Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/06b63f9d-32ba-3d2d-b63b-c5648730d1b9.roa
File:                     06b63f9d-32ba-3d2d-b63b-c5648730d1b9.roa (raw, json)
Hash identifier:          wM7pu3jojM8NJhuR4xlgN1LrKdMu68W5dp6J/4bnJ2c=
Subject key identifier:   63:55:C7:D8:46:FD:EE:6C:1E:23:2A:8A:2E:9C:1A:06:6A:93:06:3D
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F0A45EAACA7B6F42D0A081D00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/06b63f9d-32ba-3d2d-b63b-c5648730d1b9.roa
Signing time:             Wed 02 Sep 2026 09:54:24 +0000
ROA not before:           Wed 02 Sep 2026 09:54:24 +0000
ROA not after:            Tue 01 Dec 2026 10:54:24 +0000
asID:                     21433
IP address blocks:        170.248.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:45:ea:ac:a7:b6:f4:2d:0a:08:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Sep  2 09:54:24 2026 GMT
            Not After : Dec  1 10:54:24 2026 GMT
        Subject: CN=d49f2c0d-96f3-4a15-b2b1-fb79b6fbb036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:b1:0e:26:15:73:6f:c3:fa:2b:2e:dc:c7:
                    ad:94:36:dd:5a:89:8a:43:33:c8:30:bf:dc:83:23:
                    cc:64:fb:65:80:e1:91:3b:0c:16:50:28:79:f5:6b:
                    d9:2e:50:db:13:ef:c4:ff:7e:f7:2a:f8:0e:52:ba:
                    2a:61:00:9e:3c:fe:bb:69:a5:c1:3b:15:22:be:e6:
                    6a:6d:bf:dd:53:cd:2f:81:f2:b1:e8:a0:7c:d9:1f:
                    d3:24:a8:a0:e0:d4:73:6e:8c:81:b9:a7:3d:4b:0e:
                    eb:15:5b:ce:0f:7f:05:99:07:d8:77:f8:c8:ba:a0:
                    2b:ad:c6:c0:56:35:6f:04:c7:74:85:b1:72:e2:a3:
                    34:eb:54:78:b8:23:27:7b:ab:81:7b:53:c6:5d:d3:
                    db:dd:eb:b9:52:09:b3:8d:d4:7e:4d:30:67:1b:d5:
                    bd:dc:b3:fb:5d:85:89:10:e7:2e:b1:3f:b2:20:b4:
                    95:01:ee:ee:02:df:0a:e5:8a:29:82:1c:f8:03:65:
                    57:4b:f7:ec:97:12:3e:22:dd:f8:72:c2:ab:15:ca:
                    d0:81:f2:8f:57:fc:0b:65:be:8d:10:1b:59:d5:7d:
                    4f:18:72:55:0f:07:39:06:39:08:3e:53:7b:8b:57:
                    77:97:51:b6:00:6a:35:18:04:84:78:42:fd:c4:24:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:55:C7:D8:46:FD:EE:6C:1E:23:2A:8A:2E:9C:1A:06:6A:93:06:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/06b63f9d-32ba-3d2d-b63b-c5648730d1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:71:e2:dd:72:ac:c0:12:c5:ab:fa:e2:46:c7:43:5b:03:
         90:49:98:3f:b7:88:62:16:a4:58:be:e2:17:e0:87:9f:ee:cf:
         38:53:95:b3:28:ea:3f:39:7b:e7:eb:5b:19:96:5d:9e:af:13:
         b3:48:09:3a:11:38:43:b5:d5:6f:51:44:d5:77:e9:ba:07:c6:
         d0:d2:90:ad:5b:f8:79:5c:08:33:1f:7c:29:13:48:d6:23:d6:
         7e:d1:66:78:22:46:28:29:5d:f5:ab:db:95:96:16:6a:a8:49:
         03:de:29:70:a2:ab:86:1c:49:4c:86:cd:e1:35:5f:82:ed:24:
         16:b5:1a:9a:b8:5c:26:bc:f1:3d:3c:4d:70:05:31:32:64:d6:
         3f:f1:df:e7:29:37:c5:e2:dc:dc:c2:d1:d0:fc:15:23:b8:68:
         34:b7:77:85:de:16:15:fd:5e:19:f9:44:c3:a3:ae:9c:84:b6:
         0a:a3:ae:81:6e:f5:f3:62:9a:89:81:5c:4b:d5:d0:f0:2d:8e:
         59:a9:6f:ee:5a:66:6e:80:e9:25:06:c5:d5:bb:8b:2c:9a:ab:
         3c:e0:d8:d2:77:78:50:e8:c8:7a:05:70:ed:8d:6f:f2:5a:fd:
         5d:49:ab:fe:a7:17:02:93:31:54:b0:57:de:ba:c7:44:aa:7d:
         81:ba:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:14 2026 by rpki-client