Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f96d33e9-431b-35c4-ba17-050e9283d5b6.roa
File:                     f96d33e9-431b-35c4-ba17-050e9283d5b6.roa (raw, json)
Hash identifier:          NQMFOwpGlVIEwNMqYxA2YJheSMabluP6LlyYHLrlNR8=
Subject key identifier:   9C:0B:D2:5A:1C:E7:F2:21:9A:5D:D4:39:75:81:02:66:77:47:CC:02
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F4328584DE41B652094CE019643175320
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f96d33e9-431b-35c4-ba17-050e9283d5b6.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     13506
IP address blocks:        164.95.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:65:20:94:ce:01:96:43:17:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=c0179ae3-b029-425b-9366-84176a54c8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0f:d5:ec:94:40:df:0e:67:8e:e6:5f:7a:ab:
                    9a:dd:93:3d:2f:28:55:86:19:b9:64:60:16:13:de:
                    bc:11:e8:d2:9c:e3:47:29:fd:b6:62:86:42:f5:a5:
                    ad:cc:92:e3:a9:5b:e2:f8:b3:96:96:3c:f5:55:15:
                    b1:76:f7:cd:5d:17:63:96:9b:f0:3a:d5:7d:88:fb:
                    87:90:26:d0:72:e6:36:70:03:38:6c:34:d4:06:a9:
                    ea:e9:8a:f1:70:07:c6:d7:cf:56:6e:8d:8a:c7:ff:
                    4b:49:66:63:a0:ea:8f:14:77:fc:57:cf:71:80:50:
                    01:3c:68:51:d7:5f:63:fe:01:62:d4:d2:64:24:72:
                    0c:ca:43:2b:92:19:97:25:ca:cd:f9:cf:b3:4a:4a:
                    89:cb:bd:81:09:94:51:d2:29:cf:6b:6f:8d:23:d8:
                    79:cd:63:a0:82:73:b2:c0:82:73:00:c2:e2:a5:6a:
                    d2:2f:b7:2c:2a:75:60:d4:f5:b0:12:ef:59:b7:51:
                    b0:d2:90:76:26:70:4d:07:c2:34:45:bf:1e:be:bf:
                    d5:bb:2b:32:7e:7e:c4:a8:38:fd:dd:6c:8d:7c:ac:
                    74:10:a0:00:8f:37:c2:33:53:52:66:b8:d1:7b:c0:
                    0d:f6:c4:2c:83:f4:e9:12:bd:55:19:3b:b2:b1:a6:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0B:D2:5A:1C:E7:F2:21:9A:5D:D4:39:75:81:02:66:77:47:CC:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f96d33e9-431b-35c4-ba17-050e9283d5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.95.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:91:de:f7:56:be:07:d3:d2:66:5f:e8:5e:98:60:ea:3e:db:
         ae:30:71:b0:8a:9b:b5:eb:22:33:a6:39:e1:66:f9:8e:27:11:
         58:cd:5b:c4:1a:17:b0:84:11:23:a0:d2:85:a5:12:33:3f:b7:
         7d:a4:d6:ec:3d:03:d6:87:8d:9d:31:70:7d:b1:d8:5d:5f:8a:
         ab:09:fe:1d:56:ec:a4:0b:72:12:11:bf:c0:7e:79:00:5d:19:
         3a:87:07:d7:1e:79:79:2b:8a:44:7d:65:b3:2e:fe:ed:49:06:
         7e:cb:7b:00:56:e3:56:1c:23:0d:7b:90:9e:d7:3a:6e:0b:52:
         bd:24:99:0d:ae:0a:99:71:77:53:69:b0:6b:61:7b:2e:76:a1:
         31:f8:ef:17:83:c0:2e:fc:a4:2d:48:c4:d8:95:07:6e:59:fd:
         d8:a8:bb:57:14:71:d7:16:46:db:28:64:c9:0d:83:a5:a8:ff:
         c8:16:81:9c:68:be:2c:7b:69:77:58:3c:b2:e1:6d:e3:e2:62:
         ce:0e:25:0e:b1:f6:8b:e7:5a:b4:83:bc:07:47:e9:ee:78:7d:
         59:28:ef:b8:b1:42:eb:57:b4:39:8c:6a:11:c6:34:a8:ed:b9:
         26:db:e5:55:65:c1:df:0b:5b:f6:c6:ba:ff:43:1f:7a:19:fc:
         15:64:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:32 2026 by rpki-client