Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cfbe8d9-5a3e-3e99-b925-ac089fcfd68f.roa
File:                     6cfbe8d9-5a3e-3e99-b925-ac089fcfd68f.roa (raw, json)
Hash identifier:          Nq7g2JWTM8JXruwVYn0FUFMEHg03MSshanLwlsT/oV0=
Subject key identifier:   46:47:AD:58:78:20:D8:D0:82:BF:65:A3:78:7D:9D:10:2A:2B:39:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9E47630051D2D85557600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cfbe8d9-5a3e-3e99-b925-ac089fcfd68f.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        96.109.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:e4:76:30:05:1d:2d:85:55:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a3d0862b-f09c-462c-8978-1288c85adb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:00:b1:48:28:fb:bd:af:ef:68:92:0a:4b:
                    78:8a:db:5b:98:96:fe:28:b0:67:bc:e6:78:be:07:
                    76:d3:cd:6a:57:56:69:e9:e2:af:08:23:51:98:2a:
                    10:83:fc:8b:b8:bb:30:fb:9e:43:f2:8f:f1:e5:3a:
                    eb:11:60:78:86:85:26:3d:8a:b3:07:56:4d:44:99:
                    46:5d:17:2a:78:6d:f8:79:46:20:34:59:be:5f:b3:
                    08:7c:0c:8f:36:42:24:76:4d:6c:7e:b4:3e:56:ea:
                    40:4c:cc:b1:25:e2:fa:de:cf:d8:1d:60:60:1c:8d:
                    05:3d:9d:e8:ab:32:af:bd:eb:7a:7f:05:7c:47:04:
                    b0:2c:cb:2b:db:09:7c:16:e3:96:40:d9:5e:01:bb:
                    98:c6:96:15:5e:5d:b8:95:76:f2:4e:5b:59:33:73:
                    3a:10:8d:a1:3a:07:7f:dc:0d:3a:62:eb:85:db:97:
                    1b:6c:20:00:ee:b2:a0:69:d8:32:f6:34:6e:0d:e8:
                    47:e7:20:bd:58:ba:e6:31:98:47:a6:18:43:d0:c2:
                    c2:46:fa:87:25:32:1f:97:8b:30:07:08:8f:b9:cb:
                    9e:cd:d8:51:7f:41:ae:30:58:f7:36:01:1b:05:22:
                    2d:80:48:14:2e:0a:b2:fb:ed:ff:d6:c5:27:a5:c9:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:47:AD:58:78:20:D8:D0:82:BF:65:A3:78:7D:9D:10:2A:2B:39:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cfbe8d9-5a3e-3e99-b925-ac089fcfd68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:72:05:c7:a7:ca:ae:7b:d1:c5:e0:b7:cb:fa:36:10:a2:c1:
         90:12:18:e2:19:9b:10:da:80:61:9e:33:61:13:50:dd:3e:a5:
         ad:cc:ab:64:5a:eb:b5:b2:d6:69:aa:8e:89:06:06:cc:23:e9:
         d8:ca:30:45:dc:bb:b8:0a:09:29:ac:c3:41:42:df:45:6b:a0:
         59:82:9b:9b:9b:1d:71:a5:08:e3:eb:18:cf:46:b5:69:e7:e9:
         eb:53:13:8f:dd:47:73:73:c0:6f:d4:ec:d7:4c:be:bd:ce:27:
         d5:55:5f:d6:01:53:a0:c9:fc:8a:ee:27:6c:5d:cd:7d:37:a4:
         c0:46:3c:5c:4c:ab:2b:88:73:25:76:53:57:26:b5:b8:1d:a1:
         d8:7a:86:e1:87:c8:64:23:a6:92:89:76:cb:5a:87:31:53:5c:
         33:12:06:e7:b3:d0:e7:2a:fc:b0:46:c0:25:08:c1:9b:5d:03:
         3e:a3:15:85:fa:8e:31:21:e5:02:71:f4:e0:04:71:8e:b3:d1:
         5c:6a:aa:00:d7:2d:37:d9:a1:2e:5c:b1:49:39:cc:4a:c6:53:
         ab:4b:cc:08:a9:b7:b2:e9:7a:7a:56:09:58:95:8b:f7:84:ab:
         ff:4b:4c:49:e2:f1:d9:1b:eb:73:3e:c3:ad:e0:d0:9c:14:b9:
         53:d1:0e:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ueR2MAUdLYVVdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YTNkMDg2MmItZjA5Yy00NjJjLTg5NzgtMTI4OGM4NWFkYjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzMAsUgo+72v72iSCkt4ittbmJb+KLBnvOZ4
vgd2081qV1Zp6eKvCCNRmCoQg/yLuLsw+55D8o/x5TrrEWB4hoUmPYqzB1ZNRJlG
XRcqeG34eUYgNFm+X7MIfAyPNkIkdk1sfrQ+VupATMyxJeL63s/YHWBgHI0FPZ3o
qzKvvet6fwV8RwSwLMsr2wl8FuOWQNleAbuYxpYVXl24lXbyTltZM3M6EI2hOgd/
3A06YuuF25cbbCAA7rKgadgy9jRuDehH5yC9WLrmMZhHphhD0MLCRvqHJTIfl4sw
BwiPucuezdhRf0GuMFj3NgEbBSItgEgULgqy++3/1sUnpcnMgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZHrVh4INjQgr9lo3h9nRAqKznRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmNmYmU4ZDktNWEzZS0z
ZTk5LWI5MjUtYWMwODlmY2ZkNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG0XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJyBcenyq570cXgt8v6NhCiwZASGOIZmxDagGGeM2ETUN0+pa3Mq2Ra
67Wy1mmqjokGBswj6djKMEXcu7gKCSmsw0FC30VroFmCm5ubHXGlCOPrGM9GtWnn
6etTE4/dR3NzwG/U7NdMvr3OJ9VVX9YBU6DJ/IruJ2xdzX03pMBGPFxMqyuIcyV2
U1cmtbgdodh6huGHyGQjppKJdstahzFTXDMSBuez0Ocq/LBGwCUIwZtdAz6jFYX6
jjEh5QJx9OAEcY6z0VxqqgDXLTfZoS5csUk5zErGU6tLzAipt7LpenpWCViVi/eE
q/9LTEni8dkb63M+w63g0JwUuVPRDoc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:42 2025 by rpki-client