Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5549043c-2c7a-33ed-a662-7e10336182ec.roa
File:                     5549043c-2c7a-33ed-a662-7e10336182ec.roa (raw, json)
Hash identifier:          Jr3op40opQ5CWgKpJTe4/CYm2x6+nmvQqRLyKGUPUPo=
Subject key identifier:   6D:02:21:EF:AE:0F:06:3A:8C:64:D5:16:E5:ED:EF:56:D8:14:CA:31
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2C54C8562ECBAA6F36500
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5549043c-2c7a-33ed-a662-7e10336182ec.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c5:4c:85:62:ec:ba:a6:f3:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=bdc4c284-f327-41a0-a9ce-03b40b61035e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:bf:bc:c8:0c:e6:91:f5:28:9a:10:a9:ab:
                    80:3f:3c:27:e2:df:c6:0b:cf:e7:2e:f9:b3:cc:81:
                    4b:e0:c6:54:5b:07:b7:02:d2:d3:e7:f4:52:ed:15:
                    3c:d5:6f:54:56:32:c5:05:83:5a:cb:79:e6:30:f5:
                    66:e7:50:ae:01:9d:2f:f6:39:a7:bd:67:83:7d:d8:
                    23:ae:ce:96:88:f2:5b:5c:6d:9b:59:f6:d5:ef:68:
                    8a:5f:20:78:a5:ca:11:b2:28:60:9d:d9:6d:8b:2e:
                    51:af:b4:d2:d1:62:e3:77:c8:ca:5d:94:8c:3a:ee:
                    6a:5d:65:ba:d5:0e:60:fd:91:77:4d:8c:8a:43:54:
                    15:56:11:d2:db:ba:1d:a5:4c:02:e2:1e:6f:1b:fd:
                    36:95:9a:75:db:34:3c:56:13:4b:8a:0b:5c:59:6a:
                    41:65:26:13:36:9d:c0:3f:d6:ab:d7:68:ae:5c:13:
                    dc:ee:09:9f:01:0d:39:00:53:a0:ac:1f:9f:a2:05:
                    94:7e:a0:ff:3e:13:f5:59:20:d9:b7:91:fd:c3:05:
                    20:b0:be:7c:b1:c9:5a:11:21:4d:64:a9:0b:b5:37:
                    60:8b:5e:6b:4d:33:31:e5:db:36:6f:a5:20:8e:39:
                    e9:83:4f:d5:aa:79:bf:f1:4c:a7:91:3c:91:2a:0e:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:21:EF:AE:0F:06:3A:8C:64:D5:16:E5:ED:EF:56:D8:14:CA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5549043c-2c7a-33ed-a662-7e10336182ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:32:a6:89:02:d3:60:bf:4e:db:64:88:a4:ac:a6:ec:7e:
         8e:48:61:44:bf:67:b2:c1:25:db:35:e5:9a:72:f6:75:30:48:
         82:64:04:ef:24:b3:4c:b9:47:81:3a:aa:ac:60:1e:39:8f:7c:
         51:30:95:04:af:e7:6c:d9:0c:98:79:56:f2:78:10:c2:91:e9:
         0f:cc:54:15:30:2c:f8:43:d8:d8:91:96:89:08:49:1d:7c:bd:
         ba:db:73:01:14:f3:9a:d5:25:94:9e:f6:f3:77:d7:15:34:09:
         75:7d:a1:8c:9a:1d:af:b2:9e:4c:85:2c:94:e6:ff:f0:51:07:
         71:31:b6:b1:44:29:46:ba:b4:0a:5a:16:f1:81:b2:3d:d1:b2:
         a9:cc:4d:8a:d3:16:fc:f0:a9:7f:74:a1:02:92:b8:1e:f0:58:
         f7:8c:c3:c4:cf:7a:e8:8c:1d:d9:4f:41:4b:fd:18:e8:bf:31:
         2f:74:cf:bd:91:43:2f:3b:ba:55:06:53:a3:3f:b8:bc:3b:9b:
         0f:90:80:51:b2:22:6b:a8:77:c7:79:b1:92:e5:74:ef:c7:9a:
         be:05:fd:7f:ed:91:04:06:b1:e0:23:41:b9:22:4d:97:ea:48:
         4c:69:e0:ad:dd:9d:11:68:33:a9:97:b2:38:fe:cd:f5:7b:89:
         b8:24:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:33:55 2026 by rpki-client