Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa
File:                     94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa (raw, json)
Hash identifier:          cfDrJR+yzQDA1kdHTt91l9pu4vZy4R8oKsoo5L1fcJ4=
Subject key identifier:   6A:58:51:A2:4E:E5:62:F0:C2:93:26:6D:6F:F9:D3:F0:C9:0A:2C:F2
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584EC4D70DF77AC6ECD155B7B120
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     21433
IP address blocks:        144.36.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0d:f7:7a:c6:ec:d1:55:b7:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=9310bf1b-d6bd-4432-b0db-ce78bdbbde17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:bd:4d:6f:df:5b:95:01:7c:63:a1:be:78:
                    b9:7d:b2:36:01:91:7f:5b:5b:ff:b4:81:e9:30:ad:
                    8c:5f:1a:c3:55:4f:17:5d:e1:5f:dd:d9:c1:66:19:
                    84:36:ad:e4:45:c6:d1:ca:ed:4f:d1:cc:27:ff:4a:
                    27:15:1b:23:fd:e0:48:dc:c6:b5:e1:a8:e8:28:be:
                    01:7d:06:aa:2e:10:be:ee:31:e3:26:5e:00:32:94:
                    e9:78:8d:f3:a1:25:82:d2:9c:cb:6f:6e:64:7c:28:
                    7a:a0:e2:1f:43:61:bb:5a:43:1a:8e:12:a2:ff:47:
                    19:3a:01:0a:63:05:da:0f:e0:2c:30:46:63:81:d0:
                    b1:7e:19:27:c7:f1:f7:2b:fb:7a:39:ac:24:85:74:
                    9f:32:a9:48:d8:a9:4a:aa:40:31:a1:20:db:ab:cd:
                    6f:f8:64:df:de:82:c3:cd:57:a0:ac:23:83:bc:b6:
                    01:f7:30:49:c4:06:c0:0d:ab:63:26:41:bb:7d:3e:
                    bb:a9:23:a9:ec:cf:b0:43:09:4e:9f:53:3e:b8:ab:
                    9e:57:cb:f9:70:d7:21:c7:f5:92:26:b1:d2:90:c5:
                    8a:29:f2:2c:f7:dd:d0:6c:e4:3a:7a:c5:d7:e0:ae:
                    09:1d:86:11:e2:3e:1c:29:3b:47:3e:37:af:a6:59:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:58:51:A2:4E:E5:62:F0:C2:93:26:6D:6F:F9:D3:F0:C9:0A:2C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0d:76:3a:89:8f:39:4f:e9:2e:d1:c4:e5:05:99:63:d3:fe:
         8b:7f:dd:67:dc:d0:a8:78:70:83:ab:21:13:fa:13:47:e2:dc:
         4a:8f:25:fb:d8:6c:cb:56:43:3e:b5:0a:85:0c:32:82:ff:da:
         a3:33:c3:f7:81:cc:bc:ac:f4:2f:c9:a7:f8:29:3b:45:cb:81:
         35:63:d8:da:5a:72:b7:44:dd:eb:eb:89:f2:0e:9d:02:3d:37:
         60:05:59:59:bf:6c:29:20:88:55:fa:97:26:03:84:2f:81:12:
         c7:24:fd:67:98:91:40:2e:c1:15:85:df:b9:f5:c8:ef:18:e7:
         06:26:6d:b0:02:fd:4d:e1:06:9c:8f:cc:f5:2b:f2:25:11:29:
         78:86:47:53:36:d3:73:db:ff:3c:f8:ec:7a:04:b9:51:c1:e7:
         65:b4:1e:e5:50:92:66:1b:c6:16:ec:e9:f9:81:68:5d:0b:bd:
         1a:02:41:b0:e9:9c:75:43:b8:da:32:72:92:1d:e1:bb:f5:e7:
         ce:c3:61:77:c9:fe:24:22:25:af:ef:41:35:46:66:ba:8b:96:
         a4:43:ad:c8:4e:05:e2:52:f0:8d:fa:b1:99:f8:b5:11:8b:43:
         f9:78:89:a0:d6:b0:e8:49:d7:df:01:30:65:a3:c6:69:e5:2a:
         3b:48:5b:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1w33esbs0VW3sSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk
OTMxMGJmMWItZDZiZC00NDMyLWIwZGItY2U3OGJkYmJkZTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB69TW/fW5UBfGOhvni5fbI2AZF/W1v/tIHp
MK2MXxrDVU8XXeFf3dnBZhmENq3kRcbRyu1P0cwn/0onFRsj/eBI3Ma14ajoKL4B
fQaqLhC+7jHjJl4AMpTpeI3zoSWC0pzLb25kfCh6oOIfQ2G7WkMajhKi/0cZOgEK
YwXaD+AsMEZjgdCxfhknx/H3K/t6OawkhXSfMqlI2KlKqkAxoSDbq81v+GTf3oLD
zVegrCODvLYB9zBJxAbADatjJkG7fT67qSOp7M+wQwlOn1M+uKueV8v5cNchx/WS
JrHSkMWKKfIs993QbOQ6esXX4K4JHYYR4j4cKTtHPjevpln98QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpYUaJO5WLwwpMmbW/50/DJCizyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvOTRhZDI0ZDMtYjYxNS0z
ZDFkLTljYTEtNWRjZTI4M2ZhYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCRyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHINdjqJjzlP6S7RxOUFmWPT/ot/3Wfc0Kh4cIOrIRP6E0fi3EqPJfvY
bMtWQz61CoUMMoL/2qMzw/eBzLys9C/Jp/gpO0XLgTVj2NpacrdE3evrifIOnQI9
N2AFWVm/bCkgiFX6lyYDhC+BEsck/WeYkUAuwRWF37n1yO8Y5wYmbbAC/U3hBpyP
zPUr8iURKXiGR1M203Pb/zz47HoEuVHB52W0HuVQkmYbxhbs6fmBaF0LvRoCQbDp
nHVDuNoycpId4bv1587DYXfJ/iQiJa/vQTVGZrqLlqRDrchOBeJS8I36sZn4tRGL
Q/l4iaDWsOhJ198BMGWjxmnlKjtIWy0=
-----END CERTIFICATE-----
Generated at Tue Aug 11 17:15:17 2026 by rpki-client