Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa
File:                     3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa (raw, json)
Hash identifier:          Y4vpULn/wwW+ir7PWDmwaA27xKXX/cbDkiEuGiIO9CY=
Subject key identifier:   1E:48:3A:9B:36:BF:60:8B:3F:01:F9:78:EC:C0:49:C7:2D:B1:8E:A1
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823FB45BECF6597817A0F340
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa
Signing time:             Mon 13 Oct 2025 14:11:09 +0000
ROA not before:           Mon 13 Oct 2025 14:11:09 +0000
ROA not after:            Sun 11 Jan 2026 15:11:09 +0000
asID:                     21433
IP address blocks:        144.36.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:b4:5b:ec:f6:59:78:17:a0:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:11:09 2025 GMT
            Not After : Jan 11 15:11:09 2026 GMT
        Subject: CN=05e46f51-0c98-4f82-9f30-af7373ec238c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:e9:a9:60:6a:30:fc:75:e0:73:96:16:96:
                    02:3e:64:d4:4a:d4:78:75:d7:fa:2d:85:af:07:e0:
                    e3:42:e5:1b:b5:fd:b0:72:cd:e7:57:8e:dd:ad:ba:
                    ea:c7:4a:f1:59:72:7b:74:6f:99:66:bf:80:82:b3:
                    ae:4f:3b:cf:55:1c:6b:de:30:bc:0f:ac:47:1a:47:
                    57:11:dd:d0:c5:d3:0e:c4:32:33:f1:47:eb:2c:31:
                    96:b5:52:5e:a6:80:d9:63:34:93:c1:0f:78:29:8f:
                    11:3e:f9:ca:fb:1f:7b:94:67:ee:95:fa:fb:eb:18:
                    ed:00:44:af:78:10:74:8b:de:20:83:78:91:46:10:
                    b1:0e:63:ad:4c:31:61:b6:59:46:6f:c7:f7:f9:32:
                    f1:10:72:07:0c:ac:20:13:93:ad:90:0e:6f:8e:f4:
                    a4:c2:16:be:8b:64:9d:b4:69:bd:93:69:06:34:53:
                    36:56:9e:0d:58:cd:55:4d:1f:a7:59:0c:9f:38:d6:
                    0e:0f:14:70:fd:ec:ff:54:c2:a9:7b:1b:ed:5a:01:
                    34:9f:7c:34:97:b2:57:23:44:fb:15:cf:e1:81:d4:
                    17:f8:96:79:30:2b:5a:04:67:f0:50:9c:fd:da:f6:
                    62:47:f1:05:ad:d4:73:43:3c:4a:23:b2:50:a3:e4:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:48:3A:9B:36:BF:60:8B:3F:01:F9:78:EC:C0:49:C7:2D:B1:8E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3e6e4df2-0071-3060-a7a5-a471e489c1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:52:71:6d:16:aa:78:89:28:23:2c:28:fc:a3:dc:22:a0:9b:
         2d:ed:ce:9a:0f:29:45:45:db:14:3f:04:de:38:06:a6:07:f6:
         6e:a7:b6:dc:be:78:01:d0:8d:d9:39:53:64:d8:06:d4:e7:7e:
         75:08:79:cf:10:2c:e0:81:db:2b:cc:aa:98:d4:96:a3:16:0b:
         f7:c7:8f:07:00:1f:b9:ea:94:47:c0:1c:52:56:29:8b:16:f6:
         94:0f:f1:69:60:79:a1:ea:b4:7d:1a:e6:35:12:c2:e6:d0:b1:
         a2:95:0b:98:a8:9a:77:ca:78:68:d3:64:da:f8:2c:b6:52:18:
         a2:58:f3:6d:90:76:31:23:dc:00:8b:1c:cd:f2:16:7f:71:0a:
         21:39:b3:5b:b5:75:31:69:8c:16:8d:53:24:1f:70:66:1b:c2:
         30:4e:63:57:f6:1a:f4:5d:16:3b:5e:0d:79:28:fe:4a:98:ab:
         a6:6f:73:ce:b3:ca:a3:41:0d:d2:f9:db:b1:08:42:0d:84:69:
         e6:a9:fb:65:6e:dc:f9:e3:ac:97:88:b6:90:9b:bb:66:9a:e4:
         5d:37:1c:40:eb:b7:63:70:ac:14:f8:7d:7f:28:a7:7a:4e:23:
         de:19:44:08:6b:ea:0b:3e:cc:67:c0:7a:56:fb:37:51:e7:24:
         2e:ec:7a:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP7Rb7PZZeBeg80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI1MTAxMzE0MTEwOVoXDTI2MDExMTE1MTEwOVowLzEtMCsGA1UEAxMk
MDVlNDZmNTEtMGM5OC00ZjgyLTlmMzAtYWY3MzczZWMyMzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5npqWBqMPx14HOWFpYCPmTUStR4ddf6LYWv
B+DjQuUbtf2wcs3nV47drbrqx0rxWXJ7dG+ZZr+AgrOuTzvPVRxr3jC8D6xHGkdX
Ed3QxdMOxDIz8UfrLDGWtVJepoDZYzSTwQ94KY8RPvnK+x97lGfulfr76xjtAESv
eBB0i94gg3iRRhCxDmOtTDFhtllGb8f3+TLxEHIHDKwgE5OtkA5vjvSkwha+i2Sd
tGm9k2kGNFM2Vp4NWM1VTR+nWQyfONYODxRw/ez/VMKpexvtWgE0n3w0l7JXI0T7
Fc/hgdQX+JZ5MCtaBGfwUJz92vZiR/EFrdRzQzxKI7JQo+S6cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5IOps2v2CLPwH5eOzAScctsY6hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvM2U2ZTRkZjItMDA3MS0z
MDYwLWE3YTUtYTQ3MWU0ODljMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdScW0WqniJKCMsKPyj3CKgmy3tzpoPKUVF2xQ/BN44BqYH9m6ntty+
eAHQjdk5U2TYBtTnfnUIec8QLOCB2yvMqpjUlqMWC/fHjwcAH7nqlEfAHFJWKYsW
9pQP8WlgeaHqtH0a5jUSwubQsaKVC5iomnfKeGjTZNr4LLZSGKJY822QdjEj3ACL
HM3yFn9xCiE5s1u1dTFpjBaNUyQfcGYbwjBOY1f2GvRdFjteDXko/kqYq6Zvc86z
yqNBDdL527EIQg2Eaeap+2Vu3PnjrJeItpCbu2aa5F03HEDrt2NwrBT4fX8op3pO
I94ZRAhr6gs+zGfAelb7N1HnJC7sejA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:49 2025 by rpki-client