Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa
File:                     d212f7d8-713f-3286-9603-26498524616d.roa (raw, json)
Hash identifier:          o+JyRNz0fzK7fQxCHpt1MRk0bQt1otfnxgiM0UuZN3c=
Subject key identifier:   AC:BA:A8:55:8A:45:50:9E:D8:F5:42:F4:E8:3A:CC:45:2B:CE:C6:CE
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EB416F213B9D098D934EE48C0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     21433
IP address blocks:        170.248.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:f2:13:b9:d0:98:d9:34:ee:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=126efd93-92eb-493d-8b58-a9e787120858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ca:de:8a:a4:ed:ac:b1:1a:ff:ee:6a:2a:be:
                    11:3a:de:6d:6c:6f:6f:a7:25:39:95:82:7a:62:f0:
                    e0:10:8d:a1:b8:5e:ed:ee:23:06:79:e3:d2:d2:a4:
                    b6:18:92:49:31:49:bd:59:b3:98:cc:96:01:65:6b:
                    be:fc:4a:a8:c9:7e:db:b7:21:36:07:30:54:c9:b1:
                    ce:53:c4:03:88:8b:e5:7c:9b:9d:31:95:28:30:9b:
                    50:5e:d9:82:c9:49:fc:07:de:35:29:2f:9f:8a:01:
                    aa:92:0d:25:ce:24:3d:fa:ec:8a:9e:13:4b:90:d0:
                    41:87:fd:65:34:1f:f4:1d:3c:fa:c1:b3:6d:ed:8e:
                    69:0e:56:19:74:ec:43:68:03:40:64:b4:5c:4b:6c:
                    7d:2b:99:bf:be:25:db:cf:19:35:cd:f5:b0:10:51:
                    f9:c6:5b:3f:20:8c:cf:3c:0a:ba:6a:55:99:c6:6e:
                    54:ae:24:2b:d4:af:ae:16:ec:cf:49:22:4d:f4:bf:
                    be:12:75:10:8f:71:cc:d3:f2:9c:56:2d:2c:62:ed:
                    3b:f1:47:c2:a6:af:d4:04:da:b9:ad:a7:26:3b:f3:
                    92:4b:84:92:2a:73:01:ed:53:37:07:0d:2b:a5:f4:
                    c1:b8:97:bb:d1:3d:a9:cb:91:fe:a4:5e:ee:2b:4d:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BA:A8:55:8A:45:50:9E:D8:F5:42:F4:E8:3A:CC:45:2B:CE:C6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:e1:d4:01:96:d9:01:62:db:be:2a:2e:d4:44:4f:70:8a:
         72:3c:71:f5:2d:c7:ac:36:f5:30:e9:09:02:26:60:2e:cd:1c:
         9c:d5:d9:c7:ad:cd:5a:76:d4:a6:a2:3a:5c:95:2d:07:45:8a:
         f3:3c:83:7e:9f:a4:2c:c4:eb:c5:a8:1b:8f:3f:84:26:f9:d8:
         e2:68:ff:24:62:6d:a7:cf:7c:76:a9:67:45:e5:02:5c:1d:0d:
         ef:0d:13:a4:77:83:38:bf:5c:b7:31:79:e5:34:19:ec:7b:ac:
         b7:31:ee:60:d1:41:bd:d4:f1:62:3e:b1:f6:38:8d:95:f7:a1:
         df:65:3a:d7:81:17:5e:4a:fd:9a:1d:84:5d:9b:fe:38:18:1b:
         2d:53:12:1e:1f:2d:5f:a3:47:32:ab:13:db:6e:a4:07:a0:a6:
         e7:af:e9:fb:04:55:97:70:b4:79:0a:e0:a0:e3:75:fe:26:41:
         e4:0d:44:3e:fe:f5:9c:17:02:a9:76:ef:6e:aa:df:e7:7b:77:
         46:72:2a:8a:e3:f9:7f:8f:25:6a:22:ec:05:9d:17:e6:98:42:
         d1:6f:73:f4:4f:23:d3:f1:cb:54:71:e9:63:36:dc:0e:3a:27:
         7c:2b:7f:bc:2f:d0:1a:8d:1e:ad:cb:c2:05:ea:46:c4:b6:96:
         7c:05:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:19:21 2026 by rpki-client