Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/44b8d114-f82e-3748-9717-6e931b2c872c.roa
File:                     44b8d114-f82e-3748-9717-6e931b2c872c.roa (raw, json)
Hash identifier:          31HneWckBnRIySVjdCRrkolAM2JnZ6A/eg4nLf358hM=
Subject key identifier:   BA:0B:8D:01:95:93:D5:0E:CB:6B:D3:69:BA:DD:3A:2B:9B:25:71:C8
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584CA7F6BF45C14B3F56F31D3A7C
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/44b8d114-f82e-3748-9717-6e931b2c872c.roa
Signing time:             Sat 17 Jan 2026 02:00:30 +0000
ROA not before:           Sat 17 Jan 2026 02:00:30 +0000
ROA not after:            Fri 17 Apr 2026 01:00:30 +0000
asID:                     15204
IP address blocks:        155.94.64.0/20 maxlen: 20
                          155.94.64.0/23 maxlen: 23
                          155.94.66.0/23 maxlen: 23
                          155.94.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:f6:bf:45:c1:4b:3f:56:f3:1d:3a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Jan 17 02:00:30 2026 GMT
            Not After : Apr 17 01:00:30 2026 GMT
        Subject: CN=38bb0662-801a-4a9b-91d4-d2cc0dd8c878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d9:34:52:87:4b:67:cc:d3:47:50:e5:1f:e8:
                    af:b9:7d:2f:68:f0:03:2f:b2:d9:83:30:f1:fe:55:
                    0b:d7:64:36:76:70:ef:05:d4:c3:3a:6a:eb:69:47:
                    bd:b6:d6:e2:5d:ac:f5:a5:15:7a:3e:02:65:19:3c:
                    e6:4a:e7:cd:6c:59:55:12:49:5b:32:27:86:d9:bd:
                    ac:b2:27:f6:92:59:e8:ba:bf:4a:45:60:1c:32:00:
                    5e:a2:c5:28:f7:9c:a7:1e:04:03:79:0e:f2:56:59:
                    74:98:58:64:5f:de:d6:b7:83:3f:cb:21:53:e0:00:
                    b5:89:4f:ca:0c:6a:5f:98:ba:ae:83:58:45:22:02:
                    9f:c3:07:ff:b1:f1:a7:ea:97:44:fb:22:cc:0a:86:
                    1f:6e:48:f1:60:d1:d0:2c:0c:2c:1c:46:23:44:0a:
                    42:3e:43:48:97:73:f4:f4:c6:49:f2:b2:23:72:b2:
                    32:94:7b:b3:c3:75:39:04:60:2a:63:25:f0:aa:3a:
                    23:35:38:90:cd:3d:63:8a:1d:cd:cc:de:5f:3e:da:
                    63:af:fe:56:c2:07:45:81:9c:ea:28:87:89:3a:46:
                    49:3f:39:ad:31:7e:66:3e:ad:b2:73:85:a6:c3:c2:
                    b4:db:61:e7:2e:8e:02:de:62:29:03:39:8d:c4:b8:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0B:8D:01:95:93:D5:0E:CB:6B:D3:69:BA:DD:3A:2B:9B:25:71:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/44b8d114-f82e-3748-9717-6e931b2c872c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:de:65:c0:86:4f:ca:92:8f:5d:1b:5e:8f:0a:15:36:40:
         c7:5b:a9:3f:71:1b:fc:4a:1a:0a:62:06:2a:a0:89:48:84:39:
         6c:8f:19:42:26:22:65:0b:87:ac:80:2a:05:25:19:7b:45:34:
         c0:4e:62:7f:f7:89:34:df:62:94:fb:fa:3f:53:e7:ce:bb:f8:
         a0:6c:f8:7c:85:a7:c6:a1:1c:c1:06:2f:b7:c6:4d:11:c0:84:
         a9:cb:f0:41:55:c7:b0:49:a3:4c:5d:79:da:31:08:8e:cc:29:
         a7:54:6a:fe:ce:a9:62:e0:5f:de:31:b5:80:99:dd:13:96:56:
         63:66:ec:90:2e:37:9b:d7:a1:06:ed:38:0a:4a:50:c3:c7:85:
         67:7b:ab:51:c0:2b:17:95:17:ae:96:ee:7a:fe:4c:32:d1:eb:
         ce:1f:87:65:c0:76:58:d0:75:51:52:16:8c:cb:0a:6d:76:ca:
         2e:c3:c5:8f:92:ac:5e:e0:2c:29:c3:1b:a5:14:7b:91:7b:07:
         09:83:ef:8a:ea:fd:1c:d8:bf:72:00:60:ee:e2:d9:71:b1:6c:
         cf:77:93:4e:6e:44:3b:1f:be:4b:58:22:4a:0e:57:51:a0:b2:
         d9:90:f2:bd:54:0c:22:70:4f:ba:71:dc:d2:a9:db:50:a6:4b:
         f0:ec:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:00 2026 by rpki-client