Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa
File:                     be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa (raw, json)
Hash identifier:          18Y2t67CaYRs1bqV5+aFQFifu/QzKHRl2nPrf+jbA6E=
Subject key identifier:   A3:2D:AF:48:01:BB:25:10:19:34:8D:C1:7B:6A:36:A0:3D:13:8A:65
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584E3CF9BF246B5ECAD5E6094220
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     55256
IP address blocks:        158.95.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:bf:24:6b:5e:ca:d5:e6:09:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=73410979-82d3-4ad8-aa0e-6d5fd6e7bfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:5c:cf:ef:22:55:53:e0:04:e3:e9:6d:60:
                    e8:17:04:00:2d:46:87:b9:90:18:80:2a:f1:fd:40:
                    0e:bb:6c:55:63:f4:c9:8c:8c:80:5d:cb:24:46:16:
                    4b:30:4d:b0:6b:27:6b:78:17:d0:c0:f9:76:b0:fc:
                    ad:f9:b6:2e:2e:b6:e8:c4:e0:cf:04:eb:14:56:2e:
                    dd:1d:5b:74:b6:18:66:02:0b:7e:d2:51:41:93:45:
                    05:a5:81:f2:e7:52:4d:d8:01:03:3c:80:d0:e5:94:
                    20:b0:f8:d8:80:fb:15:4b:d1:e8:34:81:b8:14:23:
                    b0:c3:6d:01:c5:58:c5:8f:38:12:5e:3c:07:a0:51:
                    93:a3:5e:67:1a:c1:6b:d5:e9:c5:10:5a:f8:df:a8:
                    d7:48:18:e7:fc:e6:c9:f2:86:9a:08:c3:dd:6a:82:
                    ee:9b:69:54:6a:46:a0:c7:6c:bc:05:00:a5:47:a4:
                    8d:1d:42:2f:8d:92:b2:02:6b:36:29:ed:b2:94:fa:
                    b3:6e:86:58:8e:8c:db:13:8b:97:93:88:d0:42:d7:
                    54:3a:a7:c3:29:37:1e:20:bd:ae:e1:b9:7b:fc:86:
                    e2:3b:e1:e0:29:a9:4c:54:42:0c:43:58:a2:df:81:
                    3b:a3:33:55:67:46:e3:bb:5d:57:47:bc:40:63:f8:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:AF:48:01:BB:25:10:19:34:8D:C1:7B:6A:36:A0:3D:13:8A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:1d:e6:f7:ff:c0:6a:ac:ad:df:7e:e5:d3:f1:ef:fa:ed:ca:
         01:13:cc:1a:9e:27:2f:5e:c2:f5:0a:5d:8a:bd:1b:4c:e6:e2:
         0c:ae:40:c1:b0:35:2e:aa:2a:59:a3:cf:d2:08:02:c1:f5:da:
         ef:ca:ef:46:1c:de:e7:8e:98:69:a3:61:2a:38:a3:50:9f:d2:
         e7:5c:27:49:9f:01:40:46:35:28:28:05:53:22:39:21:20:2f:
         d7:dc:88:6f:c5:42:76:78:71:66:e5:83:60:68:79:09:7b:9f:
         8c:3f:c8:b8:22:9c:7e:42:e4:4c:37:b4:ac:60:10:eb:14:c9:
         35:eb:63:ef:6d:a7:03:94:e8:14:b6:4c:9c:5f:2d:e4:fe:cb:
         cb:cc:8c:ce:b0:df:a6:42:db:37:7d:bb:c1:35:8a:c4:4b:27:
         b0:6e:36:66:1d:e6:d5:18:b7:e9:bb:59:6b:90:42:1a:50:7b:
         39:97:95:e2:b4:7d:48:c6:6b:d8:39:9b:a1:41:d6:db:96:ae:
         53:0a:9b:fa:24:68:d9:42:9f:95:22:78:10:45:ee:6e:96:52:
         92:30:3f:9f:c7:ff:70:64:cc:bc:70:9a:1a:77:01:62:76:5c:
         2b:5e:42:f2:40:2d:8e:71:d3:6b:e5:1a:e9:5e:df:50:1b:a2:
         22:33:45:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:10 2026 by rpki-client