Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa
File:                     94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa (raw, json)
Hash identifier:          nrtxG50YkOP76oUNzQ/q0bXjRTzpmZhIL2ZDTVp3O6s=
Subject key identifier:   85:78:0E:03:53:94:4C:6F:69:86:D0:57:90:BD:2D:24:AA:F5:29:24
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2BEE5B71EE7351B1503A0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:be:e5:b7:1e:e7:35:1b:15:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=f8e035ed-2c37-455b-bf90-3ed36b420f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:1b:0e:5b:fc:39:5d:4a:f0:b3:fe:2a:b7:
                    cd:70:24:d6:72:f0:97:e0:e2:18:2b:42:98:3f:ac:
                    55:ef:f7:ca:24:22:56:7c:a2:09:2f:92:46:fb:8b:
                    e4:f7:24:ad:14:46:8a:e6:ad:f3:82:5b:da:b0:e8:
                    60:09:b9:12:02:dd:89:f6:4c:2d:d2:ee:04:98:a7:
                    90:77:a3:64:5a:f9:3b:d2:fb:46:fa:f1:8d:1e:25:
                    25:e8:5d:72:7c:98:ef:ab:a2:ba:8d:2a:98:e7:8e:
                    15:c2:e2:3d:7d:62:a3:8b:42:43:a8:48:de:13:46:
                    f5:7c:99:42:a6:fd:e5:a0:30:8f:9f:45:ac:35:44:
                    5a:fc:b0:c9:f5:6d:6c:a1:6e:29:ab:1c:09:30:1c:
                    23:25:f5:93:83:42:0d:ac:10:fa:3e:6e:2c:da:43:
                    a7:68:94:3f:9a:3d:1c:06:be:09:c7:3e:bf:32:a5:
                    a6:8a:43:11:a8:07:ca:e6:3f:2a:27:09:d9:1d:87:
                    37:f2:90:d4:49:1e:64:f7:a1:4e:c3:08:d9:8c:13:
                    84:88:b1:2d:49:e4:31:34:78:00:e9:70:63:8a:5e:
                    48:05:c2:bd:c4:b2:34:d9:db:71:39:33:49:2b:a8:
                    67:e0:07:65:9e:59:71:2a:2c:ae:0c:b6:19:04:2b:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:78:0E:03:53:94:4C:6F:69:86:D0:57:90:BD:2D:24:AA:F5:29:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:f6:4a:5a:2c:38:b8:05:b4:09:f2:7e:0c:92:8e:61:49:
         7f:bf:03:2f:55:0b:2e:93:6f:32:66:ed:d9:22:2d:b5:cf:02:
         97:5f:b0:57:5b:14:c4:d6:73:db:b7:1f:51:56:1c:a8:63:d3:
         e6:dd:ad:d7:d4:13:6d:76:1c:40:0c:a1:17:1c:83:50:af:ac:
         d4:da:19:e1:d0:a5:ff:ea:8e:4c:b0:e5:41:fb:e9:03:71:07:
         7c:84:86:8e:ae:d3:26:53:1d:11:25:01:49:40:69:a7:1e:66:
         90:cc:1f:bf:f8:cb:87:c6:29:7d:dd:ef:6f:f2:fd:62:01:cd:
         93:20:fa:81:38:f5:fb:c7:5b:e0:34:4f:cb:ed:df:12:20:e9:
         67:7f:84:d2:18:fe:f7:68:2b:04:8b:a0:67:d4:dd:4b:f4:c0:
         9c:63:55:bd:77:ae:c6:93:e8:08:97:6b:ca:7d:4e:08:f9:16:
         e5:cd:7e:10:9c:05:9c:9f:c3:72:14:ea:25:84:1b:c4:6e:51:
         b4:b7:ae:e0:59:87:86:0e:0f:f4:ba:6d:61:2d:17:6c:be:75:
         cd:19:26:17:19:55:5e:5a:f1:3f:64:cb:db:e5:a6:c9:80:e8:
         92:f5:81:0f:d2:16:72:ee:a4:66:95:22:e9:b7:d7:cc:70:7a:
         84:78:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:48:15 2026 by rpki-client