Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa
File:                     d354875b-a314-3eb2-8777-47884d0ed9ad.roa (raw, json)
Hash identifier:          RZN03/GhKdk++8jIqec891rhZ/IOAxV2MEwOg1XQ+is=
Subject key identifier:   45:A4:87:7E:03:03:79:9E:16:93:10:37:99:4E:3F:F4:AD:65:4B:A2
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584D6EDA5A181E07505A1439C700
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     55256
IP address blocks:        158.95.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5a:18:1e:07:50:5a:14:39:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=0e6ec7d2-adea-4b34-b3e4-3f1ce2bb7186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:51:d5:4c:cd:81:91:8c:38:be:93:e8:8c:07:
                    da:a7:cf:26:41:a5:66:a4:2c:1b:11:81:c3:3e:d6:
                    03:88:89:c1:f8:a9:a2:a5:97:32:81:f9:b8:3f:d9:
                    0d:85:c3:2e:47:4f:96:51:1b:66:57:6b:09:54:60:
                    c1:55:63:d0:02:16:2b:a1:f6:56:11:c0:a3:61:a3:
                    86:ad:2e:69:90:f0:e7:53:75:55:db:66:59:4c:9b:
                    97:93:31:e4:1f:88:1f:5b:48:26:1d:51:83:c2:8d:
                    2d:80:4f:15:10:2f:52:62:ae:7e:bf:cc:9d:7c:d8:
                    d2:fc:d9:e6:f1:d5:8d:de:b8:bc:03:e1:99:4b:91:
                    ad:0b:03:d5:f7:fd:fd:ed:f5:23:30:cf:24:0b:d1:
                    0f:52:15:20:b1:a2:fe:fd:07:dd:9f:e4:3d:ef:38:
                    be:53:23:16:da:6e:df:a0:3f:13:fd:33:ad:34:6f:
                    1e:5b:48:c8:a9:36:38:2b:5d:c0:73:71:d9:01:a5:
                    db:0f:e2:8f:83:57:1f:90:71:07:62:64:20:2f:19:
                    ac:96:58:ba:d9:71:af:4b:05:d8:8d:f8:3c:30:52:
                    68:f3:be:e4:02:ba:d6:66:b6:b0:95:14:bb:56:ce:
                    90:47:47:98:83:18:d8:9c:a7:f1:b5:dc:08:00:a1:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A4:87:7E:03:03:79:9E:16:93:10:37:99:4E:3F:F4:AD:65:4B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:f1:ae:9f:bd:50:e7:38:f3:47:ec:37:7e:75:58:8d:cb:
         d0:ef:51:a2:44:99:7b:f0:a9:85:ff:cd:66:ef:9f:35:e5:93:
         8d:9e:89:c1:6f:70:c2:46:c1:f9:3a:02:6a:be:9e:ef:2e:be:
         bb:87:ca:51:43:44:06:6c:a4:70:28:c9:4b:17:ba:b4:22:21:
         4c:f3:d9:76:1e:16:b3:3a:36:a6:b0:73:b1:d2:f7:46:2a:f0:
         90:bc:f2:84:50:3c:ac:1e:9b:df:77:cf:95:3b:a1:d3:79:58:
         7b:3c:aa:1c:63:ad:64:5c:20:10:46:b3:1d:25:2d:69:3e:f4:
         e3:60:de:be:c4:7d:0a:74:4d:58:11:ed:da:9f:7f:61:56:02:
         0e:54:72:6d:e0:d6:c3:61:f5:e4:91:c6:d2:48:47:2d:71:74:
         db:f6:ff:a0:73:56:f7:d8:a2:e7:70:ce:47:d0:0d:a8:26:79:
         bf:c8:24:b7:ac:9f:df:74:60:fb:3d:26:50:41:fd:03:6e:46:
         df:af:ff:51:c6:6d:49:55:e9:59:3e:7f:95:46:ea:02:d5:a8:
         f2:5a:2e:1e:28:d2:6d:f5:e1:4b:20:aa:ba:3d:90:43:31:af:
         8a:f1:49:74:33:4a:ab:03:d6:13:b3:d2:d4:3d:58:18:e1:c1:
         1d:4b:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:25 2026 by rpki-client