Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e0a9ccd6-38f6-3d8b-b82a-72143fc17ace.roa
File:                     e0a9ccd6-38f6-3d8b-b82a-72143fc17ace.roa (raw, json)
Hash identifier:          soU+J+mnGgys0v4TognrpOC2f2UCHTbcRKPjbfNbeTg=
Subject key identifier:   1D:02:64:03:9A:41:8E:CD:1A:E7:83:97:12:BC:E5:43:73:86:7A:33
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823FAC70FFE5A3CCA423DB50
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e0a9ccd6-38f6-3d8b-b82a-72143fc17ace.roa
Signing time:             Mon 13 Oct 2025 14:11:05 +0000
ROA not before:           Mon 13 Oct 2025 14:11:05 +0000
ROA not after:            Sun 11 Jan 2026 15:11:05 +0000
asID:                     21433
IP address blocks:        144.36.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:ac:70:ff:e5:a3:cc:a4:23:db:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:11:05 2025 GMT
            Not After : Jan 11 15:11:05 2026 GMT
        Subject: CN=50582da6-c1e2-491f-91d3-1c96939763e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:17:4f:09:da:8a:4c:e0:ad:3b:a5:dc:2f:
                    f9:5f:a8:2e:ce:14:de:f6:f7:d6:65:91:e2:5e:bc:
                    a9:7b:f3:9e:d7:a1:a8:cd:70:6d:4e:cc:47:0a:27:
                    c8:46:e6:cc:2e:8b:5c:80:7a:cf:d9:29:b4:c4:67:
                    87:3a:51:01:cd:4a:a2:29:fa:b5:ad:42:08:65:d0:
                    ef:2b:20:23:16:8c:0b:b9:12:f4:f7:7b:db:7a:9c:
                    3a:d7:c5:13:ae:d5:60:e6:47:0c:03:1d:1f:7e:d9:
                    90:12:69:3d:88:a9:0e:94:b5:2a:c8:96:72:31:3f:
                    ad:b6:a9:f8:06:9f:a8:0e:33:6c:1a:ae:7f:74:5e:
                    fa:30:11:d0:fd:31:7d:56:a9:c2:67:85:f3:41:7c:
                    82:7b:0e:3e:a7:6e:53:7d:05:0f:b6:7f:ce:b6:d7:
                    82:19:0b:04:aa:66:69:91:01:18:44:11:e5:bc:23:
                    42:2d:16:4a:17:32:02:5e:3f:5a:27:47:49:5d:b5:
                    d7:c0:ad:9c:0f:ac:8a:a8:e8:61:fe:ff:53:74:00:
                    6a:7c:07:e1:ad:80:b6:67:1c:7c:a7:f8:3c:8e:c4:
                    0b:c2:93:fc:ab:ce:e9:15:23:e2:b5:d2:2d:7f:76:
                    15:ab:cb:fd:f2:4d:01:ca:c7:17:50:26:69:77:59:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:64:03:9A:41:8E:CD:1A:E7:83:97:12:BC:E5:43:73:86:7A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e0a9ccd6-38f6-3d8b-b82a-72143fc17ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:90:db:b1:bd:60:85:f9:8c:42:0c:35:c8:25:d2:6e:74:39:
         d4:91:ff:28:0a:58:5a:9c:ee:20:b2:a1:4e:51:f6:d8:a1:b6:
         23:e3:04:dc:33:64:dd:60:37:e2:6d:ed:e5:5f:a8:e9:d8:d1:
         27:df:e1:49:6f:9e:53:db:12:b9:3b:bf:20:d1:f8:37:08:04:
         a4:66:4e:d4:65:00:5b:18:c3:43:a9:63:99:92:70:d3:1b:5e:
         fb:00:b3:18:45:e0:c6:a5:2b:64:14:a1:d0:2f:0e:e7:29:f6:
         38:d4:14:35:06:47:f7:16:b1:11:c1:8e:37:ed:c0:c6:cf:34:
         34:03:83:3c:4e:d5:83:8a:05:6c:24:ae:37:53:66:8b:0a:33:
         99:c5:d4:76:87:bf:72:db:4a:a7:9d:cb:8e:44:6a:70:8b:fe:
         5c:25:47:90:b6:2e:a5:49:87:78:fc:52:24:ad:69:07:71:b5:
         cd:39:dc:d8:9b:5d:d5:f5:6d:cd:b2:b5:a6:2d:4b:f5:84:4a:
         5f:27:10:39:ad:ae:b6:e1:15:03:ef:74:37:fd:af:73:eb:39:
         47:29:2d:16:f3:c7:3d:5f:73:88:21:83:a1:b4:56:db:ee:dc:
         8b:dc:11:f5:b1:ad:27:c9:03:92:c2:f6:70:e7:19:ba:b3:f8:
         cd:83:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:22 2025 by rpki-client