Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa
File:                     3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa (raw, json)
Hash identifier:          RhickLTKUgVnZ6XtJ+Uu9HpbqLRuENmyQim6JvXD0cw=
Subject key identifier:   B1:A3:CC:E5:92:2D:75:69:6D:2D:6C:3A:01:F7:0C:1D:62:C1:F6:E7
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EC4D712BF00E19C1B6BA380E0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     21433
IP address blocks:        170.248.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:12:bf:00:e1:9c:1b:6b:a3:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=c8607d3c-a08f-4c49-a6d9-6c9d2d05c7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:6a:9a:05:8f:78:19:15:33:ae:89:70:b0:
                    d7:c3:48:4f:78:9f:ea:6d:dc:21:6d:af:8e:a1:0a:
                    bf:fa:86:e2:d6:47:5a:63:d4:aa:54:cd:89:55:bc:
                    f8:26:95:b0:b2:a6:a0:98:f4:ae:0b:2f:45:c2:ad:
                    f2:5f:fb:74:11:03:7c:db:fc:22:06:c7:50:0a:2e:
                    9d:ca:45:89:79:fe:35:91:3d:6c:89:2b:66:a6:fd:
                    ca:ee:d3:f5:44:1d:ac:9e:57:df:cc:66:03:81:5a:
                    e4:fe:dc:fd:fc:e7:94:ea:4c:98:29:9f:9e:dc:e0:
                    10:8a:14:80:70:1c:3f:e4:e9:a5:5d:bb:26:bb:e9:
                    0d:8d:33:db:91:2b:3f:68:6a:c7:e7:91:47:22:a3:
                    63:fb:75:45:94:95:9b:0b:41:e9:9e:68:61:be:6b:
                    95:30:c6:a5:d6:02:c2:2a:ac:ce:75:6c:df:18:dd:
                    1d:33:59:72:b3:26:b1:64:2e:32:97:6e:e3:e5:e7:
                    5c:cf:cd:7f:d2:ac:79:9a:2b:6c:33:0b:87:0c:69:
                    9d:6d:6d:ba:4e:96:2d:76:61:23:25:5f:71:c8:cd:
                    e2:55:cb:f6:3b:ca:71:44:df:90:76:9f:ee:bc:6b:
                    da:b9:07:0a:c7:e2:99:df:e3:e9:d6:8b:cd:d7:7f:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A3:CC:E5:92:2D:75:69:6D:2D:6C:3A:01:F7:0C:1D:62:C1:F6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:66:44:65:55:3a:5b:c8:5f:04:4d:04:b8:47:be:8b:8b:8e:
         41:a6:c7:b9:4c:6a:e0:bd:29:a7:cb:d4:59:c8:1a:a0:4c:70:
         9c:80:56:cf:ca:94:55:f4:bc:84:55:7f:b8:4b:94:1a:2f:41:
         4a:93:4d:11:5e:d6:a6:b8:73:66:b3:d3:49:5a:30:6f:0b:c7:
         9e:be:a8:9c:81:9c:c6:78:df:0b:86:15:e7:b4:fb:dc:b5:1b:
         96:20:8d:15:a0:44:56:57:89:9a:73:4c:df:e0:c5:87:15:95:
         90:be:0c:64:54:a8:56:0b:b9:b2:8c:9a:71:12:59:64:70:b9:
         66:6e:ea:a3:1e:ba:55:ea:51:3b:f3:94:cf:7c:a0:ae:b6:4c:
         ad:34:5e:3e:13:f7:e2:88:fb:bf:44:f9:ee:7c:ca:b0:97:67:
         cc:98:4d:b8:63:3e:39:28:6d:fb:54:06:8f:4f:ff:dd:66:6b:
         15:4c:2e:2f:9e:76:c5:3e:b9:3f:4b:40:10:37:c7:12:88:18:
         06:98:9c:97:f4:a3:87:16:35:0f:f1:c5:59:31:08:2d:7c:d2:
         a3:92:c2:ff:86:c2:57:80:25:53:70:7b:88:5f:59:5d:ee:43:
         cf:9a:c2:0e:f6:1d:91:92:6c:58:d7:e1:b7:d4:e7:f6:3a:a8:
         ed:20:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:12:34 2026 by rpki-client