Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d358435-b11d-3319-a24c-548095eb331c.roa
File:                     3d358435-b11d-3319-a24c-548095eb331c.roa (raw, json)
Hash identifier:          H2TDBgcL3XnKLGe/cr2liFmTAccvGbaqKtfPUlI9YR0=
Subject key identifier:   12:C3:FC:C4:CE:24:AE:CD:48:7A:9B:E1:15:3A:AE:AA:4F:82:8B:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB857843A28F5BBAB0426C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d358435-b11d-3319-a24c-548095eb331c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33657
IP address blocks:        76.96.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:57:84:3a:28:f5:bb:ab:04:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=8c31d49b-55a4-4136-8eec-7e890af1c26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:d0:83:08:35:f5:11:7b:40:5f:ac:70:00:
                    1f:8f:73:cb:dd:db:51:5b:ec:28:b4:13:62:c0:c0:
                    04:37:f5:25:94:2f:2e:b3:ae:89:b1:26:1b:26:73:
                    34:a0:05:3a:a5:85:b7:20:69:12:70:40:f1:75:54:
                    e6:a8:7f:24:b2:21:55:b8:49:df:a1:41:2f:a6:97:
                    18:98:4e:76:a6:f9:33:6b:80:d4:8b:7a:ca:a7:b5:
                    a1:9c:c8:93:58:42:ec:39:a2:2e:00:87:1c:97:6a:
                    7c:06:51:dd:54:df:43:57:20:e2:67:95:1b:2d:38:
                    fb:c2:08:f8:09:ff:3c:8a:35:63:48:13:e5:fb:f6:
                    3a:db:52:f2:cf:bf:5b:36:bc:e3:cd:c3:e1:60:b9:
                    85:f7:0e:34:37:8d:34:6d:1f:d3:12:f3:a2:10:55:
                    77:d1:44:7c:01:dc:fe:1e:09:1c:63:80:b3:4b:3f:
                    74:4a:19:90:50:75:3c:c3:74:bd:75:e3:9c:f4:a7:
                    f3:41:6d:bf:8f:19:f1:4c:75:fb:1b:18:b7:4c:1c:
                    ff:07:fd:1b:c6:59:c0:f5:af:d7:a5:8c:94:37:30:
                    c5:5d:e7:43:0a:26:8f:88:f2:7e:f5:57:62:5d:95:
                    38:fa:4c:54:41:c5:c4:bc:1d:0b:f1:bc:89:f5:48:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:FC:C4:CE:24:AE:CD:48:7A:9B:E1:15:3A:AE:AA:4F:82:8B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d358435-b11d-3319-a24c-548095eb331c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.96.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:1b:95:47:ad:da:6d:14:40:bc:f2:3a:71:62:b6:6b:a4:fa:
         d3:5b:ac:45:2a:d2:25:58:7e:fe:da:0d:da:33:15:81:7b:76:
         87:f3:0f:47:13:78:57:4b:b4:ba:31:27:b2:15:cb:52:7a:0f:
         02:f7:e3:b2:8f:04:1d:79:75:32:2d:6c:82:86:0b:a7:d2:ec:
         45:20:8d:b8:5c:16:eb:18:77:ba:15:c8:c0:95:06:3c:60:9a:
         1a:c6:86:d5:ff:a9:87:57:73:f6:49:87:08:f8:c4:4d:1c:ef:
         d2:16:18:49:a5:af:25:8b:19:73:54:86:ff:ac:ff:9c:e9:99:
         d5:ee:f3:08:39:b2:1a:d1:31:91:62:a5:27:f4:bf:b6:52:37:
         46:d6:6a:d2:d7:04:35:8f:ba:c9:7c:e8:68:c7:db:1c:ba:68:
         d3:53:f0:b8:b8:21:1a:fb:27:a8:ef:6e:bf:27:50:fc:28:d8:
         ce:34:29:34:05:02:00:7e:cb:4d:01:35:48:0a:6d:36:6c:ef:
         d0:67:10:18:83:1f:ff:a2:ea:1c:89:b1:59:7f:5e:5c:3d:b6:
         b1:e0:3f:f9:b3:5a:de:9f:05:f6:39:f6:cd:31:c3:02:1f:a0:
         ba:c6:19:e2:7f:ca:ee:cc:db:d3:13:8b:c3:2d:42:93:58:5a:
         ce:6a:70:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uFeEOij1u6sEJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
OGMzMWQ0OWItNTVhNC00MTM2LThlZWMtN2U4OTBhZjFjMjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvQgwg19RF7QF+scAAfj3PL3dtRW+wotBNi
wMAEN/UllC8us66JsSYbJnM0oAU6pYW3IGkScEDxdVTmqH8ksiFVuEnfoUEvppcY
mE52pvkza4DUi3rKp7WhnMiTWELsOaIuAIccl2p8BlHdVN9DVyDiZ5UbLTj7wgj4
Cf88ijVjSBPl+/Y621Lyz79bNrzjzcPhYLmF9w40N400bR/TEvOiEFV30UR8Adz+
HgkcY4CzSz90ShmQUHU8w3S9deOc9KfzQW2/jxnxTHX7Gxi3TBz/B/0bxlnA9a/X
pYyUNzDFXedDCiaPiPJ+9VdiXZU4+kxUQcXEvB0L8byJ9UhfbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLD/MTOJK7NSHqb4RU6rqpPgou4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2QzNTg0MzUtYjExZC0z
MzE5LWEyNGMtNTQ4MDk1ZWIzMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN0blUet2m0UQLzyOnFitmuk+tNbrEUq0iVYfv7aDdozFYF7dofzD0cT
eFdLtLoxJ7IVy1J6DwL347KPBB15dTItbIKGC6fS7EUgjbhcFusYd7oVyMCVBjxg
mhrGhtX/qYdXc/ZJhwj4xE0c79IWGEmlryWLGXNUhv+s/5zpmdXu8wg5shrRMZFi
pSf0v7ZSN0bWatLXBDWPusl86GjH2xy6aNNT8Li4IRr7J6jvbr8nUPwo2M40KTQF
AgB+y00BNUgKbTZs79BnEBiDH/+i6hyJsVl/Xlw9trHgP/mzWt6fBfY59s0xwwIf
oLrGGeJ/yu7M29MTi8MtQpNYWs5qcNI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:18 2025 by rpki-client