Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa
File:                     9ed460a0-30e5-359a-99af-46da230b9dbc.roa (raw, json)
Hash identifier:          OYnNeVDEF6WONaIm9WHS84NEptIjjCwFE0tVbmqyPjk=
Subject key identifier:   3B:E6:43:1F:71:CC:EA:2C:3E:97:C3:07:15:50:BD:AA:A3:B2:62:37
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F119CFC6A167C56B3D5A39840
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        144.36.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:fc:6a:16:7c:56:b3:d5:a3:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=aba2b420-41bf-473a-b2a0-70f7691a12ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:f4:df:5e:37:c7:4f:d9:3a:2d:7e:49:1a:
                    a1:24:0e:1e:69:01:44:85:cd:fd:53:18:34:f3:96:
                    82:b3:96:b5:c1:25:6d:e8:33:80:33:4a:7a:da:20:
                    bf:08:af:ac:62:87:7c:8f:9d:93:cc:6a:ee:af:6e:
                    0f:a2:1b:94:ff:6c:a4:2e:01:54:d4:10:5f:f8:52:
                    22:ac:08:02:4e:f5:b7:90:18:fd:a6:c3:dd:33:00:
                    bc:ed:b8:16:6d:7d:eb:af:79:b8:1f:02:24:5f:38:
                    d4:d5:b5:70:cc:d2:ed:5a:5e:00:7e:6d:2e:9d:14:
                    1c:c0:aa:6e:86:ac:8e:05:5e:a1:e1:27:73:38:34:
                    f2:7e:c5:b5:06:59:88:50:c7:30:4b:46:37:5a:15:
                    bc:e5:fd:0b:c8:3b:23:2d:5e:df:37:65:83:50:2a:
                    43:ca:ef:e8:dc:0c:29:6c:af:b0:b9:60:10:be:e0:
                    c5:da:2b:75:9c:f8:49:2d:ea:2a:8a:d5:48:fe:80:
                    3c:32:ab:7f:55:eb:63:cc:c3:4c:2e:a8:1e:24:00:
                    07:ee:5d:55:0e:6b:d9:8b:61:d9:6e:97:a7:f3:18:
                    b2:48:00:77:19:db:4a:74:cf:fc:21:23:5d:b4:7d:
                    c8:d6:7f:c8:d6:46:33:da:6a:4c:e2:52:69:d6:a5:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E6:43:1F:71:CC:EA:2C:3E:97:C3:07:15:50:BD:AA:A3:B2:62:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9ed460a0-30e5-359a-99af-46da230b9dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:2c:d6:4c:1e:45:30:96:90:d5:31:a7:57:2c:33:d0:a6:
         3c:38:42:a2:f8:3f:2a:26:f1:58:85:23:1c:61:a6:89:bb:51:
         ff:99:6d:5d:6a:54:a4:9f:2f:ac:c7:82:0f:96:6e:70:4b:03:
         5d:d7:1a:ad:6a:3c:2f:1f:6e:52:dc:cd:b9:9b:eb:98:4a:77:
         8a:8f:20:11:be:9c:78:8e:27:06:61:dd:81:bc:1f:7e:31:20:
         05:41:04:ba:40:58:99:40:2b:8b:ce:af:c1:2c:dd:b9:5c:5b:
         ca:6c:94:c5:84:dc:a9:b2:1d:ce:ef:05:9d:16:a2:23:0d:3e:
         90:92:d0:05:31:4d:65:e4:1a:47:f2:76:b2:03:03:43:98:d6:
         45:3d:e5:59:49:9e:e6:f1:f5:d7:c0:99:b1:41:e7:48:4a:3c:
         4c:bf:2a:9f:e6:70:5a:33:a9:b6:d0:93:4c:28:11:3c:74:84:
         c4:3f:56:e3:8f:53:8f:5f:d5:f1:dd:60:db:d8:ac:77:ef:02:
         70:05:7a:32:76:0a:58:9e:1d:38:15:34:f1:67:93:e0:cc:8e:
         ea:05:fa:21:48:1d:ab:a3:64:89:21:60:5a:34:72:67:ee:83:
         9b:a7:6b:c2:33:86:8e:11:e1:5d:36:32:46:6a:2c:38:73:31:
         6d:63:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:41:57 2026 by rpki-client