Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bfdb70e-64d9-3d64-a3f7-ff30a4aca25b.roa
File:                     2bfdb70e-64d9-3d64-a3f7-ff30a4aca25b.roa (raw, json)
Hash identifier:          1olGdtciUuMl4uQusDeHB4KapXDOBS0Lq1WGCzrNAfk=
Subject key identifier:   5C:13:2A:80:FC:08:D9:EE:E6:42:7E:17:63:AD:30:1D:FC:B5:D8:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78BC14B2633330FF878BA70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bfdb70e-64d9-3d64-a3f7-ff30a4aca25b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        68.53.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:c1:4b:26:33:33:0f:f8:78:ba:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6ba2edb3-1b64-4f97-9bd7-e74ccdd66c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:23:ce:0d:45:fa:e9:43:8d:8b:e5:5c:2a:
                    65:02:69:97:5e:eb:21:f2:1f:7a:26:ee:cf:ed:9f:
                    f2:5e:23:6e:10:f1:12:f8:fa:5f:49:c6:a7:60:f7:
                    99:20:62:04:d1:a1:f5:60:34:3d:80:e2:e7:d0:cb:
                    5e:bf:b7:19:15:dc:3b:9f:2a:a3:4e:62:99:52:99:
                    3e:87:61:d7:85:2f:54:7b:3d:89:b4:f5:d4:55:22:
                    a3:c6:53:00:72:4b:0e:32:cd:d6:8d:cb:19:8b:a1:
                    1e:6e:01:b6:22:7b:8d:57:71:9e:b8:e1:75:83:3f:
                    0e:e5:8a:db:cc:e1:07:6b:6e:86:4f:ad:8f:79:eb:
                    cc:f6:a7:be:ad:71:ac:9c:0e:9f:1a:a5:7a:42:17:
                    e8:a5:2c:eb:05:64:2a:ef:5e:b5:8b:cd:7a:cd:c3:
                    73:c2:a2:bc:66:ec:54:9c:ef:8d:4f:cc:4f:b6:c3:
                    17:09:9b:2c:53:65:7a:82:df:89:74:ae:a4:26:0a:
                    c8:18:86:af:d2:47:c8:99:39:fc:83:5f:94:d2:9e:
                    0c:15:c4:aa:61:02:95:56:91:74:b2:c2:21:b6:87:
                    98:fb:09:ff:f9:83:9f:0c:0a:57:6e:b9:94:3e:8c:
                    3e:e5:16:52:19:65:3f:18:58:92:7d:7a:83:7c:50:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:13:2A:80:FC:08:D9:EE:E6:42:7E:17:63:AD:30:1D:FC:B5:D8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bfdb70e-64d9-3d64-a3f7-ff30a4aca25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:47:cb:d0:42:0c:c7:80:ff:cd:4a:a9:60:4a:33:ab:ae:bc:
         6f:a8:9d:1e:c2:c7:78:e8:2e:f2:79:bb:e1:b7:8f:c2:e6:8e:
         c8:b0:f0:f6:47:ee:4b:3f:95:d5:d1:db:5a:3e:f1:7c:e4:bd:
         4a:64:18:b4:ec:1e:9c:fc:ce:b7:07:aa:72:a9:a0:43:ed:bf:
         29:f0:34:f2:89:91:58:42:4a:f0:ad:b2:12:34:0e:5b:f8:3a:
         04:be:a5:69:4e:07:75:35:81:e2:00:e7:da:c4:05:34:55:5c:
         c4:07:40:16:9e:62:c6:61:43:9e:9e:f8:52:5e:c9:f9:48:97:
         d5:78:d3:f5:99:73:57:b4:b1:d5:e6:31:eb:45:35:e8:9d:69:
         b4:9f:7e:67:c9:a5:89:ff:34:ae:dc:cb:2d:42:f9:37:51:a4:
         3d:1f:61:73:3b:22:4b:a2:30:b2:e4:11:8f:48:66:c7:63:9c:
         53:b4:46:70:3e:bc:0d:b8:d7:bb:1c:a4:c2:c4:2f:44:57:b0:
         41:32:fc:4f:34:40:fa:c9:28:e3:85:4a:09:73:02:4e:46:8c:
         36:f8:b1:a1:14:48:68:74:15:4b:74:40:1c:e2:55:6f:3c:20:
         cf:c9:1d:86:66:dd:3a:14:85:5a:83:0e:fd:d6:da:da:87:f5:
         27:b0:05:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni8FLJjMzD/h4unAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmJhMmVkYjMtMWI2NC00Zjk3LTliZDctZTc0Y2NkZDY2YzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Yjzg1F+ulDjYvlXCplAmmXXush8h96Ju7P
7Z/yXiNuEPES+PpfScanYPeZIGIE0aH1YDQ9gOLn0Mtev7cZFdw7nyqjTmKZUpk+
h2HXhS9Uez2JtPXUVSKjxlMAcksOMs3WjcsZi6EebgG2InuNV3GeuOF1gz8O5Yrb
zOEHa26GT62PeevM9qe+rXGsnA6fGqV6QhfopSzrBWQq7161i816zcNzwqK8ZuxU
nO+NT8xPtsMXCZssU2V6gt+JdK6kJgrIGIav0kfImTn8g1+U0p4MFcSqYQKVVpF0
ssIhtoeY+wn/+YOfDApXbrmUPow+5RZSGWU/GFiSfXqDfFDdnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwTKoD8CNnu5kJ+F2OtMB38tdiCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmJmZGI3MGUtNjRkOS0z
ZDY0LWEzZjctZmYzMGE0YWNhMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZHy9BCDMeA/81KqWBKM6uuvG+onR7Cx3joLvJ5u+G3j8Lmjsiw8PZH
7ks/ldXR21o+8XzkvUpkGLTsHpz8zrcHqnKpoEPtvynwNPKJkVhCSvCtshI0Dlv4
OgS+pWlOB3U1geIA59rEBTRVXMQHQBaeYsZhQ56e+FJeyflIl9V40/WZc1e0sdXm
MetFNeidabSffmfJpYn/NK7cyy1C+TdRpD0fYXM7IkuiMLLkEY9IZsdjnFO0RnA+
vA2417scpMLEL0RXsEEy/E80QPrJKOOFSglzAk5GjDb4saEUSGh0FUt0QBziVW88
IM/JHYZm3ToUhVqDDv3W2tqH9SewBSY=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:54:13 2026 by rpki-client