Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa
File:                     eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa (raw, json)
Hash identifier:          0RcxIBEk3/Ve30yus8X8LZG8AGo91v46gecffVdb31o=
Subject key identifier:   D6:FB:0C:0D:B9:F6:7E:C2:5D:72:3D:3B:CA:6E:05:F3:3C:C4:05:18
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F1897A76A292BA87D959D6FE0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     21433
IP address blocks:        170.251.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a7:6a:29:2b:a8:7d:95:9d:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=6ddb3a7d-a50e-4ac1-901a-fc73c8c2befc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:ff:5e:b5:49:1a:ec:2a:15:79:ed:e4:41:
                    b6:a4:56:44:78:d7:8f:60:e3:4d:72:50:ea:99:11:
                    a1:d1:44:ed:fb:86:65:40:ae:6a:44:20:62:21:ea:
                    23:77:e6:60:25:b1:39:3e:ec:dd:86:3b:09:7f:b9:
                    24:8d:f6:52:f0:81:db:47:21:74:ca:86:ba:52:56:
                    32:7e:14:f1:03:d5:48:4b:c4:47:8c:0f:04:a9:b8:
                    fb:e7:9a:f4:ba:bf:ce:ef:74:01:06:89:06:ae:97:
                    8c:b5:ec:de:32:ad:78:55:97:a1:bc:76:cf:a6:e6:
                    f6:5d:9e:4d:f0:1f:4c:88:16:c1:60:ef:01:87:75:
                    59:66:79:e9:01:e2:43:5d:92:87:f6:4b:c0:dd:0e:
                    c2:47:92:e8:13:be:6e:f4:9f:53:fc:93:cd:9a:6e:
                    29:b6:97:7c:40:8d:a2:5b:e1:4e:bf:6e:25:c6:1f:
                    c3:bb:cc:01:bd:f5:43:62:6e:ed:90:8e:c8:7e:69:
                    58:84:b8:56:bd:bf:82:8b:b9:83:7f:05:20:08:be:
                    c7:fb:1e:85:5a:61:cd:a3:0d:21:6e:99:a8:02:2e:
                    a3:c0:fb:dd:b0:b2:92:a6:94:c0:dd:45:35:e6:fa:
                    09:5f:37:15:cf:d3:26:7e:69:13:fc:15:33:7b:f9:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FB:0C:0D:B9:F6:7E:C2:5D:72:3D:3B:CA:6E:05:F3:3C:C4:05:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:40:51:97:60:eb:f6:e6:ce:1a:44:69:75:88:e9:fb:b5:
         d1:01:41:9d:42:57:bc:00:cb:65:60:ac:70:d5:8b:c7:a4:13:
         67:7d:65:94:e6:3e:12:d6:2b:19:3b:47:21:9d:5a:98:5a:64:
         68:32:e9:57:1d:f3:d9:21:9a:21:f0:27:ef:80:6d:75:57:c1:
         69:bf:bf:ea:6b:37:c1:e2:41:33:e3:18:e2:47:22:ef:1a:6c:
         03:98:a8:f1:0c:1d:56:b0:c5:b4:3f:e9:55:27:91:a0:f7:91:
         ad:ab:0c:e7:37:93:bd:ac:2f:3d:39:1f:1c:40:25:cf:de:4a:
         d9:1c:5a:d3:2c:09:51:6f:86:41:c1:43:1a:13:71:e7:88:6e:
         5b:68:14:b9:3a:a8:e6:c3:0f:16:c1:70:99:e7:37:fb:93:14:
         cf:15:95:5d:0f:e5:a0:77:68:48:a4:f4:7e:f2:39:5a:f5:e2:
         d5:de:15:fc:be:d2:ea:ac:26:23:a9:bb:fc:f3:1d:42:15:97:
         60:9c:e6:55:11:6d:e9:c5:4b:0d:d4:e2:d0:29:88:40:16:03:
         90:f5:e8:93:cb:78:1c:0c:ca:92:b6:8c:be:9e:48:82:22:cf:
         76:89:56:c6:ce:99:d4:16:da:f3:35:fc:d0:a8:2d:63:b9:11:
         e4:db:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:58:47 2026 by rpki-client