Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa
File:                     603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa (raw, json)
Hash identifier:          iqwUynBpS7T2HkGOQ4LCqRwOmP6OUMCOztX5zLmvIlU=
Subject key identifier:   CE:10:18:EB:56:0D:32:DC:14:98:7F:6E:2C:77:E7:A4:C7:2A:D4:FA
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2BB4260945FD220D5B648
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bb:42:60:94:5f:d2:20:d5:b6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=aba97ee2-cf91-4d48-92cd-3577ab885a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:74:e7:84:cf:a4:f4:50:96:66:92:a6:e1:
                    83:0f:77:c6:c0:62:1a:03:47:ab:37:d7:23:42:54:
                    88:71:de:95:54:19:01:14:c0:b8:df:6b:e5:de:bf:
                    f3:39:25:09:c4:02:d7:cc:b4:cb:8f:f2:00:d5:18:
                    f7:a8:67:7f:23:1f:bc:a9:f8:0a:41:f1:39:04:af:
                    9e:93:86:fb:02:36:fd:40:9f:3d:44:4f:92:1b:06:
                    2f:96:06:49:9b:b9:8c:65:0f:bf:7d:3c:30:d2:fd:
                    a5:04:37:a2:7b:8c:25:b0:c4:bf:ee:bf:a9:87:a6:
                    c9:39:ad:6a:66:df:87:f5:05:b5:eb:f5:40:da:3d:
                    b1:cb:46:f4:d4:52:c4:04:6f:ad:14:76:0a:b9:d4:
                    ab:01:c1:c4:e9:be:64:ea:9a:19:51:d4:14:66:c4:
                    c8:97:22:b1:66:d6:b6:46:ad:25:b7:2a:93:31:e2:
                    c8:25:41:46:8f:2f:56:19:30:2b:87:35:3b:77:6b:
                    d6:47:8b:e4:89:fd:5c:1e:81:45:da:90:0c:7e:76:
                    9e:2b:76:d0:34:97:b3:ec:e3:e0:57:f0:10:1d:8f:
                    34:7c:87:ea:4a:8d:a2:68:81:94:99:04:ac:67:4a:
                    81:12:50:06:55:a5:a3:13:6f:c4:a4:b7:72:85:db:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:18:EB:56:0D:32:DC:14:98:7F:6E:2C:77:E7:A4:C7:2A:D4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/603fa3ee-edae-3ad7-8a52-e85791f89c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:86:50:16:c5:6c:d1:9e:60:40:16:d8:0e:74:cf:65:ec:
         c0:36:bb:0a:e9:1c:cf:fe:bf:0d:cd:60:6c:b2:4f:b7:56:51:
         d7:1e:7d:27:ab:c8:72:77:e7:5d:ac:43:5a:eb:fe:99:d0:d9:
         11:80:c6:c1:da:99:b7:35:45:ee:df:58:c3:87:83:d6:53:65:
         b2:2e:c4:5c:01:a8:c4:04:b5:54:bb:c6:21:9a:07:8f:59:c4:
         61:7c:0b:fd:ac:8e:6b:73:1c:c7:87:d9:4a:99:4b:5c:6a:b8:
         ff:59:22:32:47:c0:d3:6b:62:ce:31:1b:73:6a:02:98:aa:05:
         1e:02:e7:3e:99:50:75:4d:ae:ad:0f:7e:74:5b:80:3c:30:42:
         3e:09:f9:f6:a7:1e:05:37:32:85:81:9b:9e:e8:ce:6d:f4:54:
         91:01:8c:61:f4:e4:0c:b6:45:16:53:74:2a:21:f4:41:35:5f:
         e5:4c:87:53:22:bd:98:42:7a:c6:6d:5e:1b:bd:c5:0a:18:3f:
         40:9d:ed:53:79:b2:df:3d:9e:11:3d:29:39:09:a0:ad:de:27:
         ef:e5:1d:33:03:7b:ea:85:fd:cd:56:3a:6b:b4:09:a6:6a:af:
         32:30:f5:44:8a:32:8b:15:40:17:e5:15:0e:54:98:43:5e:84:
         f3:68:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:40:18 2026 by rpki-client