Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/77cf638f-c66a-3581-a50d-e3f84e552230.roa
File:                     77cf638f-c66a-3581-a50d-e3f84e552230.roa (raw, json)
Hash identifier:          HtO/36iiLUwioN/0H4nk7p4rnuwAe/djE2yL3UgPTd0=
Subject key identifier:   62:F2:80:15:94:1A:CA:50:3E:A3:46:FA:57:BD:BB:61:5B:7A:45:04
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584DD1F5B7AB105D0D726D63B780
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/77cf638f-c66a-3581-a50d-e3f84e552230.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     55256
IP address blocks:        158.95.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:b7:ab:10:5d:0d:72:6d:63:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=fe37869d-eb93-464d-86fa-db66e7dfaaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:e1:80:59:9a:16:46:0c:a1:fa:48:83:fc:
                    01:e1:da:8f:9a:f1:bf:d7:46:7f:36:5c:25:cc:59:
                    09:57:ee:93:1b:c9:8a:d6:4f:1a:74:f5:a4:09:5c:
                    f3:57:c1:10:d6:90:d0:83:72:4c:b8:4d:70:da:e3:
                    74:89:3c:23:4a:f9:b2:02:37:12:b4:a7:28:ea:6b:
                    f2:8a:45:52:c1:f0:7d:ae:05:f7:3d:7b:55:00:dd:
                    62:08:bb:c8:e6:2f:27:38:bc:ba:c6:7f:49:0c:09:
                    52:6e:b6:85:fa:e5:01:8f:3c:f7:df:03:22:d1:b4:
                    ac:be:a1:e2:85:9e:cd:a5:5e:8b:ce:54:c0:80:67:
                    aa:e4:57:3c:1d:3b:01:6a:10:7e:53:92:43:6e:e7:
                    f3:8f:77:8a:9e:75:4a:8d:02:fc:7b:69:29:46:1b:
                    db:30:be:2d:c3:cb:a8:a4:8a:2e:d4:15:4f:0a:57:
                    34:15:ac:21:17:94:2d:c0:07:33:d2:5a:66:47:79:
                    b7:2a:4e:3e:f6:0f:e0:b5:11:a5:d4:a7:82:5e:70:
                    aa:4f:7f:68:00:34:4b:0c:73:92:1c:b7:55:e2:30:
                    8d:b2:32:7c:89:29:0a:c3:6b:84:f0:18:13:3d:3b:
                    30:69:cd:9a:90:4f:cd:11:31:80:80:9b:02:b3:ee:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F2:80:15:94:1A:CA:50:3E:A3:46:FA:57:BD:BB:61:5B:7A:45:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/77cf638f-c66a-3581-a50d-e3f84e552230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:39:3b:00:bd:39:af:52:86:4e:e4:0b:15:1a:e4:4e:19:8f:
         85:bb:2a:2b:dc:69:c6:38:7b:c2:e2:ae:80:b9:25:53:69:36:
         7f:c7:9a:53:0b:59:86:29:0c:18:55:e4:30:42:92:27:28:38:
         92:76:6f:4a:5f:68:d8:4f:53:72:cf:ea:ef:11:34:13:06:76:
         52:73:d5:65:09:b6:a0:1e:9e:48:6b:e3:23:51:00:90:29:f5:
         69:33:f5:a8:05:c4:85:fb:87:f5:2e:50:1b:35:f8:08:7d:57:
         35:29:be:1e:61:47:bf:ca:90:13:f4:f4:5a:06:e2:af:b2:64:
         d7:3e:94:6f:b6:f4:2f:8c:29:fd:fe:d3:7a:e8:42:d9:37:86:
         2a:42:9e:59:82:5b:47:2f:50:e4:90:9d:95:c7:36:e4:84:6b:
         b6:e3:3d:39:b0:c4:cd:79:59:0f:37:fe:96:b1:c9:e8:e4:69:
         ce:ad:0e:a4:ed:fc:4a:5c:4c:be:48:2a:a7:3c:a8:39:97:c4:
         e8:2d:9a:23:64:38:cb:5d:7e:de:f5:7b:d4:e3:11:fa:d6:07:
         e8:06:3d:39:fa:02:6a:1e:80:67:3a:63:7b:eb:26:dd:4d:3c:
         b9:c9:5e:63:c5:df:81:1d:c4:7a:c2:70:36:ab:dd:29:29:25:
         50:0f:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:38:08 2026 by rpki-client