Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa
File:                     22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa (raw, json)
Hash identifier:          rMfwKGX1auE3tqD52WLXf/7D4ozIX0TlviP0HvxoWXc=
Subject key identifier:   36:91:CB:CC:37:CC:2B:C0:60:C6:79:1F:EB:1F:48:D9:E6:C1:C0:F9
Certificate issuer:       /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
Certificate serial:       010D0C9F4328584F94D35E6C1F0E455B9A7C9600
Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     26337
IP address blocks:        143.95.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:5e:6c:1f:0e:45:5b:9a:7c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=5b558a63-becc-4a38-8782-9c11881bedba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:e0:86:44:fe:07:39:4b:ab:5f:a8:e8:a5:
                    f4:b8:5a:97:88:20:20:3d:01:8c:6b:9c:d4:47:5f:
                    e4:7c:ca:09:4d:26:2d:1f:24:11:ae:d1:0d:6b:6d:
                    85:0b:a0:92:5e:e9:3e:06:36:95:9e:6f:4c:b8:29:
                    f9:5f:80:d6:53:c8:bd:87:ff:ed:bd:9d:bb:db:db:
                    32:0f:63:06:ec:00:ce:b3:3c:f4:d6:b2:e0:e1:18:
                    45:00:75:c5:84:4a:57:1e:db:f5:8f:ae:7f:89:1c:
                    6f:7d:8c:0e:28:0d:62:0e:9e:f4:a6:97:ea:3c:d0:
                    80:ca:df:28:c4:53:aa:5e:22:76:ec:e5:d1:de:26:
                    bd:29:ae:ab:da:27:7f:bb:36:e3:86:88:04:4e:b7:
                    33:76:d1:6c:65:15:5e:1b:5b:42:05:ea:74:c5:47:
                    5d:49:40:4c:dc:17:3a:c3:d9:2d:56:4f:df:96:a0:
                    85:d8:3e:8e:30:d6:d3:71:18:9b:a8:0f:4f:01:51:
                    e7:81:66:be:83:1b:98:38:dc:2d:0c:3e:12:01:66:
                    90:42:6c:4f:0c:93:f3:70:e7:e5:26:bb:0f:86:17:
                    d7:7f:0d:11:1a:68:9d:f1:d8:11:e1:d0:aa:24:df:
                    5d:19:7f:0f:11:e2:64:24:10:fe:c4:47:40:3a:fb:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:CB:CC:37:CC:2B:C0:60:C6:79:1F:EB:1F:48:D9:E6:C1:C0:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl

            X509v3 Authority Key Identifier:
                keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:69:3d:00:2c:3a:c9:56:6e:a6:2e:68:5b:5f:b5:04:f0:41:
         fe:31:4e:4f:b9:92:c2:a1:e5:a2:ff:a1:cc:8c:d3:b1:c2:64:
         47:39:d8:04:6d:bb:45:e1:69:a6:f0:3c:c3:ea:41:cc:5b:5c:
         85:64:de:f2:be:18:20:19:4a:59:7c:be:1f:cc:46:a0:d5:27:
         fe:6f:0b:3f:da:ed:de:40:d2:62:38:53:b5:1d:24:b9:af:e6:
         45:83:c6:72:ec:0d:09:31:cb:6f:79:37:89:2b:a0:9b:86:b1:
         04:bf:04:66:ff:dd:5d:0f:12:4d:28:6f:c2:4e:da:da:f0:48:
         58:59:e5:69:f9:84:11:fb:47:cb:19:d3:3b:aa:4d:f7:75:00:
         56:ce:4e:75:37:35:7a:2c:09:0c:79:e1:36:25:42:9f:eb:dd:
         6f:02:45:53:e1:7b:74:56:24:3a:04:ef:b2:ff:53:6b:d8:34:
         0f:fa:01:4c:e0:6e:7a:5e:0e:9a:d1:68:fa:46:74:47:25:2d:
         e8:82:7e:91:cd:bb:73:d9:35:73:f9:79:f3:98:65:92:00:22:
         51:79:cd:4f:d0:df:5f:65:69:e5:38:47:e0:08:76:2f:71:b8:
         5b:1f:44:47:a3:4e:1a:6a:b0:78:71:14:fb:b0:f2:b5:ae:16:
         be:bc:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 07:23:07 2026 by rpki-client