Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ab0d241b-d46d-31ea-bd3e-fc9037069799.roa
File:                     ab0d241b-d46d-31ea-bd3e-fc9037069799.roa (raw, json)
Hash identifier:          z2qjdTUnrarEHj2WX+0OBfJotcem/TbBU30eFN/Bftk=
Subject key identifier:   60:69:0E:ED:3C:9E:DC:A5:18:AF:9A:E1:1E:BF:14:3F:45:95:BD:A9
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584F3FAD88951BE4834DBB2A07C0
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ab0d241b-d46d-31ea-bd3e-fc9037069799.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     55256
IP address blocks:        158.95.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:88:95:1b:e4:83:4d:bb:2a:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=9cbfaa70-0860-4acb-acd2-0fddf165dcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:02:18:1f:ba:77:92:5d:4d:b3:b1:b5:0a:
                    36:13:02:72:4b:c1:d7:58:b7:4f:e3:d7:1e:69:2a:
                    42:15:d8:b0:a9:94:c6:bb:0a:a1:c2:16:05:0f:8b:
                    8e:4d:6c:bb:c5:ab:de:a8:ce:04:b1:e4:1e:c5:76:
                    94:ac:67:6c:ba:78:cf:f4:4a:1f:85:36:da:1b:94:
                    12:ae:8f:f8:f8:4a:6c:ba:0e:e2:32:e6:8f:91:71:
                    4f:0e:d1:7e:9b:04:9e:b3:37:db:37:63:14:dd:67:
                    b9:1d:92:ae:e9:e5:be:0a:2a:6c:cc:af:45:96:5e:
                    aa:72:a5:af:c2:2b:ff:e7:44:2d:97:fa:e2:21:fd:
                    05:45:bf:d7:a2:3c:0d:14:23:5c:7c:97:d5:26:e9:
                    dd:ef:2f:0a:44:ee:0d:fc:78:26:ee:36:b1:85:d9:
                    a3:48:73:0b:fa:94:34:09:7c:20:a0:05:f2:af:c8:
                    6e:85:40:17:b4:3f:9f:be:61:a1:8b:0e:dd:62:10:
                    01:0a:e6:9c:3a:87:d3:59:1d:28:df:c2:27:7b:b7:
                    d4:c2:ee:a4:f7:20:97:70:d3:60:36:05:09:c6:70:
                    e0:4e:da:09:45:7c:95:ec:47:85:08:8b:2d:27:1a:
                    f6:75:c2:e8:bf:d6:59:19:f9:a0:54:9f:24:0e:e3:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:69:0E:ED:3C:9E:DC:A5:18:AF:9A:E1:1E:BF:14:3F:45:95:BD:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ab0d241b-d46d-31ea-bd3e-fc9037069799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:15:f6:6d:53:48:54:57:21:1c:b0:ab:63:46:68:14:a2:
         5a:2d:78:e1:5e:68:2a:07:5b:14:62:57:d0:4b:80:ba:b1:8b:
         dc:6a:d8:d6:84:ba:e0:8e:c6:c6:f2:49:cd:f2:ea:ea:9c:04:
         ae:9f:56:f8:95:4d:1c:14:ae:ee:fa:be:d1:b6:cc:cb:c3:6e:
         a4:2c:bc:6a:c4:51:23:f7:a0:67:9b:43:cc:90:6a:71:8e:f3:
         b8:e2:5e:5c:af:a3:31:57:33:c7:2b:96:e8:42:84:eb:6b:79:
         3a:cd:87:1b:51:3b:5d:5c:91:e3:9a:72:2c:c5:62:18:7e:fc:
         9b:0e:d2:30:4c:e1:07:25:b4:92:c0:68:e5:4d:83:8f:89:9e:
         f0:f9:a4:b7:cb:d6:d0:1e:ee:18:ef:cb:e6:50:cb:e8:f7:05:
         96:31:7c:9f:ca:7d:02:92:cb:eb:de:0a:d6:09:eb:0d:bf:36:
         e8:a7:c7:cf:81:8d:7c:c2:91:61:9e:43:69:91:17:ee:38:3a:
         b5:bd:ad:e0:c1:9e:fc:36:a6:f9:d3:29:ef:7f:de:02:d5:94:
         2e:12:23:8a:4e:0a:cd:9c:fe:fe:9a:bc:fe:2f:40:71:d1:88:
         92:93:5e:4a:56:2c:99:5b:c1:18:b0:33:4e:94:23:27:ab:cc:
         fc:53:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:23:19 2026 by rpki-client