Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa
File:                     48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa (raw, json)
Hash identifier:          yaEFFUBJLuzw6MAqs/8Isu9K2InmLtoJD1y7n0t07Rw=
Subject key identifier:   DD:C9:05:48:E8:79:94:7C:D6:E1:4F:6A:BB:6B:EC:CD:DD:19:5D:4E
Certificate issuer:       /CN=9251b7c9-cc55-4637-b464-be2f1813b4c2
Certificate serial:       010D0C9F4328584E6144B84CE8AB3CC8252E07C0
Authority key identifier: 00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     8075
IP address blocks:        195.85.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b8:4c:e8:ab:3c:c8:25:2e:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9251b7c9-cc55-4637-b464-be2f1813b4c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=4936bb9d-ad0b-4cd3-814a-2e0e976c3546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:1a:a3:24:83:69:cf:f9:de:58:9d:99:33:
                    a8:57:35:d8:30:2a:8b:c2:0a:82:ff:d8:68:1e:a5:
                    eb:84:85:32:76:ac:76:6f:ad:89:1a:0a:cb:18:04:
                    97:77:2e:97:4f:c6:94:d1:5a:5c:9e:52:88:d0:1f:
                    06:d2:80:07:f5:9d:c2:50:65:ae:a4:40:56:df:b0:
                    e9:ac:a0:d9:d2:6f:2f:ad:89:c8:24:c6:0c:c0:5c:
                    7d:3c:9d:b7:72:a1:7f:b4:44:67:67:41:b0:a0:cc:
                    97:25:05:03:78:c5:42:6b:e6:09:2b:8e:78:e2:6e:
                    5e:62:57:e8:fb:27:69:37:fc:ac:e4:29:76:d6:46:
                    03:2c:6c:3b:ea:fd:d5:55:eb:10:1e:d9:40:7f:5d:
                    20:0e:96:9e:c1:db:34:5f:9c:62:21:aa:ed:2c:12:
                    ef:de:9f:23:a8:c5:26:da:0d:68:c7:17:3e:9f:1f:
                    7e:95:db:2d:bf:74:4e:5c:71:43:dd:e9:05:30:2e:
                    9a:e2:ed:48:59:2b:f7:c5:e4:b0:cd:1f:43:ff:1c:
                    60:9a:b4:49:ec:a5:fa:6c:95:33:ce:57:8d:9e:1a:
                    3c:6a:5b:cc:10:39:8c:84:27:da:e8:f7:89:a4:9f:
                    82:fc:4f:9c:4b:3c:a8:94:21:bc:d8:a3:e3:f5:41:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C9:05:48:E8:79:94:7C:D6:E1:4F:6A:BB:6B:EC:CD:DD:19:5D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/48f0f130-5910-3ec3-a83a-f1ec9c57b048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.crl

            X509v3 Authority Key Identifier:
                keyid:00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:84:3e:a7:51:f7:f9:4d:a7:c3:5c:aa:0f:7c:22:af:e0:
         83:e5:eb:85:31:2c:11:1c:1f:aa:e6:40:2c:dc:be:47:95:79:
         ce:65:2d:50:5b:4c:b9:b6:c8:22:39:8f:98:13:b2:cf:01:4d:
         10:32:fb:28:ae:06:2f:59:4b:7a:df:63:14:ac:3c:f2:08:a0:
         7a:50:58:5c:6f:1b:be:cc:65:d6:a2:4f:60:bf:66:a3:cf:62:
         5e:8a:05:a6:4e:59:b8:79:13:53:34:56:09:e8:45:0c:68:a5:
         6c:22:14:b4:93:cb:bf:1e:67:11:57:5e:ad:f2:46:1d:06:1a:
         d9:e9:7b:b8:24:8a:f6:e5:eb:dd:e0:75:48:47:d8:95:ad:77:
         29:46:d5:76:39:d1:94:85:a3:28:3b:e5:0d:68:8c:7b:ac:29:
         97:94:31:40:c8:69:6d:19:08:04:c2:de:a6:bd:00:ac:f0:7d:
         ce:6f:f9:22:cf:e4:7e:b2:39:3f:8d:54:9f:0b:7b:fe:44:ea:
         a0:82:ed:1c:12:2f:56:d7:9b:d3:2f:3a:52:53:7c:75:99:25:
         3e:3c:00:b7:87:d3:f0:3c:9b:45:2d:94:a1:f5:87:79:86:53:
         83:d5:fd:59:87:bf:0a:90:46:f6:34:f0:c8:a4:27:c3:ac:29:
         f3:d6:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:54:27 2026 by rpki-client