Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/d5df5c49-0f8b-38f1-a00c-26bf75577520.roa
File:                     d5df5c49-0f8b-38f1-a00c-26bf75577520.roa (raw, json)
Hash identifier:          Cy+HVlKYoZJP2+YRukjv4DVcrYOSwoBLQcdxdsZNuyc=
Subject key identifier:   25:F8:AA:3C:E0:F3:18:BD:EA:1E:AB:B3:3A:94:0C:67:27:51:54:A4
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584F8578606E6B3E0ED7FB850600
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/d5df5c49-0f8b-38f1-a00c-26bf75577520.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     7018
IP address blocks:        95.143.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:60:6e:6b:3e:0e:d7:fb:85:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=811efbb3-c954-499a-a06c-df59e7d8e005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:93:51:40:f2:e8:2d:f6:b6:fa:76:25:a1:
                    cb:80:15:ed:c7:01:38:9f:3b:88:f7:8d:b4:b5:b9:
                    c9:47:da:98:d6:d4:5f:fd:5c:b3:f3:ec:92:5e:61:
                    9f:5c:60:fb:37:75:1d:5d:38:25:34:1f:a0:76:89:
                    59:af:45:ba:64:ff:3c:be:4a:c3:a3:62:43:46:1c:
                    f3:b4:3b:2d:15:90:34:c9:b8:1a:36:bd:62:f4:bb:
                    d2:84:08:68:d8:94:51:4c:2a:6b:00:ca:38:51:a0:
                    8e:8c:e4:14:3f:91:99:4a:63:fc:9c:dd:1f:79:b4:
                    eb:c1:96:4d:50:81:70:22:f2:01:b3:4b:42:d0:9e:
                    8c:2d:62:c5:0b:88:98:0b:89:d8:f9:64:e0:85:4a:
                    67:6f:34:24:15:8f:51:66:85:d6:9e:1e:7d:e8:18:
                    ed:2c:43:ab:85:27:4f:6b:05:dc:cf:82:1f:84:7b:
                    3b:e1:46:9c:d4:74:53:bb:ff:2c:80:70:0d:f7:7b:
                    d3:1d:46:1a:da:fa:20:4b:e3:87:9e:e7:31:55:b5:
                    b5:07:ab:25:97:ed:c2:23:4f:26:83:de:b3:eb:a6:
                    f8:e0:48:1e:9e:66:da:6b:eb:c1:92:cf:98:6b:73:
                    f3:4a:36:c8:e1:b5:16:6a:fa:5c:94:78:5b:94:66:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F8:AA:3C:E0:F3:18:BD:EA:1E:AB:B3:3A:94:0C:67:27:51:54:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/d5df5c49-0f8b-38f1-a00c-26bf75577520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.143.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:7f:f5:7a:dd:71:ac:f0:68:60:e5:d3:1a:b6:c9:95:a7:
         6b:15:83:f1:3b:d9:70:f1:c7:d6:a5:38:6a:9a:ba:95:ca:59:
         34:08:e4:98:87:70:87:ef:55:da:04:e6:4c:f9:6a:72:3f:ab:
         5b:6a:7e:77:e7:ce:76:1f:54:68:81:25:b0:f4:8f:76:b3:74:
         b9:c1:35:16:ca:40:2a:72:c8:0e:b7:73:dd:d3:b3:2f:07:1d:
         9d:1c:52:da:d0:39:5c:6f:48:1c:2f:3f:d2:9e:47:7b:73:6a:
         44:fe:95:ee:36:4a:81:6c:85:86:d7:3a:82:d7:b5:ee:bf:0b:
         57:83:de:60:ed:fa:d1:b0:de:20:f0:fb:92:f5:b4:21:a0:9b:
         72:d3:cf:f9:4f:1b:32:45:8f:b0:ed:60:17:92:76:11:b7:f5:
         ed:12:fe:87:a8:c0:63:b0:04:bd:68:ab:69:54:36:ea:65:da:
         b9:83:d4:5c:54:58:d8:c8:98:3e:9b:7f:f2:df:fd:eb:cf:d4:
         dd:10:b7:43:94:37:3d:76:53:13:c3:ac:25:79:db:1c:9f:72:
         79:3f:8a:ac:cd:c1:da:31:4a:ee:b2:24:f9:03:96:5f:0c:56:
         bf:65:28:07:63:bf:43:82:b5:bd:7b:3f:57:51:0b:e7:08:50:
         55:f7:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:14:41 2026 by rpki-client