Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
File:                     04eca2f6-f0e9-3553-a9ed-47e06df97943.roa (raw, json)
Hash identifier:          DRyy6VoFah3Dc9AyotsQUf+QIBJ0jLUvZv+bEh2o5x0=
Subject key identifier:   7E:59:F8:5D:F9:E5:1F:CF:47:2A:60:B3:B2:55:E4:5F:83:8D:B7:23
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2BD433DA62B4C06997880
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bd:43:3d:a6:2b:4c:06:99:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=d6643544-0034-490f-99ee-891ef1adc5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:a7:48:d6:04:2f:72:8f:c8:35:93:95:b3:
                    e3:2a:fb:99:f9:e5:b0:0f:ab:92:e5:bc:44:a5:6b:
                    bd:32:15:f2:15:1c:e8:3c:30:fd:55:f0:3b:28:69:
                    bd:20:32:ac:9b:3e:c1:32:0c:d7:82:4d:ef:66:4f:
                    05:bf:f8:34:bd:e7:98:c5:c2:8e:c9:03:ea:b3:99:
                    50:9a:bc:48:04:65:dd:a1:b0:5a:10:3b:6d:99:16:
                    6d:70:63:17:5e:7c:8d:f1:8c:a4:9e:4a:7c:b9:16:
                    b2:ab:36:a6:27:3f:1c:b0:13:61:c3:a1:38:20:fe:
                    60:a6:1b:47:fc:9a:2f:eb:ce:22:ef:b0:17:e1:89:
                    71:ff:14:ec:1b:11:c4:77:10:9b:00:2e:b4:29:dd:
                    f6:08:1a:cd:46:25:14:c7:2a:ec:95:36:14:09:e3:
                    8b:f8:e0:6c:a5:7b:2c:cf:69:56:2d:ba:0d:43:22:
                    91:a8:a3:84:7a:d1:94:d4:d7:49:a1:4a:01:d1:46:
                    68:2f:68:31:58:06:6f:54:a1:95:21:e9:62:98:9a:
                    c1:e5:d5:52:d1:17:7a:f2:57:4f:ba:b8:06:62:fa:
                    81:ec:4e:af:2c:41:3b:54:ea:84:a8:ad:26:5e:84:
                    df:11:89:ed:3c:be:50:e4:08:8b:78:f6:8b:22:94:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:F8:5D:F9:E5:1F:CF:47:2A:60:B3:B2:55:E4:5F:83:8D:B7:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:39:db:e8:90:df:46:7b:88:89:19:8d:3a:79:11:32:5a:8c:
         56:2d:9b:f3:c3:75:0c:31:c7:27:b1:da:36:92:4d:2e:ca:c7:
         a5:63:73:b3:00:1c:3b:c2:17:62:05:78:1d:85:60:5b:92:28:
         03:1b:d1:c0:b2:2d:9a:d4:39:c3:c4:40:16:11:78:d6:40:ba:
         51:4a:a3:79:50:51:1a:4d:60:cb:d5:25:34:23:e4:d0:fe:94:
         ec:e5:a8:f4:4d:2b:61:3f:7b:c0:e1:74:c7:dc:9f:ec:78:22:
         df:81:15:99:0a:72:fe:d1:2f:76:71:13:d6:5b:ce:e9:b2:02:
         1f:67:f2:dd:7f:8b:bd:94:a4:7a:2f:69:c7:4b:a8:f7:11:22:
         1d:cd:60:7b:d2:73:83:4c:2d:d5:43:4a:8a:fb:8b:04:26:79:
         75:a5:c7:0b:fa:d7:5b:87:82:9e:29:2a:c3:a8:b5:c5:a7:36:
         f4:28:08:b4:87:28:59:cf:5c:08:53:0f:74:39:18:05:d6:90:
         e7:f4:fa:df:fe:2a:a9:11:68:4b:a3:b3:fc:3f:71:65:50:53:
         78:89:ac:db:82:ba:27:a3:36:40:08:9a:2b:fb:07:e0:7c:5f:
         e6:0b:5c:dc:16:8d:8b:61:83:c5:e2:6f:96:a4:33:bd:47:5d:
         6e:8b:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:19:39 2026 by rpki-client