Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/421316d6-4cdd-32c8-b1e0-3f8bc9c4c391.roa
File:                     421316d6-4cdd-32c8-b1e0-3f8bc9c4c391.roa (raw, json)
Hash identifier:          fW0B280PTaRQUNSIuGe2LsADITIhq1vHXFgFlbMcxmo=
Subject key identifier:   AB:06:5A:80:41:B9:18:B2:8E:6E:DA:51:D0:3D:C6:12:41:25:D1:8E
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584D10FDA25667754A84BDCF2100
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/421316d6-4cdd-32c8-b1e0-3f8bc9c4c391.roa
Signing time:             Thu 05 Mar 2026 10:05:33 +0000
ROA not before:           Thu 05 Mar 2026 10:05:33 +0000
ROA not after:            Wed 03 Jun 2026 09:05:33 +0000
asID:                     21433
IP address blocks:        170.251.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:fd:a2:56:67:75:4a:84:bd:cf:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Mar  5 10:05:33 2026 GMT
            Not After : Jun  3 09:05:33 2026 GMT
        Subject: CN=7474fbe9-baed-47e6-b877-c34eef33c1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:ab:80:3e:d3:b8:b0:7e:95:36:05:b2:40:
                    17:5d:5f:92:71:68:da:04:77:da:33:f8:70:27:10:
                    e7:3c:d8:0f:c7:3a:64:57:3b:b4:7a:1c:ea:32:9f:
                    f6:b4:b6:b2:32:ce:97:6f:32:70:cc:12:3d:43:95:
                    b5:91:8b:32:5a:06:14:e1:26:16:dc:37:2e:d1:34:
                    f6:a0:16:27:1f:a0:d3:93:b0:d8:a6:12:17:5a:a6:
                    c3:64:66:c5:dd:26:46:d7:0f:30:fa:7d:de:b3:a8:
                    61:3f:95:47:c5:35:dd:f7:19:72:b3:b0:0a:27:76:
                    d5:d2:91:98:a7:ad:b7:8b:eb:93:50:53:9b:50:a6:
                    54:0c:2c:71:23:42:42:57:94:0a:68:4d:27:21:ab:
                    8e:8b:ac:df:ea:70:d7:a0:e4:ec:29:18:f5:86:7b:
                    8f:7f:07:11:65:25:27:a9:6c:d9:b9:3a:9f:fe:ec:
                    ec:a6:64:20:32:ea:77:5d:ca:6b:e4:86:1c:12:35:
                    ba:a4:fe:9a:6c:0b:47:17:58:3b:27:1b:64:0a:5c:
                    af:43:ea:51:7a:94:ca:26:1c:40:14:5c:19:88:08:
                    ca:df:2e:57:fc:48:e5:a3:99:91:76:65:3b:e1:1e:
                    bb:23:02:30:c4:12:31:6d:cf:fd:46:71:90:bb:36:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:06:5A:80:41:B9:18:B2:8E:6E:DA:51:D0:3D:C6:12:41:25:D1:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/421316d6-4cdd-32c8-b1e0-3f8bc9c4c391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:a4:9b:54:f9:dc:4a:23:7d:1f:d6:a3:c1:7f:4a:d3:33:
         f3:2c:a4:3c:e1:6c:be:e9:8e:e7:48:95:f4:d3:bd:a8:1e:63:
         4e:ea:ea:fe:de:a7:45:75:a9:a9:e7:a6:1d:90:b2:1d:b5:a6:
         c5:b9:3c:8a:64:0d:6b:7c:b9:92:97:f1:f4:1a:d4:de:51:fa:
         1e:74:45:60:c3:81:89:12:02:95:c1:a0:27:08:8f:74:bd:02:
         f4:58:84:15:3a:33:7a:d5:45:85:6c:f9:34:12:5b:af:38:b2:
         b9:24:83:d1:4c:23:13:6a:93:1e:cd:26:28:81:68:24:72:fa:
         c4:df:97:4e:0a:44:53:d8:d8:4f:18:d9:75:6d:f6:15:04:42:
         b0:21:78:80:3b:fc:05:c6:a6:53:c2:a2:35:33:7f:9c:2f:e5:
         3b:5e:d9:6d:f3:4f:5e:79:1d:9a:4d:ff:ea:2e:90:68:27:58:
         d5:c9:12:df:7a:5b:3f:d1:6b:b4:a4:67:07:e1:a3:c5:4f:c2:
         f9:d9:cb:3e:0e:92:e5:57:89:88:01:7a:4e:7f:cc:b9:11:f2:
         13:b7:19:17:14:97:38:06:dd:7d:44:91:50:00:f4:d4:df:92:
         95:4c:89:f8:51:8d:ee:6a:55:f3:e9:25:a2:68:b6:bf:87:56:
         98:99:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:53:01 2026 by rpki-client