Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa
File:                     95820f3b-2efb-39bc-bdf4-69edf3a44951.roa (raw, json)
Hash identifier:          WqwH+PNOuYUPrsVlW8U9fDmtupZG4rDFufpMJcGot38=
Subject key identifier:   39:3B:46:51:2D:32:4A:81:C1:E5:8E:C4:8C:B1:27:07:0D:BC:C2:70
Certificate issuer:       /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial:       010D0C9F4328584B7105446E599F959A2D10E880
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     210781
IP address blocks:        65.75.196.0/22 maxlen: 24
                          104.249.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:05:44:6e:59:9f:95:9a:2d:10:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=125c689c-ca9e-44ba-9173-5c40784461a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:d3:6e:3f:6b:ea:d1:f8:de:57:f4:30:96:
                    e0:45:b1:3d:f5:79:50:3a:2c:bf:b0:82:37:77:68:
                    9e:d2:de:35:40:2b:2f:f9:3f:1e:62:1e:77:af:d9:
                    5d:15:50:18:76:8a:9a:13:fe:5f:2c:ec:85:ea:50:
                    67:c1:bd:79:18:b7:ea:16:fa:16:d9:9a:f5:e6:99:
                    ee:b2:9d:e7:0d:e1:f3:c9:4a:5b:3f:35:ba:fa:f4:
                    9d:1a:4d:4e:fe:5d:21:c7:a3:32:f2:81:63:e5:1a:
                    ca:2b:e1:87:25:09:02:41:7a:d7:90:8b:28:87:e5:
                    91:97:b4:8f:33:bb:ec:56:df:53:6f:dc:bf:59:b5:
                    c0:50:34:5f:29:80:6b:89:bf:3b:ef:f3:05:eb:fa:
                    de:ac:e4:1b:a8:3d:ac:7d:17:b8:ce:5f:03:1a:02:
                    6c:2a:cc:39:25:d1:3c:67:d4:a9:31:19:38:31:25:
                    5d:c4:4c:61:90:91:ea:af:bf:86:39:0b:a5:b0:19:
                    2e:f6:a4:e3:47:62:67:35:24:8d:49:24:b4:7c:dd:
                    5a:35:90:dd:08:af:36:07:c2:72:53:51:29:c0:49:
                    d3:19:8f:7a:f8:01:f8:50:28:45:ec:34:eb:07:7f:
                    8d:e8:58:cf:cc:a4:c9:42:d7:9a:be:ca:0a:c5:77:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3B:46:51:2D:32:4A:81:C1:E5:8E:C4:8C:B1:27:07:0D:BC:C2:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.196.0/22
                  104.249.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:96:bc:ce:e4:2f:0f:d8:f5:79:a6:a2:55:63:15:9c:76:
         c9:c2:f8:50:6e:c2:57:70:c0:1a:7d:0c:88:c5:c2:aa:66:5e:
         15:f8:c6:fc:63:45:ce:2b:9a:87:5b:06:7d:a5:6b:59:ca:d8:
         78:e5:69:d5:c5:dd:9b:c0:49:38:41:bd:6c:68:9f:49:ed:e9:
         aa:94:dc:5c:8a:ac:a2:0b:cb:65:dd:aa:ad:4f:fb:91:31:03:
         ab:3b:1a:e0:52:25:fe:c5:ce:85:5b:49:58:df:83:ec:3c:c3:
         33:fa:46:1b:f7:2c:bb:b9:76:62:f2:9e:c5:36:f4:3d:82:7b:
         0b:f3:64:43:d4:1f:c7:27:89:b9:e2:55:08:2a:f9:b1:dc:09:
         6b:19:75:91:a3:7c:57:07:a3:95:d3:33:1c:f0:98:a2:45:87:
         2e:71:b7:f4:22:f4:18:43:7b:eb:8d:26:5d:3f:16:36:56:8f:
         94:be:26:79:90:52:5e:86:e3:91:08:78:58:72:fa:33:87:bd:
         21:19:ef:f3:66:a6:b7:75:dd:67:86:8a:05:63:a4:7e:60:b6:
         a0:98:38:07:4c:44:b4:36:8a:b4:ee:d0:45:c9:19:1b:61:35:
         cc:11:9e:ae:7f:ff:d8:d2:19:54:10:6a:fd:79:8b:27:9b:83:
         1f:bb:1e:b7
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtxBURuWZ+Vmi0Q6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4
MjFlMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
MTI1YzY4OWMtY2E5ZS00NGJhLTkxNzMtNWM0MDc4NDQ2MWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKPTbj9r6tH43lf0MJbgRbE99XlQOiy/sII3
d2ie0t41QCsv+T8eYh53r9ldFVAYdoqaE/5fLOyF6lBnwb15GLfqFvoW2Zr15pnu
sp3nDeHzyUpbPzW6+vSdGk1O/l0hx6My8oFj5RrKK+GHJQkCQXrXkIsoh+WRl7SP
M7vsVt9Tb9y/WbXAUDRfKYBrib877/MF6/rerOQbqD2sfRe4zl8DGgJsKsw5JdE8
Z9SpMRk4MSVdxExhkJHqr7+GOQulsBku9qTjR2JnNSSNSSS0fN1aNZDdCK82B8Jy
U1EpwEnTGY96+AH4UChF7DTrB3+N6FjPzKTJQteavsoKxXde2wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDk7RlEtMkqBweWOxIyxJwcNvMJwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm
ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvOTU4MjBmM2ItMmVmYi0z
OWJjLWJkZjQtNjllZGYzYTQ0OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj
YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi
ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4
MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQUvEAwQC
aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJiwlrzO5C8P2PV5pqJVYxWcdsnC+FBuwldwwBp9DIjFwqpm
XhX4xvxjRc4rmodbBn2la1nK2HjladXF3ZvASThBvWxon0nt6aqU3FyKrKILy2Xd
qq1P+5ExA6s7GuBSJf7FzoVbSVjfg+w8wzP6Rhv3LLu5dmLynsU29D2CewvzZEPU
H8cnibniVQgq+bHcCWsZdZGjfFcHo5XTMxzwmKJFhy5xt/Qi9BhDe+uNJl0/FjZW
j5S+JnmQUl6G45EIeFhy+jOHvSEZ7/Nmprd13WeGigVjpH5gtqCYOAdMRLQ2irTu
0EXJGRthNcwRnq5//9jSGVQQav15iyebgx+7Hrc=
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:13:42 2025 by rpki-client