Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
File:                     1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa (raw, json)
Hash identifier:          8P6DkSCYjQQdKON3oE0I7sqrU28MIi7VGV6Pq1ABcvk=
Subject key identifier:   90:B5:48:1C:6F:94:DF:32:48:8C:0C:33:E3:56:58:61:96:4F:0A:57
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584D52434FC61E35F482891E9600
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     11650
IP address blocks:        155.94.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:4f:c6:1e:35:f4:82:89:1e:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=7c3a6873-7ad9-45de-891a-31cdcc3d28e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:ab:b0:b4:85:7a:1b:48:e2:50:d1:35:e3:
                    9c:eb:0d:3e:81:c3:50:7a:22:94:d3:9c:58:8c:90:
                    14:45:d9:7c:ae:f5:f7:9a:b5:e1:00:e4:ec:c6:46:
                    e3:fc:69:c5:fa:0c:fa:a7:ad:f1:79:77:ff:bf:72:
                    a5:14:fe:ce:0b:a2:d0:1d:c6:d9:8a:54:1c:34:89:
                    6b:e4:86:82:e1:52:c6:c5:fc:30:cf:2b:f1:d1:30:
                    e4:bd:58:97:47:36:6e:8d:14:87:3c:13:c0:fe:fe:
                    ff:3a:a0:81:18:b1:cb:45:a1:b2:60:dd:17:e3:54:
                    a6:00:67:e5:ab:d4:20:6a:bb:d5:a0:37:16:62:d4:
                    bc:c5:11:ea:67:9a:c4:b3:20:cd:3c:c3:5a:7b:e1:
                    94:cd:56:6b:d1:c1:8e:c0:51:0d:46:7e:0b:50:33:
                    28:ce:2c:00:b2:8b:83:af:3b:07:7e:7e:da:ec:08:
                    52:22:1f:4e:26:c4:3f:42:5b:dd:2c:ba:b3:de:0f:
                    e7:d3:80:5a:8c:29:9d:80:5c:32:84:1a:73:ba:8c:
                    ff:f6:53:4d:9b:00:85:e3:e6:7b:f0:81:cb:19:0b:
                    a6:e9:3f:60:bf:e9:7a:91:27:df:a8:49:4b:15:a4:
                    7f:0d:9a:de:bb:17:40:c4:e4:bf:bb:9c:57:b0:19:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B5:48:1C:6F:94:DF:32:48:8C:0C:33:E3:56:58:61:96:4F:0A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:40:f4:6e:32:da:c0:29:90:99:49:ff:0f:ce:59:af:1c:95:
         08:93:51:c7:78:bf:53:d9:86:3c:01:12:14:0f:e2:c5:9c:df:
         81:14:64:40:d9:b4:45:5d:c6:ca:76:5b:7f:29:d2:62:a3:05:
         25:f9:68:1c:11:e4:50:0d:44:ae:9d:9c:60:6f:ea:08:ca:11:
         c4:0e:42:3e:7e:a6:34:41:17:c6:e2:1d:fc:c9:34:af:8c:5a:
         64:b8:03:3f:dd:be:fe:95:09:27:d6:e4:d4:dd:63:72:0c:29:
         64:60:e3:6b:21:79:09:f5:5e:28:c0:83:7c:da:98:98:32:60:
         0c:03:e5:e9:32:e6:7a:9d:5b:f1:8e:44:a8:91:e2:1e:7e:9e:
         3f:f1:26:69:b5:38:50:73:e4:f5:f3:ae:ab:a5:74:4a:cd:3b:
         b3:f3:fe:7c:f8:13:41:14:72:91:a7:ae:6c:e0:fa:66:0d:38:
         85:6b:ae:f8:d8:9a:f7:4b:87:b7:03:47:68:26:ec:71:9c:8e:
         9c:0d:f9:cb:99:9a:8d:72:62:18:76:be:e5:55:49:23:77:57:
         c0:18:06:3b:6e:ab:40:cc:af:69:00:f2:fc:98:76:d8:59:e4:
         af:e2:70:8c:39:a1:c9:8d:eb:12:c5:93:04:5d:94:ed:b2:c2:
         ca:d6:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 17:54:54 2026 by rpki-client