Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9b06fc33-bf9f-365f-a795-c6e7fe81aee7.roa
File:                     9b06fc33-bf9f-365f-a795-c6e7fe81aee7.roa (raw, json)
Hash identifier:          Q94DAZQaU23plfOjxQSGA3JygFkRGgwNEF9E0YqLwwc=
Subject key identifier:   1C:35:30:8C:0D:E3:68:33:26:51:77:49:BF:50:FD:B1:BE:85:55:C8
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EB689713384E7178EC12F1240
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9b06fc33-bf9f-365f-a795-c6e7fe81aee7.roa
Signing time:             Mon 03 Aug 2026 10:02:34 +0000
ROA not before:           Mon 03 Aug 2026 10:02:34 +0000
ROA not after:            Sun 01 Nov 2026 11:02:34 +0000
asID:                     21433
IP address blocks:        170.248.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:89:71:33:84:e7:17:8e:c1:2f:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  3 10:02:34 2026 GMT
            Not After : Nov  1 11:02:34 2026 GMT
        Subject: CN=b4e90ad6-9c9c-43c5-a772-0227c7f55eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:79:64:0e:b7:1a:99:95:ce:c8:66:e6:72:
                    1f:79:db:99:f0:ff:8c:7c:6f:cf:61:90:11:24:c3:
                    c8:e4:30:a2:f8:c9:4e:8b:24:4b:e1:69:26:68:ea:
                    32:08:fb:54:7e:5c:cd:31:b1:95:d8:9b:b0:ea:95:
                    52:ce:82:7e:1b:60:01:d5:64:68:bc:b6:1b:8b:eb:
                    2d:a9:80:30:11:46:5c:41:d3:2f:19:18:c8:52:a5:
                    84:9e:86:6a:fc:b4:ec:ac:83:88:2e:b8:0c:53:47:
                    6b:d0:6e:a6:09:a2:e4:ab:d1:90:40:54:04:6b:52:
                    24:e4:2a:82:e3:57:96:58:56:0b:8b:a5:d3:ff:e4:
                    1e:e9:3c:f1:87:17:f7:c0:fb:e9:30:b0:9d:7a:5c:
                    4d:7a:f7:31:76:60:7a:f5:bc:f1:f8:1c:af:6e:ad:
                    3e:47:fe:46:cc:ac:35:07:ff:55:37:ae:fd:ff:f0:
                    05:16:48:68:f3:2d:cf:f3:2f:1f:0a:03:e0:1c:d8:
                    3d:55:7c:81:c7:4b:54:1c:b7:fd:4d:04:56:50:5e:
                    34:f5:11:db:05:72:b6:d8:32:85:90:eb:c6:cc:2d:
                    64:d0:ea:4b:65:f6:25:18:9e:88:f1:a9:1a:29:76:
                    42:b9:12:29:e4:c3:83:5b:d0:c8:3d:d0:1c:3a:c5:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:35:30:8C:0D:E3:68:33:26:51:77:49:BF:50:FD:B1:BE:85:55:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9b06fc33-bf9f-365f-a795-c6e7fe81aee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:77:28:80:2a:95:3e:2d:08:d0:5e:bd:af:40:93:97:ae:
         7b:49:5c:98:5b:70:32:08:d8:d3:df:d3:c8:df:e4:e3:90:ac:
         4a:37:3e:87:89:9d:fe:ba:f3:3f:d1:54:c6:eb:4d:b7:ca:39:
         66:8f:b0:fb:91:fa:16:bd:3d:c4:b8:84:b2:6e:9d:db:ca:af:
         3b:a7:04:a9:27:08:e3:d6:e9:79:66:3d:05:76:b6:89:75:fd:
         a5:29:9e:03:2c:b9:a0:2d:3b:80:36:8d:45:05:be:48:ba:71:
         b8:0d:d9:7d:38:b9:81:27:ea:0b:23:37:de:6f:4f:3b:8c:b7:
         62:7d:4a:34:13:93:ec:0d:e0:a5:15:df:d7:be:ce:e1:9c:b5:
         a6:2b:a1:70:28:75:9b:d7:13:12:bb:5c:d9:d2:0c:45:01:47:
         e7:9f:5d:f4:ae:9d:f7:78:18:38:df:b3:6a:e7:a5:96:4c:54:
         00:23:19:d7:5f:13:ca:8c:3d:69:ac:da:c1:42:34:09:48:07:
         0c:d5:ab:de:1c:19:c0:11:3c:92:d8:20:ac:68:87:91:33:22:
         02:39:1e:7f:05:03:3d:3d:9d:a5:ca:24:a3:ba:db:14:f1:13:
         91:97:6a:3e:53:ae:90:36:b3:e9:01:fc:4e:12:50:16:74:77:
         7f:b2:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:11:32 2026 by rpki-client