Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7df278d1-d24f-3039-83ae-efdf35f74963.roa
File:                     7df278d1-d24f-3039-83ae-efdf35f74963.roa (raw, json)
Hash identifier:          hNWimb/90NT+o4wrjl3PcZOYn2smWikxiDxAlGkht/Q=
Subject key identifier:   CA:FB:03:49:47:73:B4:10:61:A5:C0:62:73:5F:AA:8E:CE:8E:15:5C
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584F4F082D8213090D6C69910100
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7df278d1-d24f-3039-83ae-efdf35f74963.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     55256
IP address blocks:        158.95.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:2d:82:13:09:0d:6c:69:91:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=4100b118-d7b3-496e-853d-a0ea10ea6457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:c3:29:d8:38:10:f9:35:46:d7:7f:d6:6c:
                    3f:05:7a:b9:e1:84:ad:a5:77:ed:54:11:92:91:5c:
                    aa:e4:1e:c6:29:45:38:14:15:70:3c:41:8b:f4:09:
                    f1:81:8c:f2:2a:ca:f3:29:e5:e0:f1:59:0c:0e:65:
                    31:ae:10:95:b0:87:4a:e0:15:fa:b9:03:8a:01:4d:
                    e7:20:9d:d4:ad:93:09:32:17:68:97:51:4c:5a:a5:
                    6a:75:0e:b0:39:8b:7e:9e:e6:fb:5a:05:d9:69:9f:
                    60:81:75:f8:50:d0:d6:4a:d8:a7:80:4b:ef:55:20:
                    70:59:85:99:3e:35:20:74:80:7d:fd:34:99:16:8b:
                    0f:71:18:da:8d:24:15:7e:b4:60:e5:5b:53:49:05:
                    7d:e0:4c:73:df:6c:e0:e8:c1:98:da:40:b0:29:fd:
                    07:d1:9e:86:8a:6b:1e:b8:fe:6b:8d:4e:fc:c0:aa:
                    02:48:ee:6a:b9:a2:90:fd:3c:26:7c:af:6f:4c:17:
                    e2:70:75:77:cb:a8:27:73:d3:53:73:bc:2e:34:5a:
                    9a:e1:6f:34:60:30:e9:bf:52:ff:dc:19:7c:db:bd:
                    71:be:1b:95:74:11:f4:31:b7:fb:78:aa:e9:b6:81:
                    f8:cf:6d:39:17:1c:19:65:69:f1:10:19:73:02:a6:
                    2d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FB:03:49:47:73:B4:10:61:A5:C0:62:73:5F:AA:8E:CE:8E:15:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7df278d1-d24f-3039-83ae-efdf35f74963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6a:c3:03:0d:f5:94:3b:c6:cd:00:c8:d6:d4:89:6c:69:75:
         35:5e:5b:c4:e8:8e:10:43:f5:06:7e:fe:b0:91:15:b1:da:43:
         d5:d9:f6:ec:02:9a:fb:70:fb:3f:e1:f8:0c:c5:54:0a:d2:c3:
         36:19:09:ed:7b:02:2a:43:57:1e:85:a1:de:e3:a1:3f:d6:76:
         a9:cf:fa:83:6c:1e:70:73:47:28:7d:77:b1:33:12:a3:fd:cf:
         a6:92:93:45:48:9e:d4:8c:96:9c:6c:66:e2:8f:46:24:cc:85:
         2c:d5:72:43:a0:37:53:db:c4:e5:ca:31:83:ee:52:26:49:11:
         8f:9f:91:59:b2:1a:3e:8a:13:4c:eb:aa:54:45:6c:31:fd:bb:
         93:06:9a:98:b3:68:15:17:3d:42:82:20:3e:e2:7d:b7:74:40:
         54:85:65:64:f1:68:41:bf:8f:d2:5d:fc:fc:6b:22:28:e0:18:
         49:d6:f2:1c:b0:25:bc:70:da:c3:37:b9:12:4c:6d:4b:d3:ca:
         aa:9d:80:c2:e7:9c:b3:c2:1b:f2:e2:89:ff:03:76:b1:29:7f:
         77:a1:21:70:4c:63:82:14:34:4e:57:a7:dd:a1:56:00:f5:be:
         bf:23:a3:4f:6d:67:d9:a3:bf:aa:eb:95:84:9e:3e:24:9d:4b:
         15:0a:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:11 2026 by rpki-client