Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6a252fd9-985e-39ce-9820-467f1f0c10f1.roa
File:                     6a252fd9-985e-39ce-9820-467f1f0c10f1.roa (raw, json)
Hash identifier:          vBlN3QS6aQyV194oD53q6cXigkcq53tuE2nEGT7yH8I=
Subject key identifier:   F5:CB:41:00:6A:7D:21:F3:E4:52:6E:42:7C:8C:48:BE:3E:75:1F:A0
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F69B1AA5192F260B1DDC7EF00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6a252fd9-985e-39ce-9820-467f1f0c10f1.roa
Signing time:             Tue 06 Oct 2026 14:13:18 +0000
ROA not before:           Tue 06 Oct 2026 14:13:18 +0000
ROA not after:            Mon 04 Jan 2027 15:13:18 +0000
asID:                     21433
IP address blocks:        170.251.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:b1:aa:51:92:f2:60:b1:dd:c7:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  6 14:13:18 2026 GMT
            Not After : Jan  4 15:13:18 2027 GMT
        Subject: CN=602f1d04-0a0d-4df3-9ff2-329bac020455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:86:c7:3e:41:be:94:a5:68:d6:7e:b8:40:
                    2c:6f:a5:50:89:e7:9f:aa:1f:05:ff:80:c2:16:b3:
                    e3:02:8e:e9:8f:33:1c:3b:31:dc:51:3f:cc:82:09:
                    08:a0:02:7d:19:6d:c7:8e:31:54:84:7d:96:83:c2:
                    af:44:7e:db:d4:8c:bf:02:2b:e5:ff:7e:7d:cc:85:
                    af:12:45:eb:41:ed:f9:bf:78:5f:6d:b1:61:f0:43:
                    13:c0:9a:c7:ee:25:c6:70:a5:af:33:37:18:ae:d0:
                    47:91:5e:db:ac:76:ec:fb:e1:ba:ff:53:51:75:38:
                    57:76:43:01:54:bf:3b:59:e3:78:b6:03:7a:e6:ce:
                    b2:e8:21:93:7a:43:fe:73:b5:dd:c9:8d:33:66:27:
                    71:d4:99:a4:4f:55:fb:25:6b:0c:d3:9d:e5:7f:df:
                    54:91:aa:df:3a:85:eb:01:e1:f0:72:f6:37:44:a8:
                    17:2d:5f:87:d4:b9:dc:da:bd:7b:e6:7f:80:87:9a:
                    40:ab:bf:ed:ae:8c:37:91:ef:df:f8:22:8d:2b:6f:
                    14:4c:c8:75:93:5a:2a:d0:d3:92:cb:a3:25:75:4f:
                    e8:8e:3e:c8:e7:ae:a2:68:38:13:39:a0:d7:2f:83:
                    5a:94:30:24:16:0e:ef:7d:dc:ba:35:a6:17:1d:bc:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CB:41:00:6A:7D:21:F3:E4:52:6E:42:7C:8C:48:BE:3E:75:1F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6a252fd9-985e-39ce-9820-467f1f0c10f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:35:e9:62:22:13:db:7e:9f:52:44:e3:ce:8d:da:d0:05:9a:
         09:9b:67:af:e4:8d:1b:ea:26:8e:d2:01:03:24:36:da:72:15:
         91:92:7c:db:54:d7:eb:c3:62:5d:50:df:46:3d:15:8f:11:29:
         e1:21:4e:70:90:27:29:d0:bd:84:20:97:66:c7:c9:ec:2c:ab:
         d1:81:b7:b0:2c:52:cc:50:3a:22:f9:98:7f:ed:0a:e1:ee:1d:
         26:3a:6c:03:4f:6c:d5:2b:5c:f9:0e:39:18:db:91:75:86:9f:
         70:7d:7c:2d:85:26:02:c7:60:12:ef:8b:dc:ce:94:85:17:89:
         99:1b:7e:7c:15:8a:e1:74:65:00:1d:e1:0c:6a:90:67:f9:dc:
         e5:53:5c:33:a4:ae:47:9d:29:a5:a0:1b:c1:c4:77:ed:32:46:
         9c:30:e9:1a:0b:a4:e2:34:ab:e5:6c:24:f6:26:1d:55:de:83:
         9d:3e:fa:f5:ea:e0:42:39:54:62:b4:94:82:47:07:9f:d1:71:
         06:fd:d8:bb:36:04:6d:dd:dc:7a:5a:3e:cc:6c:d0:23:a1:16:
         81:eb:2c:05:9d:11:9f:b9:f8:85:0b:3b:b1:00:e9:0c:c7:02:
         f2:48:af:2b:4b:ca:89:1f:34:ff:45:53:b3:38:c2:d1:0e:3c:
         00:e0:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:18 2026 by rpki-client