Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa
File:                     603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa (raw, json)
Hash identifier:          SAyCofJ4crjWvNbdjzhLUnU0xEzVbUVsXEXV1D+0trA=
Subject key identifier:   CD:95:09:CF:A1:DB:9F:FC:70:FE:56:5E:67:01:8F:B9:19:9C:25:4E
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EC4D70AB1EF2E08DA31C73A60
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     21433
IP address blocks:        144.36.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0a:b1:ef:2e:08:da:31:c7:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=f0ca00a4-6f27-4d44-9f38-0d20b0611f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:7e:20:64:a3:aa:f6:9e:49:3b:8e:85:f0:
                    03:03:6a:23:f2:cc:22:b1:b7:ee:25:0b:fd:e2:b4:
                    d8:57:4b:7e:1f:d4:f6:7e:e1:03:eb:86:19:61:25:
                    d2:0b:31:82:08:48:12:d9:e0:84:4a:58:10:35:3d:
                    09:52:75:bc:9d:0d:19:74:47:b5:6e:f3:a2:11:d0:
                    65:44:97:ea:99:a5:35:d6:35:18:58:95:2e:14:eb:
                    d7:97:42:cb:c6:7b:9f:5b:79:0e:2a:b2:fb:02:38:
                    42:53:1a:c2:cd:97:4c:9c:10:87:19:93:e6:3c:e4:
                    b2:aa:2b:c4:7c:da:d1:0a:55:26:9d:b1:62:5c:71:
                    d2:b5:0f:1f:da:1a:d0:09:f8:68:0f:9f:12:cd:07:
                    aa:dc:b8:36:5c:08:12:0f:93:af:29:df:2c:d9:8a:
                    38:0e:f5:46:67:7f:6a:a4:77:39:4b:d4:1e:0b:b1:
                    19:60:4f:4d:2a:d5:ef:ed:99:3a:f8:74:d2:5c:36:
                    c4:35:77:7c:0d:37:04:6e:9c:03:16:67:e0:bb:f4:
                    c5:67:8e:90:25:a0:d2:c4:04:97:09:c1:40:40:54:
                    50:99:70:ef:5c:f1:7c:3a:f0:02:bf:97:ee:3b:ff:
                    49:9b:f0:bc:37:dd:b6:50:93:e2:be:2f:42:29:74:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:09:CF:A1:DB:9F:FC:70:FE:56:5E:67:01:8F:B9:19:9C:25:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a9:a3:b6:4e:bf:f5:68:a5:2f:f3:86:61:59:c8:2c:0e:a4:
         43:d4:cb:b5:72:c7:e4:7d:ad:92:1d:ae:2b:87:4e:b0:d4:08:
         2d:de:c3:e8:b3:d6:91:ba:b2:4a:d7:9f:f6:56:d2:20:93:b7:
         13:c7:07:06:2f:18:6c:17:8d:e9:ce:40:03:21:f4:b0:3f:da:
         5f:85:7e:75:7e:d0:42:99:b4:a6:36:a4:5b:51:4a:e2:ae:6b:
         b3:64:68:61:86:87:ed:e2:57:1e:41:8e:f7:0b:58:b7:1f:c4:
         f8:8c:16:07:5b:31:a4:f1:18:34:3b:a3:d6:f1:47:03:ca:e4:
         52:08:74:08:fd:0d:8a:2e:3b:bc:ce:26:13:f5:14:db:4d:2f:
         f9:2c:89:15:73:ba:3c:e5:b3:f8:4b:b3:78:dd:c3:5a:92:6e:
         15:24:c4:e2:72:b5:4b:cb:e4:cf:e4:11:cf:9e:83:40:f7:e0:
         57:18:72:54:3b:e1:cd:f4:ee:9c:fa:14:27:da:aa:35:7e:f0:
         f8:28:2b:88:6f:28:50:4a:8a:f2:d8:a4:6c:20:13:72:2c:c7:
         43:e0:73:9f:71:c2:13:8f:97:b7:3b:12:e1:5a:d4:8e:c6:0b:
         7f:a7:0d:15:b5:d6:14:87:b7:30:ab:51:59:b4:14:d6:f7:c1:
         ad:35:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:12:08 2026 by rpki-client