Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/027465d6-4d9b-303d-a720-0f744144d48a.roa
File:                     027465d6-4d9b-303d-a720-0f744144d48a.roa (raw, json)
Hash identifier:          uTDi9Vju3ifwprSM4S2XTFIb8sO3PV3qZqTVy7hnG/U=
Subject key identifier:   94:76:29:FA:5E:5B:9B:F7:EC:B2:5B:61:13:2D:D8:09:E8:12:65:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86305AE2970D8CFA6FE25E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/027465d6-4d9b-303d-a720-0f744144d48a.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        76.143.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:05:ae:29:70:d8:cf:a6:fe:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=0a40b4f1-bc35-463c-9b8e-728507c4e7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:ae:e8:c1:3e:45:fa:b1:62:96:82:2d:1d:
                    69:7f:8b:7e:6e:c5:8e:d5:06:5f:67:89:b3:69:43:
                    f9:c9:e7:80:80:c1:dd:96:49:3a:6a:9a:29:60:16:
                    6d:88:b2:3b:2b:55:5b:dd:78:12:5a:54:2d:38:cd:
                    02:d1:85:41:84:cd:e7:2a:3e:c8:e9:e2:1c:60:8b:
                    cb:bf:ca:43:f4:ad:da:6d:29:a8:84:c4:27:fb:48:
                    83:fd:b5:22:c0:86:37:72:a0:ea:1c:fe:45:60:90:
                    f6:4c:4e:3e:a0:6e:8f:86:0f:43:ef:28:20:1f:f5:
                    c7:b6:2f:7e:0c:e3:4c:3b:a3:b8:71:03:21:1a:bb:
                    bd:e7:2e:48:7f:1b:2d:29:65:cb:fe:31:9e:b8:5e:
                    6e:b6:22:bf:8b:e0:bb:78:a7:2c:72:a9:b4:c5:71:
                    8c:aa:cc:e1:8a:50:b3:26:e1:08:25:ec:a0:bc:a6:
                    41:a6:f2:34:61:5e:6a:8e:2d:ff:28:d4:ed:e6:b5:
                    9a:07:df:ec:30:1b:c8:53:37:6a:64:e8:fc:65:ea:
                    16:ac:7c:89:f2:84:9e:ac:b0:e3:73:5a:5c:54:42:
                    d2:ae:1a:a7:49:49:98:b0:f6:92:50:ed:9d:30:7a:
                    de:32:de:c0:a0:fb:cd:d8:52:6e:aa:4b:7f:5e:87:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:76:29:FA:5E:5B:9B:F7:EC:B2:5B:61:13:2D:D8:09:E8:12:65:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/027465d6-4d9b-303d-a720-0f744144d48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:37:7a:5e:e8:db:28:a5:17:66:d6:51:98:6e:f6:5e:45:07:
         85:66:db:21:5d:54:24:37:9e:d0:59:af:c1:20:c1:ef:bf:96:
         4a:d9:95:16:5b:bc:c5:bb:c2:66:cd:df:fa:63:b4:48:b2:64:
         de:f7:12:dd:24:71:09:04:06:fb:a1:f4:34:d8:c8:7e:6f:da:
         aa:1f:08:a8:e9:83:7f:0b:e9:0f:57:3e:71:f4:aa:78:cc:44:
         ef:2c:f3:45:71:a0:86:ed:18:fd:9e:53:8e:bd:47:3e:43:d7:
         fa:44:48:28:5e:21:ab:1d:8d:5d:ff:f7:69:d9:be:b8:45:87:
         95:f7:b9:43:8d:de:49:35:1f:fb:6a:1f:f9:1e:e9:7d:dd:75:
         52:e1:97:1c:26:54:9c:55:e9:88:fc:cb:b0:aa:fd:0a:31:fd:
         d2:16:53:e9:78:95:19:38:2d:74:33:23:0c:7a:b1:cf:46:e0:
         72:f1:ab:18:65:eb:66:a4:3a:8a:23:a7:e7:4d:3a:98:76:b4:
         5f:0f:5e:33:b6:e5:c5:83:7a:88:04:83:88:77:c4:05:8d:2c:
         6d:70:de:9d:51:67:f7:d6:63:64:84:d7:80:de:ae:f9:7c:1a:
         6c:33:89:95:d3:f4:2d:28:3f:a3:42:31:b8:d2:e3:df:6e:d0:
         c4:46:4a:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYwWuKXDYz6b+JeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MGE0MGI0ZjEtYmMzNS00NjNjLTliOGUtNzI4NTA3YzRlN2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopGu6ME+RfqxYpaCLR1pf4t+bsWO1QZfZ4mz
aUP5yeeAgMHdlkk6apopYBZtiLI7K1Vb3XgSWlQtOM0C0YVBhM3nKj7I6eIcYIvL
v8pD9K3abSmohMQn+0iD/bUiwIY3cqDqHP5FYJD2TE4+oG6Phg9D7yggH/XHti9+
DONMO6O4cQMhGru95y5IfxstKWXL/jGeuF5utiK/i+C7eKcscqm0xXGMqszhilCz
JuEIJeygvKZBpvI0YV5qji3/KNTt5rWaB9/sMBvIUzdqZOj8ZeoWrHyJ8oSerLDj
c1pcVELSrhqnSUmYsPaSUO2dMHreMt7AoPvN2FJuqkt/XocywwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJR2KfpeW5v37LJbYRMt2AnoEmXXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDI3NDY1ZDYtNGQ5Yi0z
MDNkLWE3MjAtMGY3NDQxNDRkNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTI/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY3el7o2yilF2bWUZhu9l5FB4Vm2yFdVCQ3ntBZr8Egwe+/lkrZlRZb
vMW7wmbN3/pjtEiyZN73Et0kcQkEBvuh9DTYyH5v2qofCKjpg38L6Q9XPnH0qnjM
RO8s80VxoIbtGP2eU469Rz5D1/pESCheIasdjV3/92nZvrhFh5X3uUON3kk1H/tq
H/ke6X3ddVLhlxwmVJxV6Yj8y7Cq/Qox/dIWU+l4lRk4LXQzIwx6sc9G4HLxqxhl
62akOoojp+dNOph2tF8PXjO25cWDeogEg4h3xAWNLG1w3p1RZ/fWY2SE14Dervl8
GmwziZXT9C0oP6NCMbjS499u0MRGSuk=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:21:34 2026 by rpki-client