Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa
File:                     7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa (raw, json)
Hash identifier:          oMQs1mZ9taZTLIMl3RENhj1udx6E3vy3rpKlGCZWVGY=
Subject key identifier:   71:B4:98:EF:F9:71:2D:1F:24:BC:BF:E0:75:CD:6F:96:9B:F5:AB:1E
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584E2274456AD07C9B5587936F00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     21433
IP address blocks:        144.36.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:45:6a:d0:7c:9b:55:87:93:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=4d41d946-312e-4cfe-b173-6bf8f94a57f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:90:7d:53:26:3b:49:8e:81:a9:b8:18:4b:
                    91:85:f7:3b:f1:9e:63:cf:65:4f:e2:f1:db:ea:4c:
                    f2:aa:0e:3c:21:a7:10:d3:4a:b3:37:f4:f8:08:34:
                    5c:7e:a0:43:af:a0:d3:02:74:cd:c1:63:9b:b8:2b:
                    2f:67:21:b3:d2:9a:14:08:fd:76:cc:d4:ce:d7:e5:
                    05:7c:a0:af:39:87:f1:45:a4:ab:30:40:98:ca:7e:
                    79:64:c8:47:df:c6:d0:f1:34:fa:cc:f5:56:03:e6:
                    1a:28:af:0c:67:e0:d8:c9:af:fb:39:28:bd:cc:1a:
                    2d:7a:95:eb:2e:03:ff:50:57:ba:d8:4d:37:af:87:
                    a2:c5:8f:76:34:14:6a:ec:3f:3c:11:1d:3f:23:2f:
                    10:33:97:07:a5:60:f1:56:ec:9e:92:44:43:ea:bb:
                    57:a0:1a:2f:6c:bb:f8:51:04:89:c1:61:3e:87:3e:
                    cd:fd:1b:0b:2e:b4:02:f5:c7:76:db:3e:6a:e4:3c:
                    d5:05:4b:22:96:51:fd:62:c4:d0:8b:24:5e:52:de:
                    b4:1b:3b:31:a4:eb:28:c4:24:ff:92:64:2e:f1:37:
                    9c:6c:62:42:a2:df:62:12:37:5d:04:ad:07:26:27:
                    40:d3:b8:b1:b8:71:ac:40:e6:50:59:a0:9d:ca:0c:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B4:98:EF:F9:71:2D:1F:24:BC:BF:E0:75:CD:6F:96:9B:F5:AB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7ea744c0-5771-301c-9d87-c4fa3510aa2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:f9:49:7d:cc:9b:a9:96:ab:03:82:40:af:d3:aa:39:b8:
         bc:ed:b6:bf:80:ea:bd:f0:95:c1:0a:7c:3b:3d:aa:8b:1e:ba:
         5b:46:31:78:0c:49:dd:04:2a:52:6b:56:99:1d:fe:d0:fe:02:
         d5:77:b3:4a:9a:62:3f:fa:85:89:b1:1b:8e:47:d8:ee:47:7d:
         ce:30:80:b7:88:6f:8c:f5:2a:9d:a5:9c:55:70:46:cb:2b:35:
         49:22:ac:52:8d:e8:f1:60:04:8e:ea:cc:b3:94:af:91:d2:98:
         a3:f1:2a:ea:81:da:2c:53:3e:10:44:de:50:7b:1c:4c:2b:49:
         b4:ab:be:7f:36:dc:19:cb:e1:a6:ad:3c:e6:d3:9a:c0:6b:f8:
         01:a3:f7:81:db:d0:28:d1:61:77:77:08:c2:bb:76:c5:4d:8e:
         7a:b4:ae:4d:35:8c:82:66:c0:10:05:43:bb:30:d4:08:94:30:
         16:06:20:52:2e:ca:7b:2e:b1:6e:b6:cf:cd:67:7d:e4:9f:82:
         01:e1:9a:6b:57:65:6b:b3:ff:16:bb:ed:d1:b7:f8:3e:d6:46:
         f0:25:c2:6e:a2:b9:5e:bc:1a:a9:b9:3c:c8:1a:04:9e:da:84:
         b2:f1:0a:f6:c4:4b:84:51:af:64:4d:4a:c4:8e:14:3f:3d:55:
         69:28:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:00 2026 by rpki-client