Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/654e8b37-5c56-3043-abf4-186572dea483.roa
File:                     654e8b37-5c56-3043-abf4-186572dea483.roa (raw, json)
Hash identifier:          f3BHUFTPFyuoQWK0GuLRlQ/4oelpdJx4eCQdqhx7xX8=
Subject key identifier:   7F:11:6C:C5:64:BF:FD:00:63:54:E3:0E:1E:8D:1D:DF:98:53:D5:00
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584B5B0762A0F3D538621B113880
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/654e8b37-5c56-3043-abf4-186572dea483.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     36007
IP address blocks:        66.55.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:62:a0:f3:d5:38:62:1b:11:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=54725c11-713a-4692-8388-a45e4a47a9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:c0:a2:f3:17:56:01:97:57:ac:95:45:15:
                    0c:8c:96:fe:71:d9:eb:ee:23:4e:71:f4:fa:4a:2c:
                    ff:f6:3f:52:22:94:4a:cd:93:fe:fb:b4:41:a4:8a:
                    bb:65:fb:13:64:82:f2:a4:d9:d6:04:c9:5f:71:78:
                    8a:c5:ba:06:71:e5:88:4f:c4:71:88:d5:7d:56:b2:
                    94:da:b5:e6:da:62:99:9c:93:bc:dc:0c:fd:c7:50:
                    f7:43:84:88:98:f9:54:b1:9d:e8:84:d6:c1:41:47:
                    be:46:69:9d:24:fa:40:46:a5:93:36:16:93:03:32:
                    dd:d2:bc:f7:09:da:b2:8b:92:8a:9e:3a:69:60:29:
                    2b:60:11:d0:40:f4:b4:70:e9:00:7b:50:c6:b1:86:
                    41:dc:9a:54:5b:ce:31:11:9d:b3:ec:66:68:47:c0:
                    67:b0:0b:31:54:ae:19:c9:46:76:ca:cc:f8:63:7c:
                    a7:84:40:46:48:67:3c:a9:1e:3c:42:96:d4:24:f8:
                    7e:f0:a5:56:5f:80:f3:ec:5b:72:60:2b:3a:6d:c8:
                    27:36:74:32:4f:e9:2b:c6:53:20:58:31:b2:f2:a8:
                    94:22:17:cd:3d:c2:83:df:2d:97:e0:61:5e:99:a8:
                    18:b0:f5:c1:59:08:f6:a5:ac:18:4f:92:5e:ba:a2:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:11:6C:C5:64:BF:FD:00:63:54:E3:0E:1E:8D:1D:DF:98:53:D5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/654e8b37-5c56-3043-abf4-186572dea483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:0c:2d:4b:f4:68:ff:da:db:ad:74:07:80:e9:48:50:32:64:
         41:9a:b2:92:16:1b:5b:24:e3:95:63:cf:d1:91:bc:d1:49:63:
         6e:30:5c:d6:04:a2:39:d9:8c:1f:80:b4:db:1c:9d:62:93:bf:
         e4:ef:a6:b5:0e:e5:46:3e:c8:ff:e0:5e:bc:38:d6:79:45:5a:
         6e:7b:ad:d2:2d:d0:f1:93:08:6f:3c:d8:c3:39:12:d6:e3:d9:
         95:f7:d5:14:da:92:39:2c:0b:8e:10:57:b6:69:ce:e5:5f:67:
         e3:d4:d1:c7:bb:ea:30:7e:15:81:db:c8:11:77:86:c4:dc:cb:
         a2:92:f8:41:3c:88:84:31:b0:7e:17:ec:6d:6a:aa:39:30:cd:
         19:06:05:31:d8:16:0a:0c:63:74:ae:f2:ae:7b:d3:e5:93:bb:
         f1:da:de:94:67:c7:a6:87:29:2b:1c:81:42:be:c0:f7:1e:91:
         ca:3a:cd:1a:23:ed:36:2e:e2:97:4f:32:b7:b3:0a:e4:72:84:
         36:e1:31:c7:d6:56:25:9d:52:b6:63:fd:9c:62:6c:5a:43:09:
         4b:9f:b8:5e:1e:d2:cd:5c:37:67:e3:91:41:14:0a:2c:4d:a1:
         dd:c5:f4:57:a7:93:b9:d3:37:3b:c2:94:ea:e5:b4:1f:08:53:
         99:30:f4:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2Kg89U4YhsROIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0
ZmZkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
NTQ3MjVjMTEtNzEzYS00NjkyLTgzODgtYTQ1ZTRhNDdhOWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRrAovMXVgGXV6yVRRUMjJb+cdnr7iNOcfT6
Siz/9j9SIpRKzZP++7RBpIq7ZfsTZILypNnWBMlfcXiKxboGceWIT8RxiNV9VrKU
2rXm2mKZnJO83Az9x1D3Q4SImPlUsZ3ohNbBQUe+RmmdJPpARqWTNhaTAzLd0rz3
Cdqyi5KKnjppYCkrYBHQQPS0cOkAe1DGsYZB3JpUW84xEZ2z7GZoR8BnsAsxVK4Z
yUZ2ysz4Y3ynhEBGSGc8qR48QpbUJPh+8KVWX4Dz7FtyYCs6bcgnNnQyT+krxlMg
WDGy8qiUIhfNPcKD3y2X4GFemagYsPXBWQj2pawYT5JeuqK6iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8RbMVkv/0AY1TjDh6NHd+YU9UAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj
OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvNjU0ZThiMzctNWM1Ni0z
MDQzLWFiZjQtMTg2NTcyZGVhNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm
OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1
NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1
NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjdOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ8MLUv0aP/a2610B4DpSFAyZEGaspIWG1sk45Vjz9GRvNFJY24wXNYE
ojnZjB+AtNscnWKTv+TvprUO5UY+yP/gXrw41nlFWm57rdIt0PGTCG882MM5Etbj
2ZX31RTakjksC44QV7ZpzuVfZ+PU0ce76jB+FYHbyBF3hsTcy6KS+EE8iIQxsH4X
7G1qqjkwzRkGBTHYFgoMY3Su8q570+WTu/Ha3pRnx6aHKSscgUK+wPcekco6zRoj
7TYu4pdPMrezCuRyhDbhMcfWViWdUrZj/ZxibFpDCUufuF4e0s1cN2fjkUEUCixN
od3F9Fenk7nTNzvClOrltB8IU5kw9Bo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:56 2025 by rpki-client