d6:dc:bd:75:97:a9:d6:f0:08:cb:d4:0a:b5:19:bd:2a:
         dd:fb:e0:cd:df:76:d9:49:9c:a3:7c:5e:e9:68:46:01:8f:02:
         81:8e:83:a0:77:63:8c:ce:1d:f1:9e:0c:5b:92:43:a4:3a:d5:
         d9:8d:c9:71:ba:18:54:21:ed:15:ad:92:78:b6:be:f2:67:e1:
         14:cd:9e:d2:3f:bf:cd:fd:d7:72:8e:29:01:df:47:7a:c9:1b:
         cb:f3:28:19:d7:1b:6a:12:6a:9f:25:ea:60:ea:68:a2:1a:32:
         ad:77:ee:48:f9:d7:01:fb:bc:30:ed:f8:a0:b2:3c:d5:09:5c:
         5f:49:23:ac:7b:80:4b:a0:dc:e1:85:b9:10:ea:b9:9c:5b:ba:
         0d:ea:59:02:9d:cb:f7:92:5e:8d:bd:0e:7c:c0:34:50:cf:63:
         06:f2:ac:93:b9:08:40:65:f9:7a:3e:ef:a6:c9:3c:19:11:b8:
         4a:54:f6:4b:14:7a:46:39:62:23:39:96:5b:f7:35:e0:d7:ca:
         20:db:ab:01:e4:a6:eb:ed:a3:7b:77:d1:f1:97:de:7b:96:d0:
         b8:95:c9:bf:e2:43:66:7d:bb:ee:ac:5d:99:57:eb:c2:26:36:
         0d:88:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:03 2026 by rpki-client