Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
File:                     04eca2f6-f0e9-3553-a9ed-47e06df97943.roa (raw, json)
Hash identifier:          KLl8Zo4VjAnBRKGClc2KOBoS9S4ruG6XHu5wyVIUD+k=
Subject key identifier:   4B:3D:3A:AC:0A:88:0B:75:79:36:8D:BA:72:D4:D0:88:4A:CE:6A:59
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823FC2B5C4405FE57BF37780
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa
Signing time:             Mon 13 Oct 2025 14:11:15 +0000
ROA not before:           Mon 13 Oct 2025 14:11:15 +0000
ROA not after:            Sun 11 Jan 2026 15:11:15 +0000
asID:                     21433
IP address blocks:        144.36.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:c2:b5:c4:40:5f:e5:7b:f3:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:11:15 2025 GMT
            Not After : Jan 11 15:11:15 2026 GMT
        Subject: CN=bd664394-f7aa-4959-98d0-0206613b532e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:5d:8c:eb:29:3f:7f:18:2a:d0:f0:d3:42:
                    24:05:20:42:3e:c9:db:3c:e1:68:ac:d2:a3:14:7b:
                    c7:c7:6f:8c:6d:39:a8:c0:fd:8b:56:f4:54:91:88:
                    e6:bb:f2:40:07:b4:4b:a1:38:96:af:b7:d8:a3:91:
                    e2:12:02:95:cc:6c:a3:fb:8a:93:45:d4:bf:d6:29:
                    81:24:08:5b:3e:8a:a6:56:d3:7c:20:10:a0:72:29:
                    58:45:74:ce:d9:e7:1d:8d:27:08:3c:0e:39:8d:6c:
                    26:2b:c8:bc:4f:d2:24:b9:48:56:b1:8a:40:f2:0e:
                    f9:24:06:93:b0:fa:4e:73:3c:d5:bd:57:34:54:46:
                    44:d6:1c:26:e8:ea:f1:80:ec:dd:49:c5:3a:00:90:
                    a6:04:c2:eb:bc:53:e5:b4:66:15:44:53:50:29:38:
                    ff:7a:72:a3:98:6d:d6:7c:7f:c2:3e:51:29:27:8b:
                    9a:8d:aa:5c:c1:1d:12:4e:b7:27:38:bd:a1:2e:10:
                    ff:f9:41:31:b1:a0:a9:8d:92:9b:9c:0b:b9:68:1f:
                    c0:90:7e:27:fe:29:b2:92:cf:f7:06:05:a9:ef:f4:
                    96:2a:84:52:d7:49:e3:69:6b:09:d5:1f:df:38:61:
                    e5:d1:79:e8:fe:af:ba:64:74:2d:31:2b:9c:4f:85:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3D:3A:AC:0A:88:0B:75:79:36:8D:BA:72:D4:D0:88:4A:CE:6A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/04eca2f6-f0e9-3553-a9ed-47e06df97943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:97:87:42:6a:9a:1c:18:b7:20:42:56:98:a5:31:12:9d:
         a2:06:2e:93:e5:51:54:4d:34:60:fa:2e:8e:72:ac:c2:54:ba:
         10:89:ba:98:51:ee:5b:e5:70:e2:b2:01:ea:a5:1c:40:06:2c:
         39:ca:98:49:d6:47:a2:08:4a:fb:ba:dd:2a:2a:66:40:60:b5:
         d0:6c:2c:8a:5a:2e:c4:9e:2b:85:3a:25:71:43:b5:e5:b6:71:
         0e:5a:38:3e:eb:1f:60:f9:8e:fd:5c:9d:97:47:1d:38:31:01:
         56:94:ed:81:da:5b:fb:e2:81:9c:2c:82:d5:5d:c4:e0:9b:5c:
         29:42:f8:ed:45:45:de:61:f0:1d:63:3b:21:28:e5:0e:a2:3a:
         b0:0d:d1:91:02:aa:28:8b:44:a9:3b:e0:26:c9:fe:10:b5:bc:
         29:a1:9c:59:36:93:22:5a:ba:b1:79:54:da:58:f5:44:56:22:
         47:fb:c0:cf:ba:4d:58:67:8e:f2:3b:d3:64:f5:35:f8:a9:d7:
         00:ab:00:71:18:0c:0d:1c:73:e1:fb:b4:e5:95:f4:c3:10:29:
         01:c6:89:8a:bc:03:09:92:a6:79:bf:de:19:2c:9f:05:ef:0f:
         d1:05:39:d0:c8:bf:f7:e0:ba:91:dc:32:25:a1:3f:60:34:c6:
         33:0e:9f:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP8K1xEBf5Xvzd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI1MTAxMzE0MTExNVoXDTI2MDExMTE1MTExNVowLzEtMCsGA1UEAxMk
YmQ2NjQzOTQtZjdhYS00OTU5LTk4ZDAtMDIwNjYxM2I1MzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDFdjOspP38YKtDw00IkBSBCPsnbPOForNKj
FHvHx2+MbTmowP2LVvRUkYjmu/JAB7RLoTiWr7fYo5HiEgKVzGyj+4qTRdS/1imB
JAhbPoqmVtN8IBCgcilYRXTO2ecdjScIPA45jWwmK8i8T9IkuUhWsYpA8g75JAaT
sPpOczzVvVc0VEZE1hwm6OrxgOzdScU6AJCmBMLrvFPltGYVRFNQKTj/enKjmG3W
fH/CPlEpJ4uajapcwR0STrcnOL2hLhD/+UExsaCpjZKbnAu5aB/AkH4n/imyks/3
BgWp7/SWKoRS10njaWsJ1R/fOGHl0Xno/q+6ZHQtMSucT4Ve/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEs9OqwKiAt1eTaNunLU0IhKzmpZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMDRlY2EyZjYtZjBlOS0z
NTUzLWE5ZWQtNDdlMDZkZjk3OTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3fl4dCapocGLcgQlaYpTESnaIGLpPlUVRNNGD6Lo5yrMJUuhCJuphR
7lvlcOKyAeqlHEAGLDnKmEnWR6IISvu63SoqZkBgtdBsLIpaLsSeK4U6JXFDteW2
cQ5aOD7rH2D5jv1cnZdHHTgxAVaU7YHaW/vigZwsgtVdxOCbXClC+O1FRd5h8B1j
OyEo5Q6iOrAN0ZECqiiLRKk74CbJ/hC1vCmhnFk2kyJaurF5VNpY9URWIkf7wM+6
TVhnjvI702T1Nfip1wCrAHEYDA0cc+H7tOWV9MMQKQHGiYq8AwmSpnm/3hksnwXv
D9EFOdDIv/fgupHcMiWhP2A0xjMOn5o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:54 2025 by rpki-client