Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa
File:                     1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa (raw, json)
Hash identifier:          LdVmFwtY2ifRBqhShec2EhB0SLPc2RYRARBDSbdtaqI=
Subject key identifier:   20:E8:13:09:81:30:CB:94:65:9F:A0:3E:43:3C:CD:54:2B:52:E1:3E
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823FB36E7DE4C6BF224710C0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa
Signing time:             Mon 13 Oct 2025 14:11:07 +0000
ROA not before:           Mon 13 Oct 2025 14:11:07 +0000
ROA not after:            Sun 11 Jan 2026 15:11:07 +0000
asID:                     21433
IP address blocks:        144.36.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:b3:6e:7d:e4:c6:bf:22:47:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:11:07 2025 GMT
            Not After : Jan 11 15:11:07 2026 GMT
        Subject: CN=e6186947-5997-4c96-8cf9-08fc86c9307b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:ed:94:3c:d5:a1:33:46:c6:1d:7d:8a:e5:
                    6c:65:f2:f4:2a:da:97:55:1b:e5:b3:fd:e8:dc:da:
                    bb:6b:62:4d:41:8d:b6:87:08:e7:b4:f2:59:35:00:
                    76:2e:16:e6:29:96:fb:16:ae:71:0b:03:5d:c4:1d:
                    7c:60:10:99:50:7b:7f:05:f7:f9:ac:31:95:7c:81:
                    38:4b:e5:5f:30:1e:d4:bf:6c:6f:15:37:18:f4:06:
                    7b:ea:95:1b:15:7a:fc:77:53:85:d4:24:92:e8:b7:
                    88:9b:90:f7:77:d3:4a:18:36:4f:80:59:98:df:bc:
                    ec:aa:09:ac:94:e8:87:81:e0:30:a2:4c:e5:76:ab:
                    c5:88:37:67:66:c9:87:5d:a9:d2:87:f2:02:ce:6d:
                    c0:fc:cc:79:5f:2b:da:56:81:09:1c:36:13:99:f4:
                    95:c5:60:31:c4:98:8e:84:3f:48:86:a2:4f:ec:84:
                    0e:85:e1:d6:f7:69:17:f9:d8:2b:60:2b:d3:79:53:
                    3a:24:97:b8:58:cc:04:5b:67:7f:d7:26:0b:4d:e4:
                    e4:c5:f0:5c:ec:97:a2:25:f3:10:63:57:ae:cd:1d:
                    28:c6:c1:b5:c6:ec:e2:2b:b1:37:0d:01:39:5f:08:
                    e5:57:79:4b:4e:25:67:24:c5:b8:2f:4d:5c:11:4e:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:13:09:81:30:CB:94:65:9F:A0:3E:43:3C:CD:54:2B:52:E1:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:60:59:c8:f8:8d:33:25:cd:93:7a:59:3e:3a:a8:ed:b2:58:
         ec:08:6b:6d:f4:f7:a5:f5:ea:79:62:e5:a9:eb:ba:ff:f9:ea:
         96:f5:5c:d5:23:e7:e8:64:27:17:07:12:c4:c7:83:5d:bf:f9:
         01:de:9c:df:30:51:5d:7c:25:b8:a4:d2:20:1a:8f:2d:95:7b:
         85:ba:96:b6:51:b0:a0:90:d5:dd:81:9a:15:e1:2d:cf:55:cd:
         4c:ca:cd:5f:0b:06:77:42:89:ad:ee:35:de:5a:11:1e:78:1a:
         3d:90:50:ab:2a:c3:61:74:56:56:a1:fb:a5:16:e9:8f:78:d3:
         72:2c:40:31:34:1f:67:82:57:ed:ae:92:cc:c4:bc:2b:90:59:
         66:c6:ff:24:02:7e:04:fe:39:06:36:46:86:f1:3d:b4:a9:98:
         4a:b0:3c:78:d2:4b:f3:4a:58:cd:50:51:e8:07:34:07:b5:46:
         7a:c7:fe:74:c6:60:8d:be:4d:a0:d9:9a:65:c8:20:d7:af:28:
         d0:41:8b:2c:2b:34:bd:92:fd:c7:db:48:0d:af:b8:07:bc:ff:
         1b:04:64:8c:3c:f2:f3:e8:b6:6d:f7:77:48:23:47:6a:97:2f:
         6b:57:46:35:45:de:c5:b7:76:a3:da:0e:06:1c:a9:a1:b2:56:
         a9:80:d2:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7NufeTGvyJHEMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI1MTAxMzE0MTEwN1oXDTI2MDExMTE1MTEwN1owLzEtMCsGA1UEAxMk
ZTYxODY5NDctNTk5Ny00Yzk2LThjZjktMDhmYzg2YzkzMDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyHtlDzVoTNGxh19iuVsZfL0KtqXVRvls/3o
3Nq7a2JNQY22hwjntPJZNQB2LhbmKZb7Fq5xCwNdxB18YBCZUHt/Bff5rDGVfIE4
S+VfMB7Uv2xvFTcY9AZ76pUbFXr8d1OF1CSS6LeIm5D3d9NKGDZPgFmY37zsqgms
lOiHgeAwokzldqvFiDdnZsmHXanSh/ICzm3A/Mx5XyvaVoEJHDYTmfSVxWAxxJiO
hD9IhqJP7IQOheHW92kX+dgrYCvTeVM6JJe4WMwEW2d/1yYLTeTkxfBc7JeiJfMQ
Y1euzR0oxsG1xuziK7E3DQE5XwjlV3lLTiVnJMW4L01cEU4qyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDoEwmBMMuUZZ+gPkM8zVQrUuE+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMWY5ZWQwYTItMjJhNC0z
MDdkLWE0NjUtYmQyYTdlYTg1ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFgWcj4jTMlzZN6WT46qO2yWOwIa23096X16nli5anruv/56pb1XNUj
5+hkJxcHEsTHg12/+QHenN8wUV18Jbik0iAajy2Ve4W6lrZRsKCQ1d2BmhXhLc9V
zUzKzV8LBndCia3uNd5aER54Gj2QUKsqw2F0Vlah+6UW6Y9403IsQDE0H2eCV+2u
kszEvCuQWWbG/yQCfgT+OQY2RobxPbSpmEqwPHjSS/NKWM1QUegHNAe1RnrH/nTG
YI2+TaDZmmXIINevKNBBiywrNL2S/cfbSA2vuAe8/xsEZIw88vPotm33d0gjR2qX
L2tXRjVF3sW3dqPaDgYcqaGyVqmA0mY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:13 2025 by rpki-client