Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/26992cee-3ef7-3ebb-8279-e0ce44199056.roa
File:                     26992cee-3ef7-3ebb-8279-e0ce44199056.roa (raw, json)
Hash identifier:          LxvFgaFRLW7xOipzQoFWBApHKdlXW3zLovfs9IeQ3Cc=
Subject key identifier:   4D:0D:3A:DF:5C:48:2C:78:86:83:47:E6:8D:33:01:61:90:FC:C4:FE
Certificate issuer:       /CN=95a731d9-eb7e-4c0b-80ba-9386b5efaec7
Certificate serial:       010D0C9F4328584ABC1E5066EFD0ABC2057B4110
Authority key identifier: F3:C5:4B:EB:71:B9:05:68:38:78:4B:2E:37:CC:29:CE:58:A0:65:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/26992cee-3ef7-3ebb-8279-e0ce44199056.roa
Signing time:             Mon 30 Jun 2025 18:01:10 +0000
ROA not before:           Mon 30 Jun 2025 18:01:10 +0000
ROA not after:            Sun 28 Sep 2025 18:01:10 +0000
asID:                     214432
IP address blocks:        45.41.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bc:1e:50:66:ef:d0:ab:c2:05:7b:41:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a731d9-eb7e-4c0b-80ba-9386b5efaec7
        Validity
            Not Before: Jun 30 18:01:10 2025 GMT
            Not After : Sep 28 18:01:10 2025 GMT
        Subject: CN=0febfec1-4441-465a-8e99-f69b2f15b469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:31:97:21:1b:2f:e0:c9:b6:66:f8:6d:52:
                    16:7a:76:32:b0:f0:b7:4a:c1:ac:6b:c2:6e:13:af:
                    7d:cc:a4:77:4c:a3:7b:bd:bd:d8:27:a2:d2:d6:d1:
                    b9:9c:2d:88:f2:8b:b7:e8:dc:51:51:f0:2a:41:b4:
                    37:86:2d:1a:84:a4:b8:f9:a0:fe:91:f9:e8:22:7a:
                    44:b2:41:14:10:10:fb:a8:fa:be:14:d6:32:88:53:
                    0f:d0:6d:44:df:d2:8f:4a:a7:a9:2c:b7:90:80:49:
                    8f:ec:05:22:02:d8:de:bf:7d:6f:7e:be:87:80:08:
                    37:18:07:88:1c:b4:62:9a:41:4f:71:1f:b1:c2:94:
                    ad:d2:a1:e2:82:eb:a5:e5:f9:25:80:7f:cb:d1:ea:
                    02:90:5d:23:ad:ae:12:e7:9f:29:3d:e0:0d:32:40:
                    86:ad:6e:fb:db:ac:01:f7:07:45:03:95:17:44:dd:
                    65:68:75:aa:af:26:ae:d5:44:d3:de:d4:be:bd:34:
                    08:89:89:2f:2e:17:59:a6:bb:a6:a6:db:39:60:e9:
                    41:c5:67:d9:9a:0c:31:d6:62:99:52:25:b1:43:40:
                    35:7a:4f:d9:34:19:19:9a:a8:c5:03:c2:42:ac:80:
                    1d:fe:f4:0c:58:f0:6d:67:46:75:15:bd:fb:85:e5:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0D:3A:DF:5C:48:2C:78:86:83:47:E6:8D:33:01:61:90:FC:C4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/26992cee-3ef7-3ebb-8279-e0ce44199056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C5:4B:EB:71:B9:05:68:38:78:4B:2E:37:CC:29:CE:58:A0:65:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95a731d9-eb7e-4c0b-80ba-9386b5efaec7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:78:0a:87:f1:30:94:f7:51:35:68:eb:ee:71:f3:ab:ab:2b:
         f8:80:dc:bf:f1:e7:37:a7:93:68:10:44:f1:48:fb:8e:65:0d:
         8f:16:43:d9:ed:1a:e3:b4:73:cc:37:be:e4:ac:6a:ea:ec:bb:
         c9:ca:04:ec:60:49:a3:71:8c:ba:95:f9:2e:2b:cf:e4:ca:4f:
         2d:a9:bb:6c:01:f7:eb:65:bb:4d:85:05:c5:05:e2:2b:7e:16:
         ed:b2:17:f8:3d:47:eb:53:85:15:43:3b:86:6e:5f:08:c6:c8:
         4c:58:23:9f:e1:3a:fb:a0:70:d0:03:e2:03:59:91:7d:fe:37:
         af:ee:c9:d3:27:5d:d8:99:2a:cf:84:0f:a0:8b:5e:18:f9:4a:
         b3:65:b0:07:0c:a5:84:c6:07:0e:d3:9b:e2:28:9d:10:d5:dd:
         94:c7:48:88:27:e7:1b:a7:e6:97:2d:80:98:91:fc:88:e1:1c:
         2b:5f:db:86:56:3c:a3:17:b0:9e:8a:87:78:c3:ae:62:2d:f8:
         6a:b8:0a:67:71:d8:1b:18:de:ba:61:37:e1:12:95:ef:bb:2f:
         df:a2:a4:dd:88:c8:84:f8:77:63:63:cd:2c:c9:ce:cb:0a:83:
         ce:da:b8:be:c4:d1:0b:49:8b:96:9c:11:54:ae:ca:9c:7b:d3:
         f7:8c:44:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq8HlBm79CrwgV7QRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNzMxZDktZWI3ZS00YzBiLTgwYmEtOTM4NmI1ZWZh
ZWM3MB4XDTI1MDYzMDE4MDExMFoXDTI1MDkyODE4MDExMFowLzEtMCsGA1UEAxMk
MGZlYmZlYzEtNDQ0MS00NjVhLThlOTktZjY5YjJmMTViNDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpcxlyEbL+DJtmb4bVIWenYysPC3SsGsa8Ju
E699zKR3TKN7vb3YJ6LS1tG5nC2I8ou36NxRUfAqQbQ3hi0ahKS4+aD+kfnoInpE
skEUEBD7qPq+FNYyiFMP0G1E39KPSqepLLeQgEmP7AUiAtjev31vfr6HgAg3GAeI
HLRimkFPcR+xwpSt0qHiguul5fklgH/L0eoCkF0jra4S558pPeANMkCGrW7726wB
9wdFA5UXRN1laHWqryau1UTT3tS+vTQIiYkvLhdZprumpts5YOlBxWfZmgwx1mKZ
UiWxQ0A1ek/ZNBkZmqjFA8JCrIAd/vQMWPBtZ0Z1Fb37heXUJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0NOt9cSCx4hoNH5o0zAWGQ/MT+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NWE3
MzFkOS1lYjdlLTRjMGItODBiYS05Mzg2YjVlZmFlYzcvMjY5OTJjZWUtM2VmNy0z
ZWJiLTgyNzktZTBjZTQ0MTk5MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTVhNzMxZDktZWI3ZS00YzBiLTgw
YmEtOTM4NmI1ZWZhZWM3Lzk1YTczMWQ5LWViN2UtNGMwYi04MGJhLTkzODZiNWVm
YWVjNy5jcmwwHwYDVR0jBBgwFoAU88VL63G5BWg4eEsuN8wpzligZUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy85NWE3MzFkOS1lYjdlLTRjMGItODBiYS05Mzg2
YjVlZmFlYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLSkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZ4CofxMJT3UTVo6+5x86urK/iA3L/x5zenk2gQRPFI+45lDY8WQ9nt
GuO0c8w3vuSsaursu8nKBOxgSaNxjLqV+S4rz+TKTy2pu2wB9+tlu02FBcUF4it+
Fu2yF/g9R+tThRVDO4ZuXwjGyExYI5/hOvugcNAD4gNZkX3+N6/uydMnXdiZKs+E
D6CLXhj5SrNlsAcMpYTGBw7Tm+IonRDV3ZTHSIgn5xun5pctgJiR/IjhHCtf24ZW
PKMXsJ6Kh3jDrmIt+Gq4Cmdx2BsY3rphN+ESle+7L9+ipN2IyIT4d2NjzSzJzssK
g87auL7E0QtJi5acEVSuypx70/eMREo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:31 2025 by rpki-client