Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa
File:                     ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa (raw, json)
Hash identifier:          81h7O76ywthoXcva2Kga9umoLVI0ayoPXNKvylhTgxo=
Subject key identifier:   4C:60:44:DA:9C:0C:98:7F:36:22:23:41:F3:B4:8E:78:97:6E:F0:77
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EC4D716917EA56D867C432400
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     21433
IP address blocks:        170.248.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:16:91:7e:a5:6d:86:7c:43:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=da60862f-5123-4fd2-ae5b-7e73cd1ed38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:c1:fc:57:64:89:3c:d7:59:16:ad:fd:77:
                    f9:18:f7:93:44:e3:7a:2e:b9:a8:1d:3c:9e:3d:bc:
                    d8:ee:8a:6e:e6:b0:d0:5e:6c:34:c4:8f:da:5c:e0:
                    5d:96:b3:e8:fd:b7:7e:d1:e8:8a:71:99:48:95:39:
                    33:60:0c:76:4c:50:b6:58:1e:dd:cf:dd:b5:a6:86:
                    c8:0d:e4:9e:10:06:ce:b7:41:1b:9f:94:81:66:1e:
                    a5:44:19:34:72:85:38:c0:11:49:21:bb:25:0b:dd:
                    24:10:a9:7c:fe:c7:66:86:0c:99:95:7c:bd:53:03:
                    fd:cc:ee:3e:95:56:8f:0e:b2:4b:71:bf:30:e2:6d:
                    3c:79:ed:d6:50:e3:c9:da:d2:cd:e0:23:c1:4d:5f:
                    0e:62:3a:9b:66:21:e5:5a:29:e3:b5:0f:c3:1d:3f:
                    04:e9:48:82:9a:bf:3b:5d:37:04:05:84:22:8e:1e:
                    07:56:87:37:0d:84:49:e1:64:4d:24:f9:9a:46:8a:
                    a7:3f:40:34:fb:cd:54:0c:a9:3d:95:3c:19:22:31:
                    07:f8:31:8f:21:6f:2e:44:64:17:12:9d:35:95:05:
                    16:ec:40:9c:56:cf:a7:76:f0:94:0e:41:a3:22:91:
                    66:73:6b:c5:99:e3:f3:ad:02:12:81:6a:8c:07:d4:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:44:DA:9C:0C:98:7F:36:22:23:41:F3:B4:8E:78:97:6E:F0:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c1:02:51:bc:b6:d0:24:ea:9b:fb:2c:6e:c3:e4:f9:c6:22:
         a5:86:15:f8:dc:7d:c5:66:fd:04:bb:27:72:27:ee:7c:03:ed:
         9e:75:cc:30:35:c6:41:ae:d9:a5:77:6c:eb:53:7d:5e:f7:e9:
         a0:4d:21:d6:91:d2:00:5b:80:ee:a2:62:55:a8:74:b1:8d:ff:
         d8:55:b7:63:3f:9b:d1:e3:8a:01:f0:fe:00:1c:7e:32:10:10:
         f7:8c:84:69:ed:7c:57:d2:16:a8:46:36:91:6b:24:0a:ad:cc:
         57:df:85:83:9c:9a:5e:38:86:c0:08:03:82:48:95:f1:93:24:
         8a:a6:38:f8:44:f9:e8:b8:5a:24:18:66:05:7d:08:90:e6:04:
         08:62:09:23:3b:02:16:5b:7e:14:08:61:02:7a:b9:4d:01:2d:
         6a:48:81:09:31:f9:07:68:7e:20:c6:5d:f9:88:7a:0b:79:0c:
         2f:e2:db:ec:8b:e4:5b:84:8c:e6:8f:84:66:33:a4:61:b5:e9:
         90:0e:6f:06:77:a1:aa:c6:9e:8c:3f:9c:d0:1a:b0:2b:85:45:
         34:05:4f:6b:06:40:86:26:ed:de:88:d5:de:aa:fc:de:dc:e9:
         ef:a4:a1:1a:30:95:d6:8d:7f:63:45:df:34:08:91:0a:12:07:
         e2:52:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:15:48 2026 by rpki-client