Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
File:                     6b98da56-6d05-3af9-8826-f7a70da179a0.roa (raw, json)
Hash identifier:          iLbrgeYKTEFZBSno/YlO5FvPt3g+tJUtfSyBQMGrY3c=
Subject key identifier:   31:37:38:ED:63:39:50:6E:FC:75:EC:4F:77:02:5A:44:93:E6:FC:9E
Certificate issuer:       /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Certificate serial:       010D0C9F4328584E210EFB16653519D57A291E80
Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        195.85.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fb:16:65:35:19:d5:7a:29:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=34cb6e38-6d23-45a3-a7b1-e43d0a72ea75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:23:d7:a0:cb:43:47:8c:2a:7a:d0:1c:73:
                    0c:59:9c:3f:39:a7:81:53:ac:4e:48:a2:27:e7:d2:
                    ab:f1:3c:4a:be:32:0f:1d:8d:6d:b3:2d:68:d0:4b:
                    08:53:68:f7:e8:28:41:35:75:30:22:dc:d0:1c:c6:
                    39:bc:0e:c5:9e:aa:43:c8:3e:8e:e1:7d:08:4d:b0:
                    6b:57:9b:98:b3:db:d7:c8:d4:ba:ac:12:55:b7:33:
                    9b:bd:ea:ae:6c:8b:d2:ea:d2:49:84:d7:bf:1e:97:
                    da:c2:ab:68:06:36:13:34:3f:09:0b:42:d5:48:9b:
                    e6:1b:c4:62:4a:d0:1f:f5:ad:90:ea:18:ff:0e:8a:
                    ff:8a:8c:2f:ef:fe:16:0d:39:25:53:03:eb:e4:44:
                    af:a5:ff:f3:26:3e:4e:12:e9:0d:0b:11:97:3e:71:
                    55:6a:34:47:31:7d:7f:34:fa:d5:9a:0d:3a:0d:38:
                    68:b2:ee:12:d7:54:61:f7:5e:3d:0a:06:ce:8e:78:
                    a9:6b:d3:d2:44:5b:56:3b:ac:f4:2e:3a:f4:25:00:
                    a1:36:81:9e:20:fc:c1:44:2b:00:d2:4f:c5:f6:42:
                    75:f2:32:2e:54:86:3a:da:08:5b:c4:e8:4d:d8:e7:
                    e8:29:64:41:45:c1:3b:5f:9b:e3:af:44:f1:86:3c:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:37:38:ED:63:39:50:6E:FC:75:EC:4F:77:02:5A:44:93:E6:FC:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl

            X509v3 Authority Key Identifier:
                keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:4f:f5:7c:e1:30:a5:52:6d:ec:44:f9:db:fc:e8:23:9c:
         33:fe:6c:1f:32:a0:df:df:fc:1c:a6:04:45:b2:26:08:ce:ff:
         76:7b:d1:d1:cb:9e:8f:95:a2:d6:93:18:f2:5a:cf:96:7f:ab:
         3d:19:a9:02:61:de:c3:b1:20:2d:33:c4:db:16:41:22:8d:b1:
         be:47:3a:01:7d:d6:ca:65:41:c5:de:e5:eb:82:8b:91:2d:ff:
         94:50:69:5b:0b:5c:cc:a2:1e:2d:fb:9a:25:4e:c8:44:40:04:
         f6:5c:3e:e4:dc:a8:c4:3c:a8:67:3f:61:b0:b1:28:ff:fd:c6:
         60:34:06:f0:c7:18:19:a0:08:de:b9:c3:9c:e0:8c:d7:7e:82:
         85:3f:f0:70:62:02:be:7c:28:22:9e:be:90:2a:d0:55:77:c9:
         92:0c:eb:05:8a:39:91:02:4b:59:9a:99:2b:a2:17:3e:8f:78:
         68:4b:87:8e:c2:ff:e6:dc:81:81:d4:68:48:78:61:4d:09:bb:
         08:5f:54:f3:ab:84:12:a2:98:d5:c6:92:6e:4f:fd:1a:e5:80:
         fd:84:01:24:61:06:e7:3e:91:8d:4b:27:bc:14:74:51:16:db:
         8a:49:05:e8:21:b1:83:3e:f6:b5:bd:ff:25:51:47:ae:64:23:
         44:10:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:39 2026 by rpki-client