Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/56de8282-1011-3d23-9976-8d8406a45d75.roa
File:                     56de8282-1011-3d23-9976-8d8406a45d75.roa (raw, json)
Hash identifier:          Vkj34BoVcSak05BUTpElEsE1OUJOETF7pRVkk60vHQc=
Subject key identifier:   59:52:71:C6:D8:8D:99:13:07:EA:56:AF:5B:69:00:97:7E:01:72:86
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EA797D9F95B7BFB12115EE980
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/56de8282-1011-3d23-9976-8d8406a45d75.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21433
IP address blocks:        144.36.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:d9:f9:5b:7b:fb:12:11:5e:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7718a903-2a4f-42ae-bb5b-7f68428b94ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:af:32:90:a1:62:4e:39:fc:c9:ae:1e:c3:
                    a8:bf:8d:56:2d:a9:56:fd:79:02:ba:af:29:79:ab:
                    f3:99:a0:1a:6d:7a:f5:4b:a7:71:88:78:ce:22:f0:
                    70:3f:83:29:43:cf:94:ae:e8:1c:17:65:4e:bb:db:
                    35:97:0b:19:8e:12:a7:a1:dd:58:ca:6f:44:cc:83:
                    f1:d4:b5:9c:ea:24:f0:f9:dc:90:0d:1e:97:2c:50:
                    fc:67:d5:92:98:53:33:3d:37:65:05:2b:33:fc:01:
                    44:25:04:47:fb:59:a7:28:67:5d:7b:34:13:d7:15:
                    fc:00:c0:38:d2:d8:a1:fa:ba:65:a7:5a:72:ca:38:
                    c8:89:ab:05:2b:01:45:37:2b:98:b6:71:13:d5:0a:
                    6a:4e:70:92:bd:3c:2c:c0:d4:6d:2c:2e:1e:e2:97:
                    7f:86:df:e5:4a:33:f7:e8:ec:4a:c5:26:e5:d0:da:
                    03:a4:4f:17:4f:7a:a7:eb:ae:54:1e:28:da:df:03:
                    73:32:48:08:b8:5e:f1:75:9c:07:06:ba:96:09:20:
                    2c:ed:ab:a0:6c:9e:55:ba:01:44:06:e9:77:77:5d:
                    99:d7:84:c5:66:07:78:1d:e6:b5:20:17:2c:03:77:
                    17:62:68:bc:a9:f3:b9:d9:a1:40:9d:1d:44:70:5d:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:71:C6:D8:8D:99:13:07:EA:56:AF:5B:69:00:97:7E:01:72:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/56de8282-1011-3d23-9976-8d8406a45d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:1a:f0:cb:b7:b2:af:b6:69:a2:35:6a:6b:65:66:23:2f:
         af:80:41:3a:40:0f:66:29:9b:42:77:a3:7a:c2:4f:6f:fb:ce:
         79:de:22:d9:7c:e1:4e:ea:70:86:10:2c:b1:94:f3:43:d5:37:
         85:36:37:7e:58:7e:cd:c9:32:b2:e2:05:d4:4a:fb:b5:c7:7c:
         76:ef:e5:98:73:4a:ea:b7:dc:34:4f:05:24:ac:a5:59:bd:21:
         82:5c:7f:cb:60:91:73:26:6f:b1:a6:34:ab:75:2a:58:de:6f:
         c5:56:e8:4f:c6:22:23:8b:9e:fd:e0:b8:b8:35:af:c9:46:a2:
         41:bd:4f:79:17:82:6c:f0:a9:b9:e4:c1:2c:c3:10:3c:ad:5d:
         7e:12:97:97:02:22:92:70:f0:b9:bc:b8:aa:3a:ec:47:3e:84:
         1e:88:b3:b9:f2:49:9e:ef:45:83:35:a4:1a:f2:b3:4b:cb:f3:
         d9:1c:ca:b3:85:92:8a:fd:43:9a:52:f1:aa:0b:a5:9f:36:4a:
         9d:2d:ab:18:8a:0c:29:3e:1b:6b:84:f3:1b:d2:7e:3f:18:77:
         d3:dc:da:45:2e:3a:39:af:47:9b:b8:61:1c:a4:51:62:86:85:
         94:97:fb:a1:82:61:ce:7e:b2:fc:03:75:94:d7:3a:ea:73:49:
         dc:b6:67:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl9n5W3v7EhFe6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzcxOGE5MDMtMmE0Zi00MmFlLWJiNWItN2Y2ODQyOGI5NGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHSvMpChYk45/MmuHsOov41WLalW/XkCuq8p
eavzmaAabXr1S6dxiHjOIvBwP4MpQ8+UrugcF2VOu9s1lwsZjhKnod1Yym9EzIPx
1LWc6iTw+dyQDR6XLFD8Z9WSmFMzPTdlBSsz/AFEJQRH+1mnKGddezQT1xX8AMA4
0tih+rplp1pyyjjIiasFKwFFNyuYtnET1QpqTnCSvTwswNRtLC4e4pd/ht/lSjP3
6OxKxSbl0NoDpE8XT3qn665UHija3wNzMkgIuF7xdZwHBrqWCSAs7augbJ5VugFE
Bul3d12Z14TFZgd4Hea1IBcsA3cXYmi8qfO52aFAnR1EcF0sBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlSccbYjZkTB+pWr1tpAJd+AXKGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNTZkZTgyODItMTAxMS0z
ZDIzLTk5NzYtOGQ4NDA2YTQ1ZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCSoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjrGvDLt7KvtmmiNWprZWYjL6+AQTpAD2Ypm0J3o3rCT2/7znneItl8
4U7qcIYQLLGU80PVN4U2N35Yfs3JMrLiBdRK+7XHfHbv5ZhzSuq33DRPBSSspVm9
IYJcf8tgkXMmb7GmNKt1Kljeb8VW6E/GIiOLnv3guLg1r8lGokG9T3kXgmzwqbnk
wSzDEDytXX4Sl5cCIpJw8Lm8uKo67Ec+hB6Is7nySZ7vRYM1pBrys0vL89kcyrOF
kor9Q5pS8aoLpZ82Sp0tqxiKDCk+G2uE8xvSfj8Yd9Pc2kUuOjmvR5u4YRykUWKG
hZSX+6GCYc5+svwDdZTXOupzSdy2Z10=
-----END CERTIFICATE-----
Generated at Tue Aug 11 17:17:33 2026 by rpki-client