Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa
File:                     13c7705c-5068-3193-a68c-a2e387dab614.roa (raw, json)
Hash identifier:          FVXFp9n7Nb7iFtiXgRIgV8DC7ZtDNZvy+LOZQcBsw/I=
Subject key identifier:   F4:1D:85:63:70:52:0A:1B:B7:36:04:7F:87:94:5C:D8:62:F1:C0:48
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F4328584CA5F6FD644679E2E4C9024F30
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     36329
IP address blocks:        199.36.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f6:fd:64:46:79:e2:e4:c9:02:4f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=f6c89756-181d-4193-af40-742d0d7fcabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:6b:c6:16:f1:6e:ff:7f:59:f3:60:7f:ca:
                    a8:c0:13:a5:8e:87:8b:ee:b5:a3:29:cc:f7:32:e5:
                    fb:6b:4c:9a:8a:a9:33:92:ae:20:f9:2b:77:87:27:
                    07:60:71:1b:c2:73:85:d7:2a:78:d8:5c:09:ad:85:
                    a5:27:c7:f3:d2:bc:cb:b5:95:cb:95:58:9c:25:46:
                    b3:ce:4c:92:30:da:eb:c8:a3:e7:97:14:00:cd:13:
                    28:13:45:0e:b8:81:9c:8b:0b:ab:2e:e9:ec:94:d7:
                    c1:64:1c:57:12:6f:85:d6:5f:08:87:21:7f:c5:75:
                    78:64:a4:7a:0f:42:7f:e3:0a:26:f4:7a:0e:03:54:
                    e0:ae:26:dc:e5:da:d5:eb:c6:83:33:72:9f:28:55:
                    7d:b5:d1:40:b9:ee:33:92:e1:4a:ff:ca:89:20:0b:
                    98:bd:8d:b6:c0:a2:82:09:97:ed:b4:74:a9:6d:a4:
                    94:41:81:be:b9:95:ca:4d:62:16:40:09:bc:c6:d1:
                    a9:bd:42:4f:16:c4:d2:02:c3:81:82:2f:2f:94:5a:
                    df:8d:03:e8:cb:97:eb:5f:28:c3:47:88:46:a4:d0:
                    44:a9:8f:af:59:4e:b1:58:51:c3:b3:fa:9e:ac:25:
                    6f:2a:81:1a:41:46:16:0b:eb:04:94:34:07:f4:6d:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:85:63:70:52:0A:1B:B7:36:04:7F:87:94:5C:D8:62:F1:C0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/13c7705c-5068-3193-a68c-a2e387dab614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:d0:a8:3b:50:bf:73:0e:87:34:e9:14:2f:45:ef:7e:25:
         5b:1c:b7:da:e0:ae:84:f8:55:89:55:3b:c6:32:ee:e1:41:ab:
         db:0e:ca:f0:fc:92:1f:ff:a4:93:db:04:5a:27:e8:99:81:c5:
         58:ac:94:f2:09:6e:6e:a3:41:e8:d6:52:08:1e:bf:b0:99:7c:
         81:53:b8:9d:98:1d:89:42:cf:47:0a:ef:d3:a1:3f:bf:24:ee:
         08:4f:ba:ec:71:84:7f:10:19:9f:e6:60:bc:f2:97:1a:20:db:
         0c:0e:cb:dc:f2:17:ae:aa:f9:bf:4b:6e:d2:4e:3a:07:47:df:
         19:93:01:15:07:52:c4:9e:40:83:63:31:1b:1a:14:74:16:0b:
         1c:a4:4b:de:b1:85:35:37:43:bb:aa:1f:4a:de:48:af:ca:ae:
         54:eb:a3:98:1c:9e:f0:ef:63:01:03:50:fa:42:38:8c:5d:de:
         08:06:27:8e:cb:7a:4e:d9:d6:b9:1e:1a:2d:dc:0d:4f:ef:ab:
         87:93:04:d2:0b:22:0b:7a:3d:5a:5b:cf:4d:37:06:9f:e6:de:
         5d:bd:59:1d:41:40:ff:9c:41:20:42:6e:76:f2:e9:2a:13:bd:
         2c:4c:f6:9e:a4:17:9a:bb:b2:7b:5e:11:40:43:bc:1a:9d:7b:
         ff:51:6d:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9v1kRnni5MkCTzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0
OTQwMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
ZjZjODk3NTYtMTgxZC00MTkzLWFmNDAtNzQyZDBkN2ZjYWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJdrxhbxbv9/WfNgf8qowBOljoeL7rWjKcz3
MuX7a0yaiqkzkq4g+St3hycHYHEbwnOF1yp42FwJrYWlJ8fz0rzLtZXLlVicJUaz
zkySMNrryKPnlxQAzRMoE0UOuIGciwurLunslNfBZBxXEm+F1l8IhyF/xXV4ZKR6
D0J/4wom9HoOA1Tgribc5drV68aDM3KfKFV9tdFAue4zkuFK/8qJIAuYvY22wKKC
CZfttHSpbaSUQYG+uZXKTWIWQAm8xtGpvUJPFsTSAsOBgi8vlFrfjQPoy5frXyjD
R4hGpNBEqY+vWU6xWFHDs/qerCVvKoEaQUYWC+sElDQH9G1glQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQdhWNwUgobtzYEf4eUXNhi8cBIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy
OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMTNjNzcwNWMtNTA2OC0z
MTkzLWE2OGMtYTJlMzg3ZGFiNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0
ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1
NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0
ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxySkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC280Kg7UL9zDoc06RQvRe9+JVsct9rgroT4VYlVO8Yy7uFBq9sOyvD8
kh//pJPbBFon6JmBxVislPIJbm6jQejWUggev7CZfIFTuJ2YHYlCz0cK79OhP78k
7ghPuuxxhH8QGZ/mYLzylxog2wwOy9zyF66q+b9LbtJOOgdH3xmTARUHUsSeQINj
MRsaFHQWCxykS96xhTU3Q7uqH0reSK/KrlTro5gcnvDvYwEDUPpCOIxd3ggGJ47L
ek7Z1rkeGi3cDU/vq4eTBNILIgt6PVpbz003Bp/m3l29WR1BQP+cQSBCbnby6SoT
vSxM9p6kF5q7snteEUBDvBqde/9RbZI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:19 2026 by rpki-client