Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/31c03385-41b0-31fc-b34d-070f0c51f249.roa
File:                     31c03385-41b0-31fc-b34d-070f0c51f249.roa (raw, json)
Hash identifier:          EhGj6AE8Fru9M6dN7G/x7SRGOm0bjBvEDuVPZhTtULs=
Subject key identifier:   56:D0:0F:E1:27:1B:4D:23:13:AC:71:F4:3C:07:E9:02:58:12:04:A4
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F655D6BD2FFA2A595AA91C900
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/31c03385-41b0-31fc-b34d-070f0c51f249.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     21433
IP address blocks:        144.36.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6b:d2:ff:a2:a5:95:aa:91:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=6c5ce471-e1df-4290-9458-512cced9affa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:4a:d1:84:63:02:ac:a1:2a:cd:b6:80:1e:
                    ed:54:48:53:d2:55:1b:18:73:54:c1:84:43:f1:36:
                    42:7f:4a:8e:f6:a6:d4:21:42:9f:80:2f:88:fb:00:
                    70:53:e0:8e:5f:37:d8:23:6f:e4:fb:22:d5:b3:ca:
                    49:f1:4d:d5:cb:54:a4:47:a9:52:4e:2a:59:0f:1c:
                    29:c8:27:24:6b:ab:b9:b0:9f:ce:db:14:5a:9b:40:
                    d5:c5:2c:2a:13:11:5d:36:0c:43:30:fa:42:ee:e5:
                    a5:91:c1:f8:51:38:b6:1a:d8:a4:28:33:9d:1f:4a:
                    b8:fb:5f:0f:0b:f0:a9:9f:0e:56:27:a8:5c:2c:bf:
                    de:25:a5:67:6a:0a:d3:35:53:e9:06:e5:b9:ee:c4:
                    43:d2:96:06:b3:f7:9d:3c:81:23:5c:8e:f3:6e:9b:
                    54:c5:ce:5a:dd:44:1b:20:a7:fe:72:74:7e:4a:3c:
                    bd:04:cf:3e:83:92:dc:9d:e9:6e:fc:4a:41:ad:78:
                    b6:0b:31:b0:e4:65:87:c1:26:c1:78:d1:88:01:b8:
                    ca:d8:c6:16:82:b8:f6:12:e1:d0:b4:8c:84:92:1e:
                    16:e8:6f:c8:b4:3d:a9:f6:2d:d0:10:3d:16:98:85:
                    f6:db:09:3a:56:cd:80:bb:0f:40:15:98:06:d8:cc:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:0F:E1:27:1B:4D:23:13:AC:71:F4:3C:07:E9:02:58:12:04:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/31c03385-41b0-31fc-b34d-070f0c51f249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:57:a4:6e:4f:eb:64:98:74:7d:69:d3:94:1e:73:02:3c:67:
         6c:75:d8:22:e4:d6:cc:9f:e8:c8:d2:31:a4:a9:1f:97:cf:1c:
         fc:03:6d:7f:03:2d:3a:73:3e:42:80:52:6a:21:f2:0a:bb:b7:
         da:46:32:10:02:d5:14:fd:c7:93:63:a2:d1:37:5d:e3:3d:4e:
         e4:8b:f1:cf:22:94:ac:c8:af:d7:2c:14:8e:10:56:b3:83:00:
         c6:bb:d7:f1:0e:7a:98:d8:79:0a:94:66:8e:b3:52:31:1e:b7:
         08:5e:b7:f3:31:cf:b4:33:ff:14:0c:04:7a:ce:2c:17:8e:1b:
         8d:83:a0:67:b6:75:e0:df:cf:ec:4f:7a:e7:26:b1:15:e1:07:
         51:40:b8:1c:51:a8:75:1b:c8:e1:d8:0c:27:3a:da:00:ee:6a:
         9b:1e:c7:f7:33:05:4b:3b:3f:92:fd:5c:cb:e0:c6:d9:1f:d4:
         67:e5:1f:50:d0:ba:c6:94:eb:c1:b4:26:0e:21:fd:f6:ad:bc:
         a9:ab:d0:81:20:bb:8d:5f:8d:da:a4:85:ac:c6:89:5c:f5:4e:
         c2:4a:0c:05:6d:a0:7f:56:38:2c:f2:0e:20:64:d3:79:4b:d8:
         fd:23:19:fd:71:f5:b0:8f:8c:71:99:05:a9:98:ae:fc:fc:10:
         40:fe:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:19:24 2026 by rpki-client