Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/978053e4-cc87-36f5-af75-f943c38dc10f.roa
File:                     978053e4-cc87-36f5-af75-f943c38dc10f.roa (raw, json)
Hash identifier:          MzTyo+TOVOIsuFvZ26hxhDF4arLuNCjFhjItXwqLOMg=
Subject key identifier:   5F:12:0C:C5:27:BF:B4:6D:85:65:39:A7:53:5B:51:FF:46:AD:A5:03
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F0A1FA1EB2FECB277724765C0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/978053e4-cc87-36f5-af75-f943c38dc10f.roa
Signing time:             Wed 02 Sep 2026 08:37:16 +0000
ROA not before:           Wed 02 Sep 2026 08:37:16 +0000
ROA not after:            Tue 01 Dec 2026 09:37:16 +0000
asID:                     21433
IP address blocks:        144.36.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:1f:a1:eb:2f:ec:b2:77:72:47:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Sep  2 08:37:16 2026 GMT
            Not After : Dec  1 09:37:16 2026 GMT
        Subject: CN=d233d182-f640-42a4-8df0-aa97bafe72b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:0b:66:af:fa:eb:2e:0a:4b:b8:58:45:4e:
                    e3:97:1a:35:75:73:9e:cd:6f:e8:5c:39:70:f4:36:
                    fe:e6:e8:0a:81:d3:e3:1d:03:fc:1f:9a:32:89:3d:
                    56:f4:f5:d0:2a:8b:51:24:3e:8d:43:6a:05:2b:22:
                    86:5a:76:74:5f:f3:71:8a:5d:b3:53:86:e4:80:9c:
                    65:e9:42:66:99:2a:1d:a0:6c:2c:31:49:d7:64:a4:
                    92:27:52:cf:96:1b:49:b2:b1:47:75:5e:a6:be:2a:
                    0b:5c:18:e8:ab:f3:63:e6:da:c9:b1:f3:69:b3:6a:
                    37:4e:e0:cd:ee:e0:67:27:19:c1:cc:fd:5d:1e:24:
                    3c:36:a7:83:f2:2f:37:b3:44:6c:c9:7d:1d:02:e0:
                    6a:af:23:f1:f6:c2:30:95:04:52:f6:ea:17:b8:7c:
                    1e:b1:dd:70:9d:36:c3:7d:96:7b:dd:53:c0:5e:46:
                    53:6c:18:ab:f1:cc:30:b2:ae:5e:89:cd:dc:d0:0b:
                    15:16:8f:de:4d:9a:71:17:22:02:69:a1:ae:a7:f2:
                    b4:bc:44:60:06:1d:dd:36:08:01:18:86:79:e9:52:
                    10:b2:34:35:d4:ac:c1:32:87:55:43:29:90:24:b1:
                    35:ca:71:65:ab:8d:73:4c:0a:a2:78:01:10:a6:a9:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:12:0C:C5:27:BF:B4:6D:85:65:39:A7:53:5B:51:FF:46:AD:A5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/978053e4-cc87-36f5-af75-f943c38dc10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2b:d4:c4:50:93:8f:f5:5c:71:ea:69:51:14:63:cb:e2:b2:
         69:e1:c5:b7:d8:d6:3a:d0:1a:de:64:59:4f:bc:c4:b4:89:54:
         90:1e:6d:5c:76:f2:89:c4:af:14:03:d3:c9:ce:a8:d5:e8:a4:
         7e:3e:f5:6e:2e:90:82:df:fb:0d:0a:4f:9b:45:2a:81:92:4c:
         ea:5b:77:53:c4:61:44:41:0c:d6:a1:20:dd:03:12:4f:73:dd:
         38:8e:7d:2d:4c:f7:c3:b9:d5:1d:a6:f1:1c:44:c4:da:25:5d:
         ea:25:4a:7a:46:70:69:c9:da:93:b9:52:04:6c:d2:8b:65:fb:
         2c:58:fc:50:ad:d0:27:5b:1a:f0:76:2b:4d:b3:7f:74:b4:44:
         d8:26:aa:a2:72:36:50:da:3f:f4:4d:f1:88:cd:05:c6:2d:37:
         69:b0:5a:7e:f0:18:fa:49:db:1e:11:64:92:89:c4:12:cf:71:
         03:16:da:4b:61:9b:e3:6c:b0:5e:71:65:96:f7:d5:8d:97:96:
         48:f9:5c:03:2b:6b:7d:a4:32:f0:9a:c9:42:d3:5d:8b:1d:2d:
         65:7d:bd:f2:b4:09:13:02:f1:3d:8f:7b:7a:61:4c:dc:2c:f6:
         77:6c:63:02:55:b9:6e:c9:44:ce:9f:1a:bd:0a:c8:78:bb:4c:
         cc:5d:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:24 2026 by rpki-client