Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa
File:                     f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa (raw, json)
Hash identifier:          uXvbvQALHKmHMxUQooOZp9SiwqUbwKJjToC1i50EHvc=
Subject key identifier:   96:C5:4A:74:50:FE:A6:54:56:74:36:E2:A6:D4:6D:B1:EE:3E:F1:94
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584DEF4603C1440E7BC56B86AE00
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     55256
IP address blocks:        158.95.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:03:c1:44:0e:7b:c5:6b:86:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=44b25ae2-3647-4599-9c3d-57aec55a02b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:4d:dc:0f:c2:29:68:66:5e:cd:99:ef:fa:
                    a9:73:3d:d9:99:c7:12:8b:c1:ff:17:6a:ea:cb:f0:
                    c7:5d:1d:20:18:31:b2:e4:cf:8f:8e:c3:00:88:36:
                    ec:60:14:c6:8a:8c:23:fa:b6:4c:0c:b0:c3:af:75:
                    58:ee:5e:37:b5:5a:47:9c:f1:dd:62:70:ed:f8:e0:
                    ec:9a:42:9a:61:8e:fd:85:82:68:15:50:43:ab:e9:
                    e4:b0:fd:71:3f:06:68:0e:04:39:d3:f8:f1:22:1b:
                    a9:55:cc:ba:f4:bc:8b:35:83:18:2f:85:6c:7f:56:
                    61:09:47:5d:22:23:e3:e2:6e:e3:5a:c1:1b:ce:be:
                    37:c8:a1:4c:ed:5a:8d:41:b9:f9:6b:a0:ad:e8:69:
                    c8:4d:92:03:92:6a:82:ce:4e:ab:5c:2f:4d:24:8e:
                    82:36:b7:b2:ca:31:06:93:42:9e:92:53:ee:eb:70:
                    ac:40:3f:32:09:3f:3c:90:e2:03:47:9b:f2:ae:3f:
                    d8:a1:22:2a:70:e8:84:79:e0:b0:20:1c:f8:7b:f3:
                    54:e4:7a:03:9a:46:37:3a:af:7b:28:ca:38:43:09:
                    bd:e8:77:e4:ac:0e:5e:f5:c1:e2:b3:d5:4d:b3:2c:
                    bd:55:29:ac:ba:8e:df:a7:b0:94:ef:c4:80:4b:f3:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C5:4A:74:50:FE:A6:54:56:74:36:E2:A6:D4:6D:B1:EE:3E:F1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:78:2e:5f:cf:6c:7e:da:06:0b:68:86:e6:61:26:c7:69:
         4e:5b:f9:18:1c:a4:07:9c:39:3a:cb:ff:cb:a9:35:e8:a6:2d:
         2f:09:5a:9c:ff:17:88:9e:c5:8c:f2:70:8e:7a:ce:43:a1:e6:
         a1:22:81:51:52:04:3b:d3:6c:d8:f4:e6:c0:88:14:18:05:54:
         4c:cb:ec:59:42:e8:1a:c9:cf:d0:c2:74:90:67:36:55:3f:e8:
         4e:87:a1:f3:c4:bf:d2:38:e9:d8:41:7e:19:af:87:17:8b:32:
         7f:90:64:e0:19:fe:bc:0f:f6:12:ea:0a:62:9c:27:97:42:3d:
         39:94:9b:31:b3:c6:f2:e6:85:ce:24:34:38:86:c4:c5:a7:9c:
         e7:d5:63:a7:28:f6:69:6b:55:64:76:5a:b8:46:66:e1:e7:9c:
         85:87:e6:54:c6:0d:50:0e:30:10:f7:27:5f:6b:ab:72:93:46:
         c4:bc:7f:fd:af:8f:f1:07:42:25:94:66:d9:09:89:1e:19:61:
         b0:2f:21:d3:d6:d4:4c:e9:83:ff:f1:61:52:73:96:4e:2d:d1:
         b6:3b:d2:d4:07:e4:e0:1d:21:70:9a:ba:16:71:84:81:52:88:
         ee:48:10:19:4a:79:e7:65:66:9a:e2:b6:89:14:1e:ba:f2:6f:
         bc:44:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:38:18 2026 by rpki-client