Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa
File:                     89db818c-8476-3eec-9f80-42c7af3cfb5b.roa (raw, json)
Hash identifier:          a3sxtHMW47hgYsM5/cy+3NPxqrL2H4JfLY4fSTScVwg=
Subject key identifier:   84:D6:30:F6:CF:EA:BA:51:0C:2A:08:0B:2B:91:4B:1C:72:7F:D7:A2
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584F66C2C55A0EC9375A331EE6C0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     21433
IP address blocks:        144.36.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c5:5a:0e:c9:37:5a:33:1e:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=cdc96e95-4acb-46e4-8632-a4d45a06375c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:dd:f2:b2:23:e6:a7:f2:ff:c8:f9:5c:bc:
                    6c:be:26:c7:19:c7:09:9d:99:1d:0a:19:72:d8:70:
                    86:05:5c:2f:69:3f:3a:cb:03:e6:8f:03:a1:0b:19:
                    78:7b:f0:51:99:07:20:79:d1:c5:44:c7:dc:d4:21:
                    b3:fc:58:0c:1e:40:99:21:f7:16:1e:db:6b:e6:d3:
                    96:9c:b7:dd:2d:af:27:f8:01:d8:5e:35:98:d0:a5:
                    64:b8:dc:cf:e0:9a:f7:05:c6:96:5e:b0:48:1b:24:
                    2e:95:26:3b:c2:b5:2a:dd:bd:fc:69:4f:6b:64:17:
                    5b:5d:2f:b1:6c:7b:b0:bd:ce:4a:f6:4f:85:a2:e5:
                    d7:f9:5a:4d:ee:3a:f1:14:e3:c4:40:5c:a6:7f:4e:
                    fa:16:eb:21:7a:1c:a3:f2:38:61:b7:0c:05:74:21:
                    c9:33:ab:b6:38:e2:29:31:f5:1e:c5:db:53:73:02:
                    0e:17:65:ea:a6:f9:0c:33:5c:9b:fa:7c:39:34:37:
                    df:8f:62:9c:1e:a9:ed:bf:82:65:a6:28:7d:3b:66:
                    06:df:fb:81:df:ba:26:32:ec:53:67:71:78:c2:f0:
                    43:c7:bf:a0:07:f4:64:a8:7b:b2:94:be:07:05:8f:
                    b7:15:44:82:0d:38:90:59:f4:3e:70:8d:43:a1:f8:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D6:30:F6:CF:EA:BA:51:0C:2A:08:0B:2B:91:4B:1C:72:7F:D7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:68:92:16:9a:e2:1d:68:9f:da:12:6b:53:7a:eb:c6:48:ff:
         8b:1f:a8:60:62:99:75:a0:58:04:0d:9e:eb:d9:b6:5f:4f:bd:
         7f:b8:cf:94:e9:4b:0e:f8:48:eb:cf:4f:3b:7c:8c:97:77:d3:
         5f:53:92:0a:ea:27:e5:76:ca:eb:a4:08:9f:68:1a:eb:2c:0c:
         b7:ea:8a:b5:6f:ec:ae:76:29:86:ad:f2:be:5a:13:4b:f7:74:
         4b:ef:4c:9c:bf:e0:91:9f:a7:98:50:e0:7b:67:8b:45:ca:ab:
         15:38:2a:64:95:94:55:ca:02:40:89:6b:bc:ba:cf:2a:02:ee:
         2b:a0:de:ea:9c:18:06:96:d2:71:f1:77:4e:a8:a4:f1:21:3e:
         2f:1e:80:24:38:34:fc:d2:53:96:a4:0c:5b:3d:3d:4e:c6:2a:
         cb:46:f0:6c:60:9b:11:77:6c:60:16:67:13:a5:03:55:26:90:
         48:f9:4a:eb:35:67:7b:d3:1f:8b:8e:1c:35:cd:d9:ae:e4:8e:
         0b:dc:11:d6:10:2b:21:e8:57:e2:80:d3:9d:80:c1:63:e4:81:
         7b:f0:cb:54:a4:90:29:6e:1f:7b:c5:b9:54:f4:35:0b:df:4a:
         23:b9:25:14:fc:12:cb:19:83:1b:2f:0d:1b:41:d3:a4:ef:fc:
         9c:44:08:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsVaDsk3WjMe5sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk
Y2RjOTZlOTUtNGFjYi00NmU0LTg2MzItYTRkNDVhMDYzNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirzd8rIj5qfy/8j5XLxsvibHGccJnZkdChly
2HCGBVwvaT86ywPmjwOhCxl4e/BRmQcgedHFRMfc1CGz/FgMHkCZIfcWHttr5tOW
nLfdLa8n+AHYXjWY0KVkuNzP4Jr3BcaWXrBIGyQulSY7wrUq3b38aU9rZBdbXS+x
bHuwvc5K9k+FouXX+VpN7jrxFOPEQFymf076Fushehyj8jhhtwwFdCHJM6u2OOIp
MfUexdtTcwIOF2XqpvkMM1yb+nw5NDffj2KcHqntv4Jlpih9O2YG3/uB37omMuxT
Z3F4wvBDx7+gB/RkqHuylL4HBY+3FUSCDTiQWfQ+cI1DofjUDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITWMPbP6rpRDCoICyuRSxxyf9eiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvODlkYjgxOGMtODQ3Ni0z
ZWVjLTlmODAtNDJjN2FmM2NmYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1okhaa4h1on9oSa1N668ZI/4sfqGBimXWgWAQNnuvZtl9PvX+4z5Tp
Sw74SOvPTzt8jJd3019TkgrqJ+V2yuukCJ9oGussDLfqirVv7K52KYat8r5aE0v3
dEvvTJy/4JGfp5hQ4Htni0XKqxU4KmSVlFXKAkCJa7y6zyoC7iug3uqcGAaW0nHx
d06opPEhPi8egCQ4NPzSU5akDFs9PU7GKstG8GxgmxF3bGAWZxOlA1UmkEj5Sus1
Z3vTH4uOHDXN2a7kjgvcEdYQKyHoV+KA052AwWPkgXvwy1SkkCluH3vFuVT0NQvf
SiO5JRT8EssZgxsvDRtB06Tv/JxECDY=
-----END CERTIFICATE-----
Generated at Wed Oct 7 22:54:07 2026 by rpki-client