Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/4c8d9c03-e0ab-3098-83f0-63aa63fd0ee8.roa
File:                     4c8d9c03-e0ab-3098-83f0-63aa63fd0ee8.roa (raw, json)
Hash identifier:          j6ppY9UC0m7cO2Zo7seT9A8pfcV//dGc8uH5iuaqFS0=
Subject key identifier:   B7:22:1D:C1:ED:DA:4A:40:9E:3C:09:90:58:83:25:6A:42:61:1A:77
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584E9D4A55AAB6FAD635F0B35F80
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/4c8d9c03-e0ab-3098-83f0-63aa63fd0ee8.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     55256
IP address blocks:        158.95.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:55:aa:b6:fa:d6:35:f0:b3:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=c9a405c5-545d-4f0d-9b1c-3076173517b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:56:d9:61:25:2b:b6:10:c2:b2:1a:56:85:
                    a0:77:cd:a4:05:b5:ef:59:c4:5d:c6:be:2e:3f:49:
                    63:55:f6:6d:89:d6:65:1f:50:95:c6:4c:d3:e9:0d:
                    7c:fe:65:41:6f:ec:bf:19:9e:d6:9b:a1:93:db:79:
                    b4:15:df:9c:f0:2b:d5:5e:a3:9a:bb:9a:4e:a3:2f:
                    f7:63:9c:a6:47:e7:1e:91:e1:ad:44:41:60:c9:51:
                    57:fb:7f:bf:2c:ed:a0:17:19:2b:a5:50:28:32:a0:
                    96:b1:59:08:61:75:81:a2:e1:90:0a:8c:8d:ef:ed:
                    a3:ed:43:68:40:0b:b0:0b:a8:0a:85:64:99:35:88:
                    78:ca:8d:9e:d2:bc:bd:95:93:90:c4:42:b5:58:e0:
                    8f:96:28:33:ae:40:e7:33:6e:c5:4b:70:b1:b3:4d:
                    75:22:d6:cc:12:02:8a:d2:38:ee:bd:c5:9c:73:44:
                    9b:ee:60:4d:7c:7a:e6:19:57:aa:68:8c:be:66:00:
                    e9:cc:c1:17:97:5c:5a:b0:26:84:7d:d3:d3:31:e4:
                    ff:fb:65:19:5c:24:a1:9f:00:0e:df:fe:77:05:26:
                    57:e7:63:4e:78:89:cb:8f:ad:e5:12:22:d4:0d:54:
                    61:68:1e:f8:44:c0:22:b4:68:b5:a7:da:b6:fc:ed:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:22:1D:C1:ED:DA:4A:40:9E:3C:09:90:58:83:25:6A:42:61:1A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/4c8d9c03-e0ab-3098-83f0-63aa63fd0ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:68:dc:d9:bb:2c:21:dc:3f:f8:83:29:16:77:51:c4:0b:26:
         60:d4:45:15:52:e5:e3:ca:92:c9:fd:02:7d:9b:e7:65:e2:87:
         4e:b7:32:93:b2:f3:8f:78:fa:d1:eb:99:86:7d:aa:3a:0b:62:
         86:09:52:bc:40:ab:f1:9d:fb:00:f0:78:4b:a3:36:12:bc:99:
         04:75:fc:12:3c:01:8c:d7:ce:5b:1e:68:03:73:64:d2:0a:27:
         7d:5f:21:cf:4a:27:48:52:88:c2:ee:bf:da:a0:d2:6b:75:e4:
         ac:96:f5:37:ac:54:ee:6f:5e:ed:4f:ca:f3:56:16:d9:2d:ce:
         df:19:98:38:13:f9:92:e7:e8:cf:29:11:5f:1b:30:c4:39:ae:
         4f:09:c1:85:73:58:1b:f3:91:c7:4a:11:96:ef:df:fd:94:36:
         01:a1:71:a4:69:b4:2d:b7:8d:1c:99:62:71:49:ed:94:8b:d8:
         35:e0:74:8c:ec:74:4a:f6:c4:a6:50:ae:9a:31:93:77:f6:0e:
         2d:ff:3e:d3:5a:31:87:1e:1e:77:83:70:41:6c:84:c2:a8:85:
         85:ba:9f:b8:5c:be:db:6e:78:85:5b:e0:d4:52:bf:8a:11:e2:
         84:fd:59:d4:6e:d5:24:0d:39:b2:1f:6e:ea:dc:56:25:b6:8b:
         bf:a3:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:31 2026 by rpki-client