Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5ee1d2f9-7571-3c62-b370-536257a7cffc.roa
File:                     5ee1d2f9-7571-3c62-b370-536257a7cffc.roa (raw, json)
Hash identifier:          STSgAw/qE+m7JBaJWmEICB4q9gfVzGjon5ZNuxq82Uk=
Subject key identifier:   77:5C:6D:68:BB:9C:82:62:B5:BD:48:F3:C4:C0:D0:9D:8B:18:11:56
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2CA6E929253789006BE80
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5ee1d2f9-7571-3c62-b370-536257a7cffc.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:ca:6e:92:92:53:78:90:06:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=fce665bd-5b5f-411d-bcda-1f5b2fb80ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:05:03:95:ab:0f:37:5b:5b:d9:9f:1c:65:77:
                    2e:85:e4:50:f3:95:2a:46:3e:18:a4:15:90:3f:95:
                    c9:ad:9c:d2:65:53:47:04:11:64:69:d8:c7:88:cf:
                    b4:ff:c8:f7:54:90:69:9c:3c:4f:99:b4:f0:6d:00:
                    a0:54:0e:e3:99:f1:0a:42:8b:38:d9:c2:c1:b0:e0:
                    8c:fa:81:e1:91:f9:cc:b9:7f:79:95:64:40:59:02:
                    c0:2c:fc:01:d1:9d:87:93:df:06:40:2c:16:75:4e:
                    e8:2e:31:49:14:07:fa:b1:2f:07:4e:1e:d4:90:f9:
                    2e:fa:99:88:f9:f7:89:68:cf:c8:a5:27:ed:bc:7c:
                    41:f9:b5:88:6e:d2:3c:18:e7:6a:00:c3:a3:08:cd:
                    5f:65:5c:6c:e1:5e:bf:a2:fd:8e:43:82:7d:56:b4:
                    bc:e6:f8:c8:9c:d6:31:b9:57:72:35:5f:c2:df:41:
                    ea:3b:3f:2d:5a:5f:d0:2e:97:15:b7:af:9b:a4:80:
                    26:01:65:ce:2c:f5:a7:cc:d9:b7:d3:97:f6:ee:8f:
                    a3:45:1b:1e:01:8a:48:68:e0:a5:ac:92:3d:de:08:
                    e1:08:3b:0d:f4:e5:20:9a:a4:27:6f:65:b4:d2:ad:
                    6c:7a:b5:b3:67:db:38:50:e8:cc:a5:ad:6c:a6:90:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5C:6D:68:BB:9C:82:62:B5:BD:48:F3:C4:C0:D0:9D:8B:18:11:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5ee1d2f9-7571-3c62-b370-536257a7cffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:1a:77:5f:aa:3e:5b:09:7c:f6:fd:a3:2f:be:63:1e:86:
         31:93:61:f1:7a:f9:40:1a:dc:2c:1e:9b:0c:2f:e9:57:ee:d8:
         0a:b7:4f:10:49:73:c7:fc:ab:8c:5b:77:be:f2:18:63:f0:99:
         2b:48:f7:47:29:7e:ba:5e:f1:82:5a:be:8d:28:40:29:20:7a:
         14:54:96:1b:15:57:c3:dd:67:92:c0:aa:79:1d:62:c0:32:78:
         54:19:a0:35:19:fb:6d:d0:82:21:64:5d:6b:d6:f0:ec:6d:e6:
         c9:84:0e:30:82:d3:c6:61:6f:45:a7:01:27:68:6b:a7:8b:db:
         cb:a6:c5:8a:41:a2:08:8d:b2:c2:c7:da:58:e5:40:64:83:89:
         81:bb:fc:1f:7a:22:e1:04:a6:75:d0:45:03:8e:3e:06:97:27:
         8c:3b:97:f4:b5:22:f7:9e:d8:f9:b8:6c:39:c2:2a:06:c7:bf:
         d1:84:04:7a:fd:b6:c0:9a:0c:10:39:a6:20:98:fb:8c:e1:48:
         14:46:90:3d:2e:be:c2:f2:a1:bf:1d:f7:30:bb:84:bc:21:64:
         41:56:aa:3a:32:56:6d:14:01:2a:85:fd:3f:22:c9:6a:f7:f7:
         82:4d:e1:a3:a1:47:81:1f:ed:fc:db:c7:ed:de:40:6a:47:2d:
         2c:41:fa:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:58:52 2026 by rpki-client