Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f7428487-4ff8-3050-ac16-886b974c8b5e.roa
File:                     f7428487-4ff8-3050-ac16-886b974c8b5e.roa (raw, json)
Hash identifier:          JIFkqeyAocXjylBAmQy2MR95q5zxpPuGpFIrbd7G7NE=
Subject key identifier:   74:53:32:C8:09:F0:BA:A5:F7:DE:D8:8A:41:FA:DA:2B:54:3A:F9:3B
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584D0AE7EE02C4441A21C3A99A00
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f7428487-4ff8-3050-ac16-886b974c8b5e.roa
Signing time:             Tue 03 Mar 2026 05:46:58 +0000
ROA not before:           Tue 03 Mar 2026 05:46:58 +0000
ROA not after:            Mon 01 Jun 2026 04:46:58 +0000
asID:                     55256
IP address blocks:        158.95.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:e7:ee:02:c4:44:1a:21:c3:a9:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Mar  3 05:46:58 2026 GMT
            Not After : Jun  1 04:46:58 2026 GMT
        Subject: CN=86f4b018-f65f-4528-b8bd-31672f0b15e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:ad:57:7f:ff:66:e0:64:90:9a:a4:9c:fc:
                    76:07:10:9e:f6:77:f0:74:d4:9d:cc:61:73:cc:50:
                    f3:6d:d3:96:8b:00:0b:d8:b2:e6:79:fe:ee:e9:9d:
                    2e:75:34:bb:19:9b:5a:63:d5:d2:98:9a:d2:29:7c:
                    d9:76:64:15:10:b9:ec:a3:bf:7b:93:9f:83:59:ad:
                    aa:f2:88:1d:d2:64:aa:43:42:72:6c:21:f2:f3:cb:
                    6a:1f:94:e2:11:0d:59:36:ff:5f:97:61:fc:6d:47:
                    33:73:77:ba:ae:f4:ed:ae:43:8f:3d:99:41:18:72:
                    ed:e1:00:9f:d2:f2:77:34:90:ff:dd:b5:0c:83:70:
                    e3:86:ea:b6:37:57:87:46:9b:a6:8c:a4:03:23:28:
                    e8:03:5c:02:67:ce:b0:d3:6d:0d:54:a0:82:6c:c1:
                    71:79:ba:86:4a:b4:90:71:ff:95:ec:d8:e6:2a:ca:
                    af:30:ab:4d:8f:23:d7:3e:c4:fd:52:e4:06:a2:d5:
                    bb:b9:0d:c6:30:c9:22:81:dc:f6:67:36:19:88:b1:
                    54:e2:41:8b:4b:6b:a5:a6:44:86:ec:01:c5:8b:30:
                    64:a1:8c:ca:f9:a0:a4:9e:1b:69:93:42:67:32:89:
                    ec:b2:d9:0f:6c:3e:b3:03:bf:af:0e:bb:16:28:d4:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:53:32:C8:09:F0:BA:A5:F7:DE:D8:8A:41:FA:DA:2B:54:3A:F9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f7428487-4ff8-3050-ac16-886b974c8b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:43:61:cf:06:9b:77:45:35:b0:50:58:ea:c2:9c:55:0a:e7:
         70:42:62:f7:dc:38:dd:7e:b1:56:93:f3:af:e7:65:61:88:62:
         e5:50:04:88:50:e8:e1:3b:59:e4:55:54:a1:77:cf:91:14:2b:
         a0:9a:70:d6:2e:9e:aa:0e:b9:56:f8:0e:7f:90:c6:be:38:69:
         16:d4:a9:31:09:de:5c:39:e5:23:9c:4b:d0:56:e3:6d:a8:35:
         64:f2:d6:11:87:2d:38:ef:50:c9:b2:08:bc:9f:47:85:a9:e6:
         db:68:81:39:dc:17:62:3c:e0:1d:2b:df:60:a6:dc:44:1c:2f:
         11:38:87:33:cd:f9:20:b6:10:51:46:97:dd:25:35:c3:b0:6e:
         3e:b6:8d:4f:dc:73:4f:11:1e:a6:4e:fa:11:86:74:0a:ec:e5:
         26:2c:0c:3f:57:c3:95:5b:2d:f6:24:a6:a1:ef:7a:c2:e8:39:
         cf:46:a0:93:a4:69:59:45:ce:51:ce:12:49:56:a4:6d:83:54:
         d2:0f:61:23:28:3e:44:51:92:73:03:b1:96:a3:b4:93:7a:9c:
         e6:c2:c7:b7:ef:46:c9:cd:1e:b7:f9:7c:7f:53:d9:78:e1:2a:
         ce:7c:65:d6:ef:03:c0:e3:53:ed:07:27:93:e1:76:7f:81:6c:
         31:d1:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:00:13 2026 by rpki-client