Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c73be73c-b169-3d46-93f4-db115f7cef8a.roa
File:                     c73be73c-b169-3d46-93f4-db115f7cef8a.roa (raw, json)
Hash identifier:          OUAIxNm1nXzTobmN3MEPtuOvFg9moIZ/6wjCGGPLAq4=
Subject key identifier:   43:20:94:AA:6B:5E:AE:17:82:97:AF:A2:48:19:4A:CF:42:52:36:49
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584EA794E52442727AEE7170B880
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c73be73c-b169-3d46-93f4-db115f7cef8a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     55256
IP address blocks:        158.95.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:e5:24:42:72:7a:ee:71:70:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dbe7991f-fb53-4d0a-80b3-cfdd1b4985c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:d6:4b:87:33:65:29:a1:84:15:92:fc:55:
                    f0:f6:b5:ef:4a:35:a6:29:f4:50:d3:29:9c:4a:c9:
                    af:a3:1b:dd:8b:b2:a4:f0:5b:79:43:17:8c:b7:7d:
                    24:70:c5:a5:f3:9c:ee:2c:34:6a:2b:5f:ee:2d:c4:
                    90:93:56:27:ea:92:ae:95:06:63:91:6e:99:06:72:
                    7d:1d:aa:60:e3:65:f3:d8:78:fe:45:34:7e:db:ff:
                    7b:1c:6a:42:b0:95:94:fd:3a:36:9f:ee:9b:a9:ac:
                    cb:34:ba:98:1c:72:73:45:2e:a7:7d:1e:5a:33:3f:
                    be:1f:2f:fd:e2:92:ef:14:dc:73:8f:ef:b7:74:a2:
                    63:cc:ee:9f:a5:2b:be:13:b0:4c:3f:12:b0:05:42:
                    ae:85:60:18:07:ee:f2:31:4b:98:10:e7:01:d0:5a:
                    a5:b5:9c:c3:fe:3a:0f:b9:e1:7b:88:7d:24:25:64:
                    ce:a6:58:d8:fe:ec:26:56:54:11:7b:59:79:b5:ea:
                    2f:d9:1a:d2:56:33:b3:56:7b:5e:cc:52:77:cd:39:
                    cd:3a:c6:1f:d9:a3:6b:cf:f9:b0:62:3a:f8:7c:d3:
                    ef:74:a5:70:b5:fa:ec:b2:24:9e:94:c6:35:40:25:
                    b2:46:91:90:64:be:ff:7c:64:8a:11:84:e6:69:8d:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:94:AA:6B:5E:AE:17:82:97:AF:A2:48:19:4A:CF:42:52:36:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c73be73c-b169-3d46-93f4-db115f7cef8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:11:b5:d3:8a:64:ed:f9:7e:ee:65:6d:65:5c:88:6f:a9:ed:
         8f:7c:df:a6:8b:a2:c8:2f:e5:e7:a3:61:62:b6:37:a1:d8:8c:
         7e:1b:53:84:3d:5a:e4:76:76:45:be:7d:08:78:58:78:7e:12:
         68:6f:e2:e8:91:6b:cb:19:ce:da:33:c4:fb:8b:0c:01:30:d8:
         17:8e:52:30:08:e6:4e:e3:e8:a0:d1:21:5a:11:92:e8:46:65:
         2c:2b:d4:e9:29:3f:05:b0:a4:6b:a1:82:c4:27:82:80:de:1d:
         5d:d6:b3:22:54:51:7b:f5:be:56:c6:a9:d9:93:d7:25:d4:09:
         96:d8:c8:ef:67:ea:a0:d6:9b:6f:b1:52:47:83:71:e1:02:9f:
         63:ba:dc:3b:a9:38:01:8a:40:7d:54:ae:23:b6:0c:4f:81:1f:
         02:b6:19:99:09:0d:e4:de:4d:e4:36:77:8e:fd:53:24:56:88:
         c6:bf:8f:54:f1:19:ef:83:ed:ef:7d:d6:da:c6:c3:63:17:ae:
         a8:1b:dc:d4:64:ed:2f:af:26:57:0f:e2:9e:08:97:e1:9c:fc:
         5a:6e:de:43:2f:de:40:ce:cd:96:1c:76:ee:2d:50:98:00:7f:
         c2:d3:3b:77:61:d0:f8:47:db:b1:af:4b:bc:ff:4c:fd:1c:cc:
         72:cf:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:55 2026 by rpki-client