Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa
File:                     2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa (raw, json)
Hash identifier:          G/txD4jKxwipyormH7GsM9RpRYdSNbZJD4f4dq6bIEE=
Subject key identifier:   1B:AC:68:4F:81:DB:E3:C8:36:D0:77:11:2F:36:6C:24:F3:68:61:59
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EDB2C97C0E00B8C17817D3DC0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa
Signing time:             Sun 16 Aug 2026 13:00:12 +0000
ROA not before:           Sun 16 Aug 2026 13:00:12 +0000
ROA not after:            Sat 14 Nov 2026 14:00:12 +0000
asID:                     21433
IP address blocks:        170.252.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:db:2c:97:c0:e0:0b:8c:17:81:7d:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug 16 13:00:12 2026 GMT
            Not After : Nov 14 14:00:12 2026 GMT
        Subject: CN=abcb9000-6a43-421d-98d9-9fbc51236128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:ee:63:9f:bf:73:16:e1:c7:ba:ee:a2:c4:
                    ea:b3:00:91:32:db:81:9b:21:19:14:58:c1:c7:79:
                    93:01:b3:23:8c:bd:2e:86:01:b1:c1:80:d6:01:99:
                    69:e8:94:24:5b:43:ee:f6:8b:2f:2d:58:88:37:e7:
                    f2:f9:ea:11:fe:68:01:9d:96:ba:fe:5d:87:c0:10:
                    82:af:4d:98:d3:99:8d:13:d8:eb:1b:20:fa:54:6c:
                    99:97:44:d3:7b:7e:68:86:9a:ac:13:02:f5:ec:a0:
                    72:47:84:af:85:5c:7b:14:73:2f:f9:f8:e8:89:cb:
                    22:12:94:1f:f1:96:23:4e:d5:a2:31:de:bd:83:c7:
                    c2:f6:17:b9:fc:5f:64:63:3e:e9:2d:c1:a8:8d:a1:
                    db:d4:7f:15:23:25:a6:70:d2:d9:19:2f:55:e8:11:
                    a1:40:23:62:fc:fe:92:e9:cd:12:e2:d3:c5:80:c6:
                    8d:3c:0b:5c:ea:f3:4a:e5:c5:b0:10:a8:f6:48:7d:
                    f0:72:06:c0:d8:a9:8c:8d:41:28:00:91:44:0e:23:
                    84:d3:7b:3d:b9:a3:75:46:42:58:d9:74:28:4f:b3:
                    e7:75:3d:99:b2:65:6d:56:13:99:b6:40:80:85:96:
                    cd:ec:0a:6e:f9:54:b4:4c:ab:ac:c5:32:49:d4:b4:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AC:68:4F:81:DB:E3:C8:36:D0:77:11:2F:36:6C:24:F3:68:61:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2d35ff65-382d-3b1d-a3de-97dca4c82f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.252.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:78:af:04:8b:cd:1f:b8:9d:3a:51:54:b7:92:db:b3:5c:
         a7:e9:0a:58:b3:31:98:5e:bc:ed:ce:be:ec:66:37:42:2e:a8:
         86:e8:fb:55:b9:78:74:28:8f:0f:b0:93:ad:ce:e4:69:ac:cc:
         55:28:b0:3b:ed:d7:80:29:f1:76:d6:35:b9:23:e1:5d:80:0e:
         5c:d2:f9:0b:51:92:03:08:2c:94:40:08:aa:b1:59:4c:60:b6:
         8c:f8:9b:1e:13:17:76:d4:39:cb:d7:8b:83:b2:48:36:81:e5:
         de:bc:98:c0:fc:cf:f3:53:b3:90:79:ab:1a:59:91:7e:b3:45:
         6a:dc:3e:82:ec:35:ab:1e:41:5d:a8:bd:33:53:b0:21:65:24:
         17:0f:dd:95:94:66:49:bd:57:ba:d9:94:dd:27:25:f9:05:44:
         81:32:f0:34:42:dd:6e:dd:ce:4f:d7:44:3f:d9:ac:a8:d3:d5:
         ee:30:d4:27:bf:dd:4b:81:3d:19:18:3c:4c:20:c2:50:81:da:
         68:33:1f:f5:d3:79:ef:8e:5f:35:3b:50:08:ad:e9:04:7e:56:
         47:a2:4b:cc:57:87:be:3d:5b:da:b9:18:e9:aa:fa:e1:eb:63:
         cf:3d:23:30:62:ca:b5:c8:08:5f:84:de:9f:96:cf:22:87:07:
         2e:1d:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:54:44 2026 by rpki-client