Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/576f9933-f500-3322-be8f-527b7af2e8fb.roa
File:                     576f9933-f500-3322-be8f-527b7af2e8fb.roa (raw, json)
Hash identifier:          pK+JFJAIxYqweH8euwJYV5pcwjzzeLGGztOl2Bg3cXY=
Subject key identifier:   40:81:4F:32:14:88:D1:5E:9B:4D:8A:FD:AD:F4:75:13:82:5E:3C:64
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584A9FFBADE39216EA5708108F00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/576f9933-f500-3322-be8f-527b7af2e8fb.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     21433
IP address blocks:        144.36.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ad:e3:92:16:ea:57:08:10:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=94e062fd-71e3-4d53-9f5c-a6ab622375ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:51:15:31:95:90:1c:cf:fb:0d:d9:ca:90:bb:
                    95:b9:b8:f2:89:cf:e5:d9:74:62:8e:42:02:46:b8:
                    7b:96:61:65:5a:ab:5e:6e:ed:01:c8:53:de:1a:8a:
                    02:29:4d:5e:24:15:12:db:f4:47:40:8f:01:c1:34:
                    39:33:e0:34:75:c7:f4:6d:67:c5:c1:00:92:b6:2b:
                    e1:36:90:d7:a0:f5:59:e3:77:90:d1:4c:d0:0e:19:
                    f2:18:79:5a:87:56:3d:b1:af:a4:f5:9a:30:92:09:
                    a0:73:08:f0:ef:c7:57:ee:3f:2e:28:aa:6f:80:28:
                    dc:40:a4:8c:68:22:26:18:e5:fb:3f:f7:1c:46:8f:
                    10:ad:80:6a:c7:c8:dd:32:25:f9:6f:07:71:60:6c:
                    bc:2c:29:02:59:68:02:68:69:f4:71:e1:27:26:93:
                    d6:f0:19:e7:5c:d3:a5:dc:2d:a1:04:a9:d6:d1:ff:
                    eb:7f:05:23:e6:ec:ef:56:b6:8a:cb:60:17:c7:8d:
                    60:b3:07:c1:c1:1c:3b:03:fa:ac:fe:9c:69:c8:c8:
                    9d:7a:c7:bb:e7:9c:b0:82:39:e3:92:b4:e9:cc:ae:
                    95:d9:18:fc:10:9b:a3:72:e8:aa:d2:20:17:f8:9e:
                    e2:80:8d:9c:50:20:7f:cf:35:a0:62:11:96:08:05:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:81:4F:32:14:88:D1:5E:9B:4D:8A:FD:AD:F4:75:13:82:5E:3C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/576f9933-f500-3322-be8f-527b7af2e8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.36.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:cf:4c:37:e3:ab:05:14:69:a1:cc:99:66:be:f7:c1:f1:
         7d:13:a3:f0:68:f9:86:4a:c2:30:ff:31:8f:99:11:df:0f:f8:
         8f:55:03:2b:a1:02:b1:97:64:5d:70:00:bc:7b:83:95:fb:6b:
         0d:2b:ea:05:3d:7e:e7:87:83:a0:2a:43:3c:19:ca:db:4c:85:
         47:f1:5e:4d:0a:e4:82:97:0c:26:01:67:d7:44:db:62:72:d7:
         a4:eb:77:35:b2:6b:bc:a3:83:9a:1f:84:af:eb:50:82:fc:83:
         4f:1b:6c:28:3f:e1:92:65:9f:e4:9f:5d:18:3f:bb:16:aa:62:
         09:0d:cc:1b:30:e5:f8:6b:89:c1:a9:a1:10:8c:0c:d8:53:05:
         66:95:a3:f4:f3:45:32:99:0f:5a:1a:3f:50:44:08:ab:eb:6a:
         f6:90:32:ec:92:13:0b:81:db:5a:23:02:f0:c0:6a:a1:b7:f4:
         ee:ac:2b:61:f0:58:12:4f:8f:bc:5b:da:e1:54:fa:d2:b8:5e:
         14:03:d5:de:ec:fc:fe:41:41:15:c3:f5:98:2a:98:8e:18:0d:
         f5:6f:ab:28:28:69:ac:a1:28:de:3c:84:ca:03:df:2d:d1:3c:
         5a:4d:29:6b:18:d7:0e:19:ea:c0:9b:4c:31:dd:a3:e4:6a:b2:
         d6:71:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:17 2025 by rpki-client