Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/10fad100-e772-3482-84c5-ce30313057da.roa
File:                     10fad100-e772-3482-84c5-ce30313057da.roa (raw, json)
Hash identifier:          fIzxWv24b2bHZZYIVQPYp4xQ0U84UaqW5gjY3uO8lmg=
Subject key identifier:   08:74:A4:E8:07:30:82:2E:E2:0E:F0:9A:05:55:66:A5:26:B1:EE:04
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823FBF022DA009DD147F8D00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/10fad100-e772-3482-84c5-ce30313057da.roa
Signing time:             Mon 13 Oct 2025 14:11:14 +0000
ROA not before:           Mon 13 Oct 2025 14:11:14 +0000
ROA not after:            Sun 11 Jan 2026 15:11:14 +0000
asID:                     21433
IP address blocks:        144.36.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:bf:02:2d:a0:09:dd:14:7f:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:11:14 2025 GMT
            Not After : Jan 11 15:11:14 2026 GMT
        Subject: CN=d0ac6efb-d858-4de8-9650-0ff2f65b4547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:5d:99:22:de:75:1c:f2:f3:be:9e:09:70:
                    a5:b1:d5:c3:4d:50:d5:2e:16:10:44:d7:86:d1:6c:
                    2d:e7:4d:64:17:e5:f7:ae:cd:45:fc:1d:f9:4d:16:
                    27:58:27:69:5b:4b:0e:5d:41:af:65:5c:4f:7a:d1:
                    2b:94:ea:ba:d4:97:c3:54:d5:f9:de:38:ef:8e:af:
                    05:8e:99:a7:1a:68:8d:e1:80:13:10:ba:ae:54:b2:
                    bc:42:2a:1c:49:4e:17:de:58:66:07:a8:58:c7:05:
                    c0:10:c5:0e:68:c4:23:b6:42:7c:da:4e:79:89:ec:
                    d7:62:82:30:04:2e:17:c0:8f:20:78:26:c4:11:09:
                    1a:11:f8:05:ff:50:4b:08:40:b0:5a:11:9c:40:81:
                    45:19:72:bc:16:75:6f:c7:ea:7c:09:be:df:bd:ff:
                    88:cb:a5:9a:8b:fd:8d:35:08:f6:28:84:76:62:a0:
                    3f:b6:63:d1:54:8b:3f:01:08:17:3a:de:a2:b1:2e:
                    cf:66:25:9e:a2:e1:40:2f:c0:d8:cb:88:e6:fb:3a:
                    1e:b0:9c:bd:0a:f9:a8:c1:65:dc:43:a8:e6:5b:7d:
                    35:ae:d1:f1:69:3a:33:ff:45:0b:3e:c0:fc:57:a3:
                    b8:1c:7b:f2:d3:38:76:bc:8e:86:51:3f:78:cc:56:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:74:A4:E8:07:30:82:2E:E2:0E:F0:9A:05:55:66:A5:26:B1:EE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/10fad100-e772-3482-84c5-ce30313057da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:69:ae:89:9e:08:41:73:41:7c:8b:12:ac:06:06:e0:ae:
         dd:94:c1:de:ff:2f:f5:1b:77:b2:6e:59:10:53:9f:54:39:70:
         2e:a8:80:a5:23:32:38:19:7c:4d:4b:76:14:bf:77:a2:41:5b:
         99:22:3c:24:f4:72:24:37:1c:b6:d4:c4:2d:e1:e2:c8:46:6d:
         f1:7c:9b:1b:ef:ac:0b:1c:f9:5f:5e:1d:1e:a6:40:7c:d8:52:
         03:9f:d6:57:6b:83:18:4a:13:77:eb:0a:49:ea:ad:e4:34:a4:
         d4:ec:0c:44:94:99:e7:82:14:5e:6d:57:0c:95:ca:5d:bc:9b:
         4a:fd:e8:dc:a6:92:e9:49:12:68:55:47:ef:6b:d7:5b:05:40:
         99:b3:82:c9:52:43:39:0e:c5:98:fb:71:db:0f:19:7d:e9:af:
         15:7b:47:9a:5f:81:f2:81:54:d1:39:7d:6f:dc:19:51:88:c9:
         8c:4a:b9:77:90:2d:8e:e3:56:d4:7f:b0:ae:82:c2:09:80:ea:
         98:41:e6:de:fb:b3:fe:dd:64:4d:52:4e:c5:55:9b:8c:44:0f:
         f3:86:5b:ce:17:de:48:a5:88:10:05:76:b8:1f:b9:84:0d:71:
         df:37:00:cd:f4:1d:5f:22:b9:b6:15:87:64:55:26:3c:5e:f1:
         3f:e8:bf:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP78CLaAJ3RR/jQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI1MTAxMzE0MTExNFoXDTI2MDExMTE1MTExNFowLzEtMCsGA1UEAxMk
ZDBhYzZlZmItZDg1OC00ZGU4LTk2NTAtMGZmMmY2NWI0NTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ9dmSLedRzy876eCXClsdXDTVDVLhYQRNeG
0Wwt501kF+X3rs1F/B35TRYnWCdpW0sOXUGvZVxPetErlOq61JfDVNX53jjvjq8F
jpmnGmiN4YATELquVLK8QiocSU4X3lhmB6hYxwXAEMUOaMQjtkJ82k55iezXYoIw
BC4XwI8geCbEEQkaEfgF/1BLCECwWhGcQIFFGXK8FnVvx+p8Cb7fvf+Iy6Wai/2N
NQj2KIR2YqA/tmPRVIs/AQgXOt6isS7PZiWeouFAL8DYy4jm+zoesJy9CvmowWXc
Q6jmW301rtHxaToz/0ULPsD8V6O4HHvy0zh2vI6GUT94zFbp3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAh0pOgHMIIu4g7wmgVVZqUmse4EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMTBmYWQxMDAtZTc3Mi0z
NDgyLTg0YzUtY2UzMDMxMzA1N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEL/aa6JnghBc0F8ixKsBgbgrt2Uwd7/L/Ubd7JuWRBTn1Q5cC6ogKUj
MjgZfE1LdhS/d6JBW5kiPCT0ciQ3HLbUxC3h4shGbfF8mxvvrAsc+V9eHR6mQHzY
UgOf1ldrgxhKE3frCknqreQ0pNTsDESUmeeCFF5tVwyVyl28m0r96NymkulJEmhV
R+9r11sFQJmzgslSQzkOxZj7cdsPGX3prxV7R5pfgfKBVNE5fW/cGVGIyYxKuXeQ
LY7jVtR/sK6CwgmA6phB5t77s/7dZE1STsVVm4xED/OGW84X3kiliBAFdrgfuYQN
cd83AM30HV8iubYVh2RVJjxe8T/ov00=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:52:28 2025 by rpki-client