Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/434fe968-64fe-3f53-a5a0-6fb474199095.roa
File:                     434fe968-64fe-3f53-a5a0-6fb474199095.roa (raw, json)
Hash identifier:          Do+F9k7Qx9H9XzvvVgy9H8YBjL89i11VD6ozFdDvpz0=
Subject key identifier:   4C:9E:20:0A:03:6F:78:E1:31:FB:3D:40:2A:E4:B5:0C:C3:AD:CF:07
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2C1B2ECD0A32D9BB16800
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/434fe968-64fe-3f53-a5a0-6fb474199095.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c1:b2:ec:d0:a3:2d:9b:b1:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=5c834882-5074-42dd-8083-0c440771f23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:91:81:27:07:86:97:9f:09:6e:36:a5:58:
                    e8:5b:d7:39:cc:ed:7b:f6:de:06:7e:fc:8f:25:68:
                    44:d0:69:37:30:e4:9e:59:d1:0d:4a:23:dc:c8:9a:
                    d3:50:8f:65:6b:3a:80:c2:20:b7:ba:03:29:77:fb:
                    94:c6:b7:7b:87:3c:90:5b:8c:ee:7d:93:6b:d3:0d:
                    11:87:b9:63:54:f3:b3:8f:cc:a8:f0:45:4a:90:0a:
                    00:24:c5:0c:21:e9:93:47:ee:19:30:bf:20:bf:c9:
                    34:95:33:af:48:6a:a1:b9:84:fa:32:12:8e:89:ed:
                    08:2d:1e:d8:46:d6:4b:36:ff:fb:36:5a:24:ec:fe:
                    37:8c:28:71:fd:4e:6a:64:64:bc:e9:cc:b5:e4:88:
                    42:17:fc:2e:55:fc:01:80:17:31:04:4c:71:db:47:
                    6a:17:c2:70:cf:b1:2a:a6:61:4c:40:9b:7e:60:b5:
                    46:a0:31:f9:32:1b:5c:c1:54:37:38:fa:52:c5:85:
                    4b:16:e6:cc:3d:1e:ea:18:09:b0:da:0c:60:a5:67:
                    47:8d:52:f5:82:a0:d4:fa:eb:71:2e:2d:f6:33:c5:
                    8c:ba:13:67:ad:b6:f0:d1:d6:ef:1a:5c:6d:5b:af:
                    6f:7f:26:6e:4d:ff:ee:1f:22:7e:5f:2c:bd:56:32:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:20:0A:03:6F:78:E1:31:FB:3D:40:2A:E4:B5:0C:C3:AD:CF:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/434fe968-64fe-3f53-a5a0-6fb474199095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:26:fa:64:ac:dd:a4:ba:21:02:d5:fd:4c:be:ca:76:2c:
         9c:39:dc:69:2f:4a:4e:46:03:e2:14:42:ac:91:20:58:0e:15:
         19:d4:90:a9:a0:b0:a1:44:dd:cb:ac:b9:78:98:d8:3a:ed:91:
         ab:55:5b:ab:49:b3:f9:e8:7e:b6:1c:72:c7:17:da:1a:6d:53:
         fc:38:01:81:de:48:31:2c:59:6d:30:67:cf:90:1d:45:60:ad:
         a0:be:f6:a3:58:e9:27:4d:80:3c:24:81:59:90:67:21:db:1b:
         39:0a:6b:b9:96:54:36:2f:a7:63:2b:a2:c5:bc:80:bf:00:a2:
         68:ea:a3:3c:36:5e:44:d9:e7:cc:9c:09:14:5f:33:4c:5e:8d:
         d8:0e:f9:77:3c:4a:82:27:89:5b:9b:13:0a:ed:f3:9b:61:1d:
         a9:98:da:ef:62:7c:18:dd:e8:8b:34:7d:53:97:d8:76:b8:48:
         2c:d9:ed:34:97:b4:cc:17:57:63:f7:87:85:24:6f:b3:54:da:
         09:01:8a:df:c1:58:00:1b:31:49:3e:86:df:61:67:79:04:e1:
         c9:bb:69:a7:8a:10:c8:b2:e5:45:ed:fa:13:02:82:ef:3e:68:
         cb:56:97:70:d3:fb:f5:60:d7:2e:9f:2b:0b:8f:d6:dc:f2:03:
         da:6b:af:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsGy7NCjLZuxaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk
NWM4MzQ4ODItNTA3NC00MmRkLTgwODMtMGM0NDA3NzFmMjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/iRgScHhpefCW42pVjoW9c5zO179t4GfvyP
JWhE0Gk3MOSeWdENSiPcyJrTUI9lazqAwiC3ugMpd/uUxrd7hzyQW4zufZNr0w0R
h7ljVPOzj8yo8EVKkAoAJMUMIemTR+4ZML8gv8k0lTOvSGqhuYT6MhKOie0ILR7Y
RtZLNv/7Nlok7P43jChx/U5qZGS86cy15IhCF/wuVfwBgBcxBExx20dqF8Jwz7Eq
pmFMQJt+YLVGoDH5MhtcwVQ3OPpSxYVLFubMPR7qGAmw2gxgpWdHjVL1gqDU+utx
Li32M8WMuhNnrbbw0dbvGlxtW69vfyZuTf/uHyJ+Xyy9VjIOKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyeIAoDb3jhMfs9QCrktQzDrc8HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNDM0ZmU5NjgtNjRmZS0z
ZjUzLWE1YTAtNmZiNDc0MTk5MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCRuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqLJvpkrN2kuiEC1f1Mvsp2LJw53GkvSk5GA+IUQqyRIFgOFRnUkKmg
sKFE3cusuXiY2DrtkatVW6tJs/nofrYccscX2hptU/w4AYHeSDEsWW0wZ8+QHUVg
raC+9qNY6SdNgDwkgVmQZyHbGzkKa7mWVDYvp2MrosW8gL8Aomjqozw2XkTZ58yc
CRRfM0xejdgO+Xc8SoIniVubEwrt85thHamY2u9ifBjd6Is0fVOX2Ha4SCzZ7TSX
tMwXV2P3h4Ukb7NU2gkBit/BWAAbMUk+ht9hZ3kE4cm7aaeKEMiy5UXt+hMCgu8+
aMtWl3DT+/Vg1y6fKwuP1tzyA9prrxk=
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:00:02 2026 by rpki-client