Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f0d0eca-b670-37a2-a000-4b192f07a6dc.roa
File:                     1f0d0eca-b670-37a2-a000-4b192f07a6dc.roa (raw, json)
Hash identifier:          RxXV7TPCUsrmWp1HBmp3ilPyJJxq4yj6BoXe4VOnTAw=
Subject key identifier:   BD:B9:AB:D6:91:EA:25:F6:8B:44:22:4B:73:EC:CA:5D:64:04:D8:BA
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2BDC2193A62BA9BB19900
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f0d0eca-b670-37a2-a000-4b192f07a6dc.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bd:c2:19:3a:62:ba:9b:b1:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=76b3876d-4b02-4a6d-9ad4-75061ed638bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:80:98:24:36:6a:d5:92:15:ca:a1:0e:aa:
                    f3:b0:e8:14:cf:0d:c6:c3:91:f9:66:35:7a:f4:44:
                    c2:e1:f9:4e:82:0d:22:ca:28:74:5b:eb:4a:fb:48:
                    31:b3:be:74:74:fa:4e:65:36:8e:90:f7:ef:18:ef:
                    e1:7a:96:63:50:0a:bc:aa:ec:86:4d:1a:47:7a:78:
                    06:65:f6:e7:da:ef:f2:16:0d:2c:a2:c5:59:67:e2:
                    1b:8f:74:04:bc:73:8b:08:0d:ff:1d:db:30:98:73:
                    3c:99:f4:f6:71:8c:e1:8f:5a:29:85:27:a8:f9:23:
                    50:fe:8c:b6:20:bb:1d:d7:55:cd:fe:21:1b:88:08:
                    3a:32:b5:a5:bb:f2:3d:56:e5:a5:67:d4:39:4d:f3:
                    a9:63:83:e0:7f:e7:d8:e9:fc:18:91:2f:11:ad:07:
                    60:42:8e:23:71:2f:9d:40:25:7a:ba:2d:98:23:2f:
                    5b:d1:46:49:e9:38:36:d4:0b:54:80:a9:b6:fd:57:
                    b0:a1:cf:95:29:ee:d1:f8:fa:8b:4c:b3:6a:e3:76:
                    85:85:d1:d1:c3:d5:2a:28:2c:9e:2a:11:93:cb:6d:
                    7b:f7:da:93:7c:f0:65:2c:5e:ee:33:ba:0e:7a:9c:
                    f1:e2:c0:40:02:1f:c6:19:11:9c:63:1e:79:d7:0a:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B9:AB:D6:91:EA:25:F6:8B:44:22:4B:73:EC:CA:5D:64:04:D8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f0d0eca-b670-37a2-a000-4b192f07a6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:51:16:da:31:c2:76:22:74:90:b0:4b:e1:1b:4a:6a:04:1d:
         71:2a:aa:cc:17:24:f8:f4:e2:96:67:4a:23:fa:dc:c0:1d:79:
         2c:5b:fb:5c:c9:f7:1a:5c:7c:2a:08:dd:7d:c0:36:c3:e4:75:
         2a:5f:3f:9b:c6:d0:0e:be:14:12:6b:2b:cf:d9:97:fd:c7:5c:
         f2:f4:93:eb:03:49:85:cb:3f:0b:98:f5:2d:7a:2a:e8:81:6c:
         a3:d1:d7:c8:a0:28:f9:63:f4:42:bf:c9:94:53:8a:56:07:0a:
         d2:4c:83:50:15:ba:5e:84:15:54:a3:5f:aa:ec:0b:7a:f0:aa:
         f1:f7:a0:d2:35:72:8a:39:30:e7:53:49:56:fb:e5:4b:9a:0b:
         6a:fa:c7:32:a2:a9:b0:7f:6b:24:4b:b5:6e:16:ce:f1:82:82:
         df:cd:92:af:c3:3f:2d:16:05:46:db:01:72:30:83:99:3c:e0:
         0a:af:4b:29:d8:0f:28:6a:06:10:8f:7b:98:53:60:2e:3c:19:
         04:58:ea:31:d4:dd:73:d5:da:b8:e4:e6:46:3e:17:6f:b5:e6:
         fa:4b:61:53:67:a3:fa:c4:b0:1c:42:81:69:63:d9:3e:91:02:
         a3:8c:b2:38:7a:0d:22:92:f8:82:2d:3f:4d:6b:d5:90:5d:d6:
         cf:13:b1:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwr3CGTpiupuxmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk
NzZiMzg3NmQtNGIwMi00YTZkLTlhZDQtNzUwNjFlZDYzOGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdSAmCQ2atWSFcqhDqrzsOgUzw3Gw5H5ZjV6
9ETC4flOgg0iyih0W+tK+0gxs750dPpOZTaOkPfvGO/hepZjUAq8quyGTRpHengG
Zfbn2u/yFg0sosVZZ+Ibj3QEvHOLCA3/HdswmHM8mfT2cYzhj1ophSeo+SNQ/oy2
ILsd11XN/iEbiAg6MrWlu/I9VuWlZ9Q5TfOpY4Pgf+fY6fwYkS8RrQdgQo4jcS+d
QCV6ui2YIy9b0UZJ6Tg21AtUgKm2/Vewoc+VKe7R+PqLTLNq43aFhdHRw9UqKCye
KhGTy21799qTfPBlLF7uM7oOepzx4sBAAh/GGRGcYx551wpjsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL25q9aR6iX2i0QiS3Psyl1kBNi6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMWYwZDBlY2EtYjY3MC0z
N2EyLWEwMDAtNGIxOTJmMDdhNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlRFtoxwnYidJCwS+EbSmoEHXEqqswXJPj04pZnSiP63MAdeSxb+1zJ
9xpcfCoI3X3ANsPkdSpfP5vG0A6+FBJrK8/Zl/3HXPL0k+sDSYXLPwuY9S16KuiB
bKPR18igKPlj9EK/yZRTilYHCtJMg1AVul6EFVSjX6rsC3rwqvH3oNI1coo5MOdT
SVb75UuaC2r6xzKiqbB/ayRLtW4WzvGCgt/Nkq/DPy0WBUbbAXIwg5k84AqvSynY
DyhqBhCPe5hTYC48GQRY6jHU3XPV2rjk5kY+F2+15vpLYVNno/rEsBxCgWlj2T6R
AqOMsjh6DSKS+IItP01r1ZBd1s8TsSg=
-----END CERTIFICATE-----
Generated at Wed Oct 7 18:31:16 2026 by rpki-client