Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/453f3634-3390-3a9b-bb57-4876078f1e27.roa
File:                     453f3634-3390-3a9b-bb57-4876078f1e27.roa (raw, json)
Hash identifier:          t2ZFJ5waxL6+5BfsUMfK3/Bb/QegOLTlnMKGZHNfO/s=
Subject key identifier:   EF:02:84:04:BC:AB:70:FA:78:90:A3:30:C4:A0:58:7B:22:F1:8A:64
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F698D7571D6A9B51EFC75A980
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/453f3634-3390-3a9b-bb57-4876078f1e27.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     3573
IP address blocks:        144.36.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:75:71:d6:a9:b5:1e:fc:75:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=62411ec0-8444-47a4-85f4-f13f4f15b16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:ae:07:a8:67:e5:43:5a:43:d0:0f:98:75:
                    85:57:e8:8f:fd:4d:92:44:cc:5a:3c:cc:fc:8b:7d:
                    4c:f8:11:95:53:03:80:56:18:de:92:8b:54:1d:17:
                    55:64:46:f7:c6:e4:60:dc:8a:79:6d:d1:26:60:b3:
                    bc:31:57:11:6f:de:c9:4b:8e:ae:5c:1c:ad:6b:83:
                    f8:af:a5:be:66:9a:04:0c:6e:50:d6:96:30:8e:f9:
                    5d:5b:4a:ad:fd:6e:f3:ae:2a:0a:99:b9:a0:ea:3b:
                    ed:fd:90:b9:ef:c3:77:37:70:ce:e0:83:ce:a7:b7:
                    44:78:ce:69:49:37:ae:bd:9d:84:74:84:6b:8e:18:
                    b0:03:2a:a5:fd:a6:40:7e:fa:b0:f6:24:ac:c4:b0:
                    64:2e:c4:52:bc:2b:a2:dd:4c:f9:1e:f4:72:33:8d:
                    bd:c7:0b:47:a9:fb:29:89:01:4c:cd:34:67:4f:5a:
                    b1:a6:95:92:cb:25:ff:3e:38:7a:9c:65:56:50:71:
                    a8:2b:77:9e:86:36:86:bb:03:2e:43:9b:d0:36:9d:
                    93:3a:75:29:4f:05:ca:cc:1c:99:ef:4b:13:47:b1:
                    b6:d9:f8:db:f9:6d:d9:00:af:6b:90:73:7d:91:14:
                    d0:d1:ce:7b:d0:be:d7:36:c8:04:e1:df:bc:cc:6d:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:02:84:04:BC:AB:70:FA:78:90:A3:30:C4:A0:58:7B:22:F1:8A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/453f3634-3390-3a9b-bb57-4876078f1e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:c7:27:fd:7f:65:b8:42:06:fe:a0:fe:d0:42:91:46:24:
         52:96:d2:e1:45:40:fe:0e:00:a0:92:f7:40:b0:c3:3e:62:b7:
         c8:12:1b:21:e2:83:ae:62:ff:59:3b:59:a7:12:76:29:45:67:
         18:c6:04:56:c3:38:4d:e2:cd:41:6a:5c:01:9e:64:ed:79:a8:
         ee:fa:8d:29:8c:02:7e:71:af:32:2a:22:d4:8d:ff:38:5d:76:
         44:3d:1e:39:5c:b9:72:51:9e:2e:e1:8b:32:2c:61:5d:c3:8b:
         22:d0:56:72:c3:17:1f:8b:f5:c3:13:78:88:34:c3:e1:ab:39:
         09:a5:24:a4:2c:d3:95:b6:f8:e9:f3:35:38:11:38:09:a3:f4:
         76:51:be:23:f6:30:81:7a:cf:fa:46:0f:9c:f2:f1:ce:c6:8c:
         3e:78:9e:e1:7d:83:44:fc:ee:20:42:1a:f3:9c:2b:57:bf:21:
         43:b3:3b:76:27:3a:a6:09:5b:0a:72:f5:02:31:98:a0:60:76:
         f3:51:b7:c5:ef:dc:8c:e9:8b:c2:4e:93:9e:ff:bb:b0:3b:10:
         e3:81:01:c7:3b:71:15:55:4b:1f:fe:7a:98:24:ee:90:89:0c:
         ed:92:5d:df:23:fb:c7:95:8c:12:c1:27:3b:8a:ea:12:ff:34:
         a1:93:a4:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXVx1qm1Hvx1qYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
NjI0MTFlYzAtODQ0NC00N2E0LTg1ZjQtZjEzZjRmMTViMTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7CuB6hn5UNaQ9APmHWFV+iP/U2SRMxaPMz8
i31M+BGVUwOAVhjekotUHRdVZEb3xuRg3Ip5bdEmYLO8MVcRb97JS46uXByta4P4
r6W+ZpoEDG5Q1pYwjvldW0qt/W7zrioKmbmg6jvt/ZC578N3N3DO4IPOp7dEeM5p
STeuvZ2EdIRrjhiwAyql/aZAfvqw9iSsxLBkLsRSvCui3Uz5HvRyM429xwtHqfsp
iQFMzTRnT1qxppWSyyX/Pjh6nGVWUHGoK3eehjaGuwMuQ5vQNp2TOnUpTwXKzByZ
70sTR7G22fjb+W3ZAK9rkHN9kRTQ0c570L7XNsgE4d+8zG2WxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8ChAS8q3D6eJCjMMSgWHsi8YpkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNDUzZjM2MzQtMzM5MC0z
YTliLWJiNTctNDg3NjA3OGYxZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCSWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbqxyf9f2W4Qgb+oP7QQpFGJFKW0uFFQP4OAKCS90Cwwz5it8gSGyHi
g65i/1k7WacSdilFZxjGBFbDOE3izUFqXAGeZO15qO76jSmMAn5xrzIqItSN/zhd
dkQ9HjlcuXJRni7hizIsYV3DiyLQVnLDFx+L9cMTeIg0w+GrOQmlJKQs05W2+Onz
NTgROAmj9HZRviP2MIF6z/pGD5zy8c7GjD54nuF9g0T87iBCGvOcK1e/IUOzO3Yn
OqYJWwpy9QIxmKBgdvNRt8Xv3Izpi8JOk57/u7A7EOOBAcc7cRVVSx/+epgk7pCJ
DO2SXd8j+8eVjBLBJzuK6hL/NKGTpF4=
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:02:25 2026 by rpki-client