Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4def8789-cdc6-3d70-8229-b14ec7907325.roa
File:                     4def8789-cdc6-3d70-8229-b14ec7907325.roa (raw, json)
Hash identifier:          FYgBsnIH4L9ViNzxjs/QitxY6K1DL3gxaL8RzT5lgAU=
Subject key identifier:   16:49:A3:81:86:A6:DB:AF:0C:A4:55:9C:60:63:60:B6:51:AA:1C:59
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2C95E6F67B2F91D917A80
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4def8789-cdc6-3d70-8229-b14ec7907325.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        170.251.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c9:5e:6f:67:b2:f9:1d:91:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=c961bf69-0841-4bbb-a7e4-4f3e61d8af65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:c8:42:9e:b2:b2:43:89:dd:91:00:8e:7d:
                    70:d1:27:91:6f:f5:52:d7:63:a8:60:08:81:04:27:
                    c0:f6:db:f0:ab:f9:a2:38:18:9b:7e:d1:69:a2:83:
                    b6:05:09:8d:d0:35:18:6e:82:e4:ae:a8:17:47:c5:
                    b6:f3:00:b9:46:f3:aa:81:39:7f:74:31:b4:25:84:
                    c3:d7:3f:3d:61:69:b4:51:dd:17:3a:b1:f2:2d:c7:
                    ae:69:d1:2b:25:51:2b:22:12:e5:06:1d:2d:32:5b:
                    af:f6:8e:f0:71:09:e2:aa:2a:8e:6a:b5:f2:fc:3f:
                    5f:0e:3c:4e:96:e8:f9:50:05:70:51:3a:2e:de:e4:
                    0f:67:cc:b5:70:32:2c:40:7e:c2:53:89:21:64:c1:
                    8b:e8:16:31:b9:54:06:47:c6:0a:a3:a4:95:db:f0:
                    fe:5f:6b:cd:8b:a6:23:e3:b5:15:67:08:82:5e:4e:
                    b8:5f:18:c4:14:e6:66:d1:82:44:21:89:b0:a0:fc:
                    c5:44:0b:58:b0:57:ff:85:35:03:71:e4:72:29:63:
                    e2:68:60:d8:07:a3:c3:91:0b:da:d3:56:e0:a3:a5:
                    08:1f:a2:5a:6c:27:5f:e8:29:ea:3b:a5:7e:95:72:
                    4e:87:b1:12:b9:09:30:a6:6d:b7:29:e3:f0:ed:1b:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:49:A3:81:86:A6:DB:AF:0C:A4:55:9C:60:63:60:B6:51:AA:1C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/4def8789-cdc6-3d70-8229-b14ec7907325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:1f:c4:e5:29:83:cc:b4:d9:8b:fc:2c:fb:8b:0a:99:73:
         9a:5e:d9:8f:5f:3d:0c:57:0f:f6:75:f1:32:04:56:4c:e7:d5:
         58:46:74:04:e5:27:90:4a:cc:3e:4e:fb:80:16:40:96:7e:98:
         aa:a4:8e:7c:09:7e:8f:23:af:26:de:af:75:24:b4:70:af:8b:
         6d:ac:7b:3a:a2:e8:64:ff:2d:5f:39:78:93:b3:ca:60:78:f9:
         f6:aa:c5:da:7e:7a:22:e4:84:9f:92:0b:5c:f1:c5:ae:ef:34:
         e1:d2:a8:72:f5:e8:08:4e:90:76:19:17:3b:e4:78:dd:9f:65:
         aa:a6:4a:91:54:64:8d:ce:6d:12:9b:80:bf:b6:9d:26:a9:d4:
         0a:70:65:e1:35:ee:d1:a3:37:0a:ca:94:2f:ad:e8:bc:5c:eb:
         7e:9a:43:c6:bd:33:5b:b1:ae:d4:d6:3f:4d:f0:cc:bf:16:e9:
         c3:64:83:a0:51:fc:61:9e:1d:d4:a9:8c:59:eb:93:12:2a:6a:
         1e:da:65:f9:8b:ec:d0:9a:2c:ac:82:a6:ed:f0:49:ce:24:7c:
         0d:63:13:11:e0:0a:d7:06:fd:52:ff:ee:08:4a:ae:a4:44:b1:
         a5:fc:21:d8:39:c5:6f:67:c4:0a:24:20:7f:7b:96:0b:48:c1:
         d2:f2:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:26 2026 by rpki-client