Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa
File:                     554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa (raw, json)
Hash identifier:          3cWj97qXwjtwTqA1sVIn24JewK45TOLVezCi5nMcels=
Subject key identifier:   40:57:5E:25:0E:E5:08:82:B6:3B:D5:9C:46:1D:15:F2:BD:06:7B:87
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584E253EF7D5CAC5836BBF59A800
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     55256
IP address blocks:        158.95.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:f7:d5:ca:c5:83:6b:bf:59:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=2645a4ed-3142-4efe-a1cd-60da86d10d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:7c:ff:95:9b:7b:ab:11:00:21:10:cb:29:
                    87:13:0e:bf:da:eb:47:72:73:5f:27:c5:4c:7b:b1:
                    47:78:d4:8d:40:61:8e:dd:10:ab:cc:ea:ad:9f:f1:
                    67:ed:47:a9:7d:d0:c4:22:b5:b5:f2:e5:bf:35:a2:
                    be:a9:0a:b2:fd:a5:2a:f3:0b:37:ed:22:74:e2:d5:
                    8c:2e:7d:e3:56:f1:8b:cf:00:ab:b5:7e:68:e0:c1:
                    44:a6:e7:60:3c:28:11:fd:83:be:ed:d3:ed:e6:01:
                    08:7d:56:c4:75:29:b9:be:65:c5:29:1b:01:36:4d:
                    dc:c4:3e:5a:85:40:31:7e:22:f2:be:44:e4:91:17:
                    b7:c4:28:6a:ce:fe:86:53:76:6b:42:64:0e:46:e3:
                    c9:24:c4:34:7e:5c:a9:2e:2c:e4:cf:7f:1f:44:6b:
                    f3:9b:02:09:4b:0e:95:47:31:e5:61:5c:3e:98:48:
                    1e:c1:67:f7:ee:b8:54:6b:72:ad:33:d8:2f:5e:88:
                    e9:f8:5c:17:e4:8d:17:c0:72:4e:e7:61:e8:e9:76:
                    ca:e6:f2:6d:39:63:8b:2b:23:39:06:bb:34:af:2e:
                    bc:17:e0:c6:e9:b9:35:4f:a2:a4:3b:12:78:75:55:
                    aa:03:0e:8c:e0:5e:27:c6:aa:5c:32:37:1b:e4:ec:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:57:5E:25:0E:E5:08:82:B6:3B:D5:9C:46:1D:15:F2:BD:06:7B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:de:29:55:b6:e5:af:ac:d3:ca:50:87:3f:49:de:45:e5:
         06:c8:9f:81:e3:c4:ad:68:53:63:f8:c6:6c:69:4c:b0:c5:e6:
         94:14:cb:21:c9:62:03:cb:ff:a7:99:6a:b6:2b:2e:25:10:a8:
         c0:e5:ba:08:52:56:dd:67:1a:d7:7a:28:9c:c4:a5:40:a9:ba:
         ee:65:77:12:a5:1a:9d:58:30:34:41:cc:d2:9a:fd:c2:8e:a1:
         2a:01:54:7e:10:99:06:c7:0f:73:9b:4f:50:d5:08:09:8e:23:
         b1:ee:ac:71:e5:e5:ae:e1:1f:55:20:8b:1c:9f:12:21:0b:98:
         57:d0:b6:ac:ed:8a:36:a8:d0:13:a0:50:42:9f:0a:a1:f1:ba:
         32:cd:8a:4c:4d:b5:42:ce:83:6f:8f:98:f9:34:48:bd:50:f8:
         b3:a5:a6:3a:23:cf:01:ca:07:5e:c0:99:83:c2:d3:76:88:c0:
         8f:3b:7d:59:6b:1b:43:96:10:29:77:28:30:52:05:49:91:21:
         53:6f:97:54:d1:a3:1d:a4:0d:9e:3d:14:b7:df:0f:ff:2b:43:
         46:68:64:e3:93:ab:b6:33:11:59:20:5d:51:26:67:dd:5f:88:
         28:8e:aa:f2:fc:0a:09:28:f8:bd:d3:8f:ee:e2:04:96:f2:45:
         83:df:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:02 2026 by rpki-client