Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/52554647-a1cf-3378-acda-6f272697b5a6.roa
File:                     52554647-a1cf-3378-acda-6f272697b5a6.roa (raw, json)
Hash identifier:          DsZiAj6xs9d+ALNYPypwIV8/BaS6r6EDOmOqGu0wxsU=
Subject key identifier:   15:9B:C8:76:B4:F7:7E:36:66:39:7A:4D:95:6B:9D:FA:45:09:8E:6A
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584E3612F6837AC577518EB62700
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/52554647-a1cf-3378-acda-6f272697b5a6.roa
Signing time:             Thu 18 Jun 2026 09:40:22 +0000
ROA not before:           Thu 18 Jun 2026 09:40:22 +0000
ROA not after:            Wed 16 Sep 2026 09:40:22 +0000
asID:                     55256
IP address blocks:        158.95.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:12:f6:83:7a:c5:77:51:8e:b6:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jun 18 09:40:22 2026 GMT
            Not After : Sep 16 09:40:22 2026 GMT
        Subject: CN=4b102373-c2f7-422b-81f9-d270da073446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:ec:dc:13:e4:88:47:26:b7:a4:ef:7d:dd:
                    e9:ee:10:b7:eb:e4:72:d8:58:80:63:13:39:34:c6:
                    33:f9:6c:82:3e:1a:f7:d4:f5:f2:16:26:a2:22:54:
                    ad:d5:9e:0e:21:96:2a:cd:9f:8b:b7:e5:cd:32:9a:
                    98:f0:1d:de:5c:47:d7:86:30:26:4d:31:28:b3:dc:
                    7b:cf:36:66:c8:da:00:47:d6:cf:f2:d3:0c:6e:77:
                    2d:71:f7:d1:77:55:53:80:2b:1a:b8:2c:c7:ca:c6:
                    ec:a1:79:01:47:7c:c1:f3:ec:1c:6b:86:4e:3b:4e:
                    40:6f:23:13:9c:f7:b4:2c:ff:9b:6c:11:df:98:ef:
                    8e:20:6e:61:ad:3b:a5:c3:7a:46:e9:86:97:31:37:
                    a3:de:fb:c6:c7:96:95:06:f3:7d:da:be:c2:e9:0d:
                    9c:94:b5:61:1e:8b:dd:c7:e6:b6:50:c1:fd:0c:70:
                    52:5a:68:3c:6e:cd:09:34:57:70:22:58:65:92:40:
                    32:9e:73:f2:fd:2e:14:86:52:c6:07:54:d4:1a:01:
                    fc:e4:77:0e:84:15:c5:58:46:5c:18:bd:83:66:a3:
                    5c:39:d4:fb:81:09:7c:6b:5e:f6:58:ae:71:10:18:
                    54:18:c8:7e:3e:1e:31:4e:04:e3:fd:c6:79:9a:d2:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9B:C8:76:B4:F7:7E:36:66:39:7A:4D:95:6B:9D:FA:45:09:8E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/52554647-a1cf-3378-acda-6f272697b5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:23:01:87:45:ef:e1:a8:54:5e:58:51:c9:e5:d3:e8:fb:
         6b:90:54:fe:4d:d2:34:1c:60:38:ca:28:f7:18:59:b3:dc:12:
         78:57:32:43:aa:46:11:0f:24:9d:58:d2:91:c0:42:72:96:66:
         26:13:c6:7c:53:96:65:01:26:f4:78:79:18:7f:fc:f7:b6:53:
         c9:3c:84:32:6b:bf:3d:64:80:e2:c0:50:5c:ae:e1:17:1d:93:
         de:a1:fa:09:83:85:80:33:85:cb:78:12:a6:bb:51:07:4c:c5:
         d6:b7:af:9d:a7:c2:84:b6:9e:d9:8f:41:90:48:4d:09:4d:8b:
         d1:01:58:ce:18:f1:cf:25:69:32:89:27:a9:9b:73:f3:44:32:
         ba:3f:5a:db:1f:b9:e3:b1:0b:c7:2b:8f:da:fd:9b:ec:d7:92:
         50:f5:34:7b:23:65:fb:71:fa:c6:54:54:f3:6c:5f:a9:8d:f7:
         55:60:fe:b2:1a:a5:a0:8e:9c:07:a9:fa:a6:f4:5e:28:55:c8:
         cb:23:18:a3:06:4b:79:e2:68:70:b4:f9:41:e4:c5:ba:9a:0a:
         d3:40:90:78:18:e5:d3:32:c7:5d:2d:93:53:32:13:6b:e0:ff:
         e2:0b:97:df:7f:f2:5f:38:a3:41:53:7f:6d:0e:bb:1d:ae:1a:
         34:3d:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:45:36 2026 by rpki-client