Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/819bc418-02f4-3b3b-aa05-94c98f188aaf.roa
File:                     819bc418-02f4-3b3b-aa05-94c98f188aaf.roa (raw, json)
Hash identifier:          nCEFQCu6+1gC+DnUgMvvxioaSaSlgup5sQSLtGGcckA=
Subject key identifier:   2E:A5:80:1C:70:19:1E:37:13:69:F5:90:E7:8E:72:9E:16:2D:38:8A
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F07F42EC3BA9D7F05ED94EBC0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/819bc418-02f4-3b3b-aa05-94c98f188aaf.roa
Signing time:             Tue 01 Sep 2026 13:58:06 +0000
ROA not before:           Tue 01 Sep 2026 13:58:06 +0000
ROA not after:            Mon 30 Nov 2026 14:58:06 +0000
asID:                     3573
IP address blocks:        170.248.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:f4:2e:c3:ba:9d:7f:05:ed:94:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Sep  1 13:58:06 2026 GMT
            Not After : Nov 30 14:58:06 2026 GMT
        Subject: CN=ff9cd526-ef2c-4aa0-8c37-c3bcc9caf561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:fe:43:75:64:8a:bd:dd:17:2a:d0:b7:73:
                    a1:35:5e:cc:b8:73:20:8f:a9:a9:67:b2:50:c3:9e:
                    30:0d:f9:c3:b8:b6:86:42:db:92:76:01:00:21:cc:
                    cb:ec:f0:30:83:eb:e0:cf:32:0b:65:b9:11:c1:8e:
                    04:e0:8f:b6:13:f0:5a:4e:2c:b2:15:8e:ee:80:90:
                    78:ec:ad:ab:2c:b6:12:35:4c:09:ce:00:aa:09:94:
                    6d:63:fb:fe:7f:27:78:05:9d:2e:ba:e6:58:62:6d:
                    a7:31:6c:a4:04:ec:11:ef:af:f0:a3:e0:6b:9f:23:
                    af:98:87:48:1d:83:5d:73:ef:9f:46:f4:5b:0b:3f:
                    ee:bd:f7:9d:91:fc:04:aa:52:d1:02:16:fb:54:20:
                    a1:ea:fb:50:44:56:ea:75:f1:4e:fc:4b:9e:c4:7f:
                    83:73:61:2c:a2:c5:a9:32:55:47:bf:59:ba:4b:61:
                    f6:58:0c:13:fb:57:24:17:30:3a:b3:4b:23:9d:b0:
                    3c:ab:ee:d4:58:7b:e7:0d:0c:37:a4:48:cb:7b:b2:
                    b3:b6:fa:6b:47:f2:d9:7b:55:3b:ff:12:11:3e:f0:
                    e9:1d:56:38:c1:d0:bb:43:c3:d9:64:08:03:f7:a6:
                    50:2f:ce:22:3e:29:ee:db:60:d3:bb:98:18:d6:3d:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:80:1C:70:19:1E:37:13:69:F5:90:E7:8E:72:9E:16:2D:38:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/819bc418-02f4-3b3b-aa05-94c98f188aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:3f:90:27:8e:a5:d3:12:b9:68:db:6e:9b:54:f6:f6:ac:
         83:fa:72:f3:09:ff:92:97:86:7a:c3:1c:b9:29:6f:ed:e4:16:
         4f:69:51:bd:64:76:96:1e:71:d3:a8:67:38:5b:7d:aa:60:95:
         61:76:99:fe:9d:5b:a8:12:f5:22:98:f2:c9:21:e1:1c:03:b4:
         9f:f0:35:7a:c6:e0:ca:b5:45:2a:c1:78:8b:12:b3:6a:1a:bd:
         e9:9b:f1:b5:34:ff:96:f8:b8:b8:ee:e8:fe:28:26:ee:dc:53:
         b7:73:44:4c:b8:d4:c7:97:ce:18:1d:49:cd:32:47:6a:46:d8:
         3b:2a:d3:88:f6:df:6b:78:c6:81:b4:cd:62:46:89:8a:c6:06:
         3d:65:d5:5c:bb:c1:f9:84:86:01:ca:a0:dc:19:54:dd:45:f3:
         a3:b3:7c:93:8b:a9:29:d6:3a:97:d5:f2:01:1d:a1:fb:92:64:
         88:c9:cf:a1:e5:aa:85:2b:de:d5:1c:35:81:3a:dd:7a:86:88:
         6c:c0:cc:95:cf:86:e3:e8:fb:fc:86:36:a4:e5:5b:2c:c3:09:
         e6:13:4c:a7:b2:dc:58:ab:a5:91:a5:6d:95:6a:15:a6:ec:97:
         ee:37:b9:6f:41:97:eb:66:32:3f:4b:01:be:d1:6e:4d:0e:66:
         f2:df:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 18:04:15 2026 by rpki-client