Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6d5cdd44-3597-31f7-87c2-061cc4fd0082.roa
File:                     6d5cdd44-3597-31f7-87c2-061cc4fd0082.roa (raw, json)
Hash identifier:          hkXLQb/Xiv3t/+2R5t9veVEd8MXAtZyC7q7YMb/P0+A=
Subject key identifier:   59:FD:81:BA:20:4A:CE:E6:72:07:ED:04:B1:91:33:77:9C:25:69:BD
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2BFDC5E90A515A6E63E40
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6d5cdd44-3597-31f7-87c2-061cc4fd0082.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bf:dc:5e:90:a5:15:a6:e6:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=f446ac76-3881-4747-927a-992c19928929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:c6:2a:4a:14:3a:7b:46:18:ba:bb:a3:1c:
                    10:64:47:8a:8a:af:06:56:0d:4d:41:45:ed:af:7d:
                    f8:39:58:da:26:64:a7:da:a4:5c:6d:ea:32:d6:e9:
                    d0:7c:7e:4b:01:89:20:64:d0:e2:4c:7d:7f:0f:c9:
                    fc:2a:d1:06:a9:e8:14:7a:1c:45:5a:bb:13:0e:1c:
                    2d:69:cf:16:b0:80:6e:37:90:ed:fc:49:c3:ae:f6:
                    63:4c:a0:ea:b9:4f:d6:58:76:aa:7a:da:c4:ef:ea:
                    e4:6b:41:b5:f3:fa:35:be:79:8b:31:04:11:3b:d9:
                    5c:27:dd:56:82:13:05:61:de:1b:4a:f3:f2:7d:b3:
                    10:31:3a:c6:f9:31:4a:da:49:af:ee:b0:70:dc:d9:
                    39:e5:b1:a5:c8:e2:67:f1:c1:a4:e0:93:e8:3e:53:
                    4c:ad:f2:60:a3:76:c3:98:a7:47:13:15:f1:ad:ef:
                    e8:d1:e7:25:8d:f7:e2:45:a8:36:b5:c4:11:d6:0f:
                    54:70:5c:bb:90:40:0d:3b:88:9b:05:bf:83:b5:c6:
                    f0:70:7a:c8:55:ce:4b:4d:b9:d1:4a:e1:4b:f8:db:
                    ae:89:ed:bd:22:47:cd:b2:f5:64:df:ef:e3:d0:f1:
                    0c:e5:bc:fc:5b:18:77:dc:9a:63:19:c0:f6:4a:c3:
                    95:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FD:81:BA:20:4A:CE:E6:72:07:ED:04:B1:91:33:77:9C:25:69:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6d5cdd44-3597-31f7-87c2-061cc4fd0082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:24:ba:ae:94:e1:98:b1:d8:0e:c2:21:cf:74:14:35:eb:
         2c:1b:71:a2:c5:06:e5:96:c0:43:35:b5:d2:94:3b:8e:94:32:
         c8:0b:9f:df:b4:56:ee:c0:64:30:c0:c2:f7:83:5e:16:17:f6:
         bd:b8:12:de:23:0e:f0:35:8e:d4:cf:e0:dc:c6:4e:e6:83:91:
         7c:82:21:66:d2:93:e2:4a:7a:0b:9a:40:96:7d:67:79:fe:39:
         8c:14:3e:57:6d:53:2a:b5:17:39:1a:a0:ad:2e:87:b4:dc:09:
         c3:74:49:4a:03:75:76:6f:1e:55:c4:a6:82:ad:bb:2d:52:2b:
         73:7d:98:3e:f5:4c:68:06:c4:4e:52:ce:2e:72:1b:df:36:cc:
         9e:d3:83:f3:82:7a:82:ed:e4:b9:76:23:77:06:cf:ce:9d:e9:
         cf:6b:17:43:10:79:59:50:16:50:76:02:9b:3e:c2:be:81:8f:
         6d:7a:83:81:e7:b7:f8:b2:8b:9a:d8:d0:66:81:cd:08:b2:bb:
         fe:9f:ec:b5:3d:3b:3b:1b:4b:25:91:72:77:51:6b:69:09:a8:
         30:55:32:98:64:9a:0d:e7:a4:ef:8f:d4:d8:9f:e0:ab:b9:f9:
         32:fe:2c:c5:20:68:c2:51:8e:70:62:ef:d9:a7:d2:0a:56:a9:
         20:d6:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:26 2026 by rpki-client