Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/488cca5a-5baa-31e9-b6cc-499f04ddc57f.roa
File:                     488cca5a-5baa-31e9-b6cc-499f04ddc57f.roa (raw, json)
Hash identifier:          jFSU8uEMtT/YmUyMBx8wrZHVDnfmp0jDntV70rK193k=
Subject key identifier:   21:74:9C:AB:AB:01:FD:43:17:F6:C7:04:F3:C6:7B:EF:D6:6E:5C:07
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584DEF4603B557BDA067876EFB80
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/488cca5a-5baa-31e9-b6cc-499f04ddc57f.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     55256
IP address blocks:        158.95.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:03:b5:57:bd:a0:67:87:6e:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=65f0a7c2-7b7c-4857-9f81-ee263c10d3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3e:fc:5b:12:bf:f8:42:b9:1a:0b:df:6a:10:
                    60:a5:41:00:c9:51:82:36:19:0b:27:c1:49:c8:8c:
                    37:d0:d1:92:b1:f9:c5:3a:ab:5e:6e:0c:4e:89:3f:
                    13:18:0e:30:30:8d:e9:d2:9a:5d:37:0e:84:29:06:
                    ac:ac:9b:20:db:2d:06:76:d0:f1:94:1d:25:cc:63:
                    32:ce:3d:43:db:fb:cd:df:05:63:e7:79:c7:65:6a:
                    17:37:85:1e:49:6c:07:dc:4f:ab:c5:03:52:cf:64:
                    23:5c:8a:c0:d6:46:5c:65:f7:3e:b6:25:22:ef:84:
                    98:91:4d:4c:5f:e0:76:b9:77:f0:56:34:74:c3:fb:
                    84:e5:c8:e4:0c:b2:0a:f4:13:e7:7c:b7:36:78:de:
                    f2:9d:5d:72:39:f9:59:95:25:21:98:03:30:ed:29:
                    b3:67:db:8c:cd:df:2b:13:10:44:68:5c:d6:bf:43:
                    37:f5:72:2c:88:9d:8a:39:cd:a6:13:e6:24:29:9e:
                    0c:89:af:e2:68:3d:cc:98:d7:2e:bc:c6:0d:81:a1:
                    69:72:74:0b:6c:d3:3d:e8:12:5d:72:17:7d:9a:00:
                    59:93:2b:66:36:68:4e:91:6a:91:ac:05:32:4c:7d:
                    32:f0:65:c7:10:41:d4:aa:78:bc:52:cc:86:58:11:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:74:9C:AB:AB:01:FD:43:17:F6:C7:04:F3:C6:7B:EF:D6:6E:5C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/488cca5a-5baa-31e9-b6cc-499f04ddc57f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e1:03:b5:b6:25:c6:2b:bd:66:3c:57:70:d5:16:5b:c3:ef:
         cf:ed:7b:e4:17:d5:f0:c0:62:8a:db:bc:55:41:a3:77:02:86:
         18:c3:67:af:8d:c3:63:03:1a:c4:eb:77:84:7d:17:ea:f2:bc:
         f3:05:d1:a0:4d:aa:46:93:e0:51:39:54:18:74:65:a4:cb:52:
         d8:ee:9d:06:68:47:ba:15:cb:e7:ec:e8:e1:7a:23:97:6a:0e:
         e2:18:a6:96:17:80:1b:7e:70:65:59:7f:c6:7d:c8:ef:e6:06:
         5b:02:09:75:1e:62:67:a0:19:3e:fc:ef:50:07:97:59:a7:93:
         ff:a9:cb:c9:d8:60:49:09:28:8a:35:48:3a:b6:22:65:a5:b2:
         c8:1a:f2:b9:83:04:6d:ab:ed:22:3a:e8:ad:44:2d:95:f8:a8:
         be:53:94:49:b8:2a:fd:d2:b5:4c:f6:70:af:ad:8b:41:3d:8a:
         3f:e6:c9:8b:a4:89:1a:d9:35:1e:12:6f:1f:93:a2:01:85:f9:
         85:b3:7e:7b:1e:19:46:46:42:ee:19:38:97:74:80:1e:73:a8:
         35:8f:9e:8b:36:88:e0:54:84:bb:3f:94:b2:b3:93:8b:0d:5b:
         aa:1b:5f:ff:11:0d:c5:00:56:15:2f:69:38:0d:38:fd:e9:29:
         21:76:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:38:39 2026 by rpki-client