Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77ec4004-d5ae-31bb-82eb-ab0a7e74d3df.roa
File:                     77ec4004-d5ae-31bb-82eb-ab0a7e74d3df.roa (raw, json)
Hash identifier:          j7pELGMPo8HDcGJWKeml3Yb0PnWjfY9pXStYz5OueN8=
Subject key identifier:   F8:F3:89:36:9F:18:58:CB:9B:DF:C5:49:2C:2A:A3:E4:31:19:62:FD
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823F9FA5A95E59E49A9E0C00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77ec4004-d5ae-31bb-82eb-ab0a7e74d3df.roa
Signing time:             Mon 13 Oct 2025 14:10:59 +0000
ROA not before:           Mon 13 Oct 2025 14:10:59 +0000
ROA not after:            Sun 11 Jan 2026 15:10:59 +0000
asID:                     21433
IP address blocks:        170.251.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:9f:a5:a9:5e:59:e4:9a:9e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:10:59 2025 GMT
            Not After : Jan 11 15:10:59 2026 GMT
        Subject: CN=0bc0e3ca-8ee4-4e55-a3a9-f6e085db6712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b0:35:b3:5d:3f:00:80:0d:48:04:d5:36:72:
                    22:e3:c6:d2:2a:6f:6b:57:cb:83:d8:5d:db:54:58:
                    85:66:43:3c:5b:af:6a:08:43:17:47:c9:cd:c8:97:
                    d5:cf:7d:91:0a:87:2f:a7:e8:e4:3f:32:fb:a2:89:
                    9d:3e:38:6c:74:e7:74:c9:5f:8a:3c:20:74:3a:43:
                    56:1a:8b:af:c8:57:2f:3f:90:a0:01:43:e1:d5:10:
                    2f:24:69:b2:4e:07:21:d1:48:1a:32:0a:5d:06:4c:
                    d8:50:08:58:dc:bb:e8:8e:79:32:e2:38:a8:5b:ba:
                    b2:e7:9b:01:e9:82:6e:55:a5:6b:ce:d4:72:55:a8:
                    b7:cf:18:f3:46:59:3f:33:12:d0:89:16:8e:d3:38:
                    ca:8b:1e:c2:22:22:40:33:6a:e2:bc:0d:22:8a:8f:
                    fc:17:38:9a:fb:76:da:54:86:e4:6e:7b:ea:79:78:
                    7f:20:93:ad:00:0e:4d:b3:fb:51:3a:a9:e6:02:79:
                    89:03:04:0c:b7:9f:86:a9:e6:91:c5:b1:18:a5:17:
                    0e:b9:d9:91:b8:60:e3:d8:82:1f:21:5c:e0:27:ab:
                    2e:c9:39:3a:6f:66:9e:46:4d:a3:a3:99:d2:39:74:
                    9a:7c:dc:40:dd:dc:91:46:47:c2:52:0d:a6:c2:09:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F3:89:36:9F:18:58:CB:9B:DF:C5:49:2C:2A:A3:E4:31:19:62:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77ec4004-d5ae-31bb-82eb-ab0a7e74d3df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:fb:c6:99:6b:9b:68:51:b8:b2:60:c3:79:6d:3e:86:5a:
         0d:ee:25:23:51:e8:15:61:ab:04:8c:ed:6d:a0:15:f2:c0:ab:
         bc:0d:3b:06:76:cb:f8:f6:ea:51:b7:8c:9a:0d:ab:89:98:76:
         48:59:92:1b:d1:d8:08:db:73:75:2c:30:3e:0f:c3:ba:4a:34:
         8c:99:a7:f5:ae:b1:b3:da:9e:cc:4f:0f:24:71:6b:3f:08:72:
         bc:f6:e6:c5:5f:91:80:93:8e:fb:66:56:01:1e:b7:17:05:37:
         3d:24:7d:5d:1f:5f:f9:2c:59:02:23:08:83:c4:a4:43:e4:38:
         a1:80:8c:ae:a2:7a:b2:02:88:cd:6c:8c:ad:8b:37:e2:53:77:
         4c:66:ef:4b:95:59:89:9a:bc:a7:bf:7f:61:30:27:59:ee:2a:
         dd:b4:aa:8a:1e:23:6f:50:ce:dd:0d:4f:84:66:c8:46:fc:45:
         e9:75:70:55:91:00:be:20:77:41:69:f9:89:6d:82:19:30:70:
         5b:b3:15:79:14:3e:79:f9:db:ce:3a:af:0e:77:4f:94:1d:b4:
         cf:1f:88:b2:15:55:a4:72:d1:45:0b:cb:d0:ae:b7:2c:cc:c1:
         96:bc:c0:1e:a3:ac:ec:60:8e:76:89:a6:c3:43:33:0c:36:3a:
         0f:a5:ed:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP5+lqV5Z5JqeDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI1MTAxMzE0MTA1OVoXDTI2MDExMTE1MTA1OVowLzEtMCsGA1UEAxMk
MGJjMGUzY2EtOGVlNC00ZTU1LWEzYTktZjZlMDg1ZGI2NzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7A1s10/AIANSATVNnIi48bSKm9rV8uD2F3b
VFiFZkM8W69qCEMXR8nNyJfVz32RCocvp+jkPzL7oomdPjhsdOd0yV+KPCB0OkNW
GouvyFcvP5CgAUPh1RAvJGmyTgch0UgaMgpdBkzYUAhY3Lvojnky4jioW7qy55sB
6YJuVaVrztRyVai3zxjzRlk/MxLQiRaO0zjKix7CIiJAM2rivA0iio/8Fzia+3ba
VIbkbnvqeXh/IJOtAA5Ns/tROqnmAnmJAwQMt5+GqeaRxbEYpRcOudmRuGDj2IIf
IVzgJ6suyTk6b2aeRk2jo5nSOXSafNxA3dyRRkfCUg2mwgkBdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjziTafGFjLm9/FSSwqo+QxGWL9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNzdlYzQwMDQtZDVhZS0z
MWJiLTgyZWItYWIwYTdlNzRkM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqvuyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXs+8aZa5toUbiyYMN5bT6GWg3uJSNR6BVhqwSM7W2gFfLAq7wNOwZ2
y/j26lG3jJoNq4mYdkhZkhvR2Ajbc3UsMD4Pw7pKNIyZp/WusbPansxPDyRxaz8I
crz25sVfkYCTjvtmVgEetxcFNz0kfV0fX/ksWQIjCIPEpEPkOKGAjK6ierICiM1s
jK2LN+JTd0xm70uVWYmavKe/f2EwJ1nuKt20qooeI29Qzt0NT4RmyEb8Rel1cFWR
AL4gd0Fp+YltghkwcFuzFXkUPnn52846rw53T5QdtM8fiLIVVaRy0UULy9CutyzM
wZa8wB6jrOxgjnaJpsNDMww2Og+l7TY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:46 2025 by rpki-client