Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/434fe968-64fe-3f53-a5a0-6fb474199095.roa
File:                     434fe968-64fe-3f53-a5a0-6fb474199095.roa (raw, json)
Hash identifier:          b5ws6BTprTE1k/Q9gM5YaHtv3p84kQMDBT40ZD5xN54=
Subject key identifier:   67:E1:7D:0F:ED:B0:4B:59:BA:5B:F3:69:98:23:AA:2C:A7:7F:AD:3F
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823FA98D9C27AD8502E72700
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/434fe968-64fe-3f53-a5a0-6fb474199095.roa
Signing time:             Mon 13 Oct 2025 14:11:03 +0000
ROA not before:           Mon 13 Oct 2025 14:11:03 +0000
ROA not after:            Sun 11 Jan 2026 15:11:03 +0000
asID:                     21433
IP address blocks:        144.36.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:a9:8d:9c:27:ad:85:02:e7:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:11:03 2025 GMT
            Not After : Jan 11 15:11:03 2026 GMT
        Subject: CN=eb373d3a-e4d5-4654-b392-4df2fcf9c5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:a1:cb:d0:33:6c:94:e2:ff:65:0a:5f:cc:
                    ab:73:d8:fb:c3:61:3f:92:a4:d8:3a:53:55:fa:25:
                    af:38:92:98:32:34:48:6f:f0:b0:e6:9a:dd:be:b7:
                    05:27:b4:3a:c7:4d:be:d0:54:cc:10:0f:0d:af:a5:
                    64:21:62:ef:50:53:4c:3c:b5:c6:c7:8d:e9:87:59:
                    0b:fc:53:16:75:94:a6:00:74:ae:71:ab:1a:ec:f7:
                    eb:65:b6:b3:63:dd:a0:c0:e4:22:db:a2:09:08:64:
                    e6:07:2a:e9:5b:4b:7b:41:1b:7e:d0:65:82:b3:2d:
                    ae:9e:fb:c9:e9:cb:b2:18:42:03:5c:ea:c3:5d:8c:
                    f9:36:79:4b:6c:5a:dc:08:5f:3b:a2:3f:5e:39:e8:
                    8b:0e:62:d0:1f:87:73:8b:6d:2f:5e:16:d5:bf:7d:
                    76:93:09:3d:15:7d:c3:2c:04:aa:be:be:20:e0:43:
                    14:b8:93:6c:ba:66:38:6e:42:b6:17:2e:40:c8:cf:
                    09:94:4b:9b:d7:a0:d4:3d:db:09:b9:0c:0d:41:9e:
                    e2:e0:f2:1f:11:b3:9f:1f:35:d0:21:4e:ce:81:4f:
                    9d:44:8a:fb:19:9a:8e:6f:f1:4d:2f:f0:e2:d2:b4:
                    12:50:0e:97:26:46:47:ee:95:27:8c:d9:93:32:90:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E1:7D:0F:ED:B0:4B:59:BA:5B:F3:69:98:23:AA:2C:A7:7F:AD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/434fe968-64fe-3f53-a5a0-6fb474199095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:df:79:8e:9f:61:8e:fb:24:28:84:af:8d:d5:33:1b:ca:57:
         1f:96:7c:25:0c:51:ed:f5:b0:63:6a:58:b5:f8:16:27:bc:c5:
         1a:06:b0:4f:76:26:6a:bd:da:39:33:cf:19:89:73:16:2e:33:
         fc:84:62:4d:00:a9:e3:f5:f9:09:fe:b0:31:f0:5f:00:e7:0f:
         ec:51:3b:a6:2b:cb:80:8a:f4:2c:bf:67:e1:3e:6b:78:22:d6:
         10:ab:c7:d7:b0:a0:cc:5d:58:24:51:83:3a:95:dd:66:76:9c:
         9c:db:d9:e9:3a:7a:72:e9:9d:fe:ed:25:88:f1:05:9d:e1:63:
         75:2e:d6:e2:49:35:c8:f1:c8:4b:c6:8e:8c:d5:37:25:91:54:
         08:5a:f0:5f:0c:dc:f6:80:85:5c:06:9a:89:fd:fe:b7:76:48:
         8e:7e:89:af:c6:86:9c:2c:58:81:4b:e0:48:b5:b6:c3:df:5b:
         7f:f1:c3:a6:84:df:48:71:4f:8f:f1:52:46:29:cd:ca:aa:a8:
         fd:ef:50:29:2d:8d:b6:af:d2:69:ea:34:ce:57:c8:b5:4d:10:
         2d:ca:6f:2e:03:77:ea:dd:03:ed:15:40:a2:73:ba:54:0b:13:
         bd:27:e3:41:b7:b0:90:10:ad:be:b7:c8:25:6a:65:ec:a4:11:
         06:ad:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:52:33 2025 by rpki-client