Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4376b126-e942-3eb2-9857-224c1bba6992.roa
File:                     4376b126-e942-3eb2-9857-224c1bba6992.roa (raw, json)
Hash identifier:          Q3xZ29Tmt2ZrVagZdebGoz0gRZkJcKj0bUbaGM8YQ8A=
Subject key identifier:   EB:76:BA:B3:88:D2:2B:0C:9E:A5:FC:5F:35:D0:78:FD:72:C0:27:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B52A734AB09CEB8D220922F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4376b126-e942-3eb2-9857-224c1bba6992.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        71.201.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:34:ab:09:ce:b8:d2:20:92:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=4140bd0b-3830-489d-864b-b24c8fccae6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:2a:ac:78:e4:ed:7d:23:59:b8:7a:fa:10:
                    39:c8:f2:4b:f9:b9:b9:aa:58:58:2d:18:d6:db:c0:
                    b8:d2:4a:8b:b0:d9:1a:42:4f:b9:21:36:0a:d5:c6:
                    8d:2b:05:13:2d:f7:94:74:99:36:1c:47:11:c5:9e:
                    90:f1:93:17:94:46:0a:ba:c6:89:06:1b:f5:9a:61:
                    e4:f4:e2:bd:6e:a6:30:88:a9:27:ec:f1:af:51:01:
                    64:bd:64:3d:6f:ea:25:6a:28:af:dc:e3:cf:49:3f:
                    e7:1a:78:f8:34:b6:75:99:5c:70:fd:aa:fa:45:c4:
                    0c:ae:be:28:76:a5:e5:de:fe:b6:34:be:1c:c5:0a:
                    1c:29:a3:d4:47:ef:d4:fd:9a:ea:96:de:40:b7:e6:
                    2e:86:50:af:e4:95:a0:3a:e9:d0:0b:b6:6c:b5:70:
                    d2:52:47:b3:09:eb:47:f0:38:d6:6b:24:a5:e6:7e:
                    6c:15:c5:56:21:90:fd:ec:43:40:0c:19:be:06:a9:
                    51:4c:41:84:97:32:fb:1f:3b:5d:c1:a2:30:8e:a0:
                    7e:a5:f2:a2:48:35:00:0e:c4:5a:a1:d4:ef:3a:76:
                    95:f9:e1:40:7b:55:ed:01:a5:19:eb:d2:00:76:64:
                    d1:79:1a:94:ab:47:90:ed:27:58:5a:91:15:27:08:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:76:BA:B3:88:D2:2B:0C:9E:A5:FC:5F:35:D0:78:FD:72:C0:27:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4376b126-e942-3eb2-9857-224c1bba6992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.201.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:be:d1:36:ca:eb:78:b3:9f:48:5e:e7:96:10:c7:35:8b:
         67:93:0e:d9:3b:ed:3f:f4:43:9f:91:90:6c:71:b0:8f:c4:bb:
         26:08:ba:7d:e7:96:8f:32:3c:83:6c:45:a3:62:a1:14:3e:53:
         a1:8f:d2:3d:38:8c:75:82:70:93:cb:17:7c:f8:a8:a2:40:5a:
         a8:8c:b6:86:91:8f:14:6e:0d:63:d5:e1:e0:eb:00:93:2a:f9:
         62:2e:80:37:07:77:14:7c:cc:1c:18:e6:20:ac:9f:18:a3:96:
         19:30:83:ce:b5:34:40:60:26:4a:0e:f3:29:82:e9:b5:0f:65:
         94:dd:8e:6e:62:39:71:b0:bc:e3:83:8c:b6:f0:99:ab:47:58:
         4c:42:04:38:24:b6:28:3d:95:ea:80:9e:b5:c2:66:a9:59:2a:
         c8:9b:dd:fc:00:14:f7:af:ea:ad:c6:dc:35:47:94:87:ec:bb:
         c6:fb:82:95:71:2b:a9:45:55:f8:92:0a:4d:88:ba:4b:99:01:
         82:83:65:5c:e2:9b:38:e8:99:e4:ef:41:99:e9:45:fa:de:75:
         a7:e0:cb:2d:23:c8:ed:aa:cf:46:e8:2e:f7:ce:15:92:64:df:
         ab:d4:29:84:89:34:7b:b3:e5:39:36:48:f4:64:64:72:f3:52:
         f6:e8:01:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzSrCc640iCSLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
NDE0MGJkMGItMzgzMC00ODlkLTg2NGItYjI0YzhmY2NhZTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0UqrHjk7X0jWbh6+hA5yPJL+bm5qlhYLRjW
28C40kqLsNkaQk+5ITYK1caNKwUTLfeUdJk2HEcRxZ6Q8ZMXlEYKusaJBhv1mmHk
9OK9bqYwiKkn7PGvUQFkvWQ9b+olaiiv3OPPST/nGnj4NLZ1mVxw/ar6RcQMrr4o
dqXl3v62NL4cxQocKaPUR+/U/Zrqlt5At+YuhlCv5JWgOunQC7ZstXDSUkezCetH
8DjWaySl5n5sFcVWIZD97ENADBm+BqlRTEGElzL7HztdwaIwjqB+pfKiSDUADsRa
odTvOnaV+eFAe1XtAaUZ69IAdmTReRqUq0eQ7SdYWpEVJwhTcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOt2urOI0isMnqX8XzXQeP1ywCcYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM3NmIxMjYtZTk0Mi0z
ZWIyLTk4NTctMjI0YzFiYmE2OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8kkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuevtE2yut4s59IXueWEMc1i2eTDtk77T/0Q5+RkGxxsI/EuyYIun3n
lo8yPINsRaNioRQ+U6GP0j04jHWCcJPLF3z4qKJAWqiMtoaRjxRuDWPV4eDrAJMq
+WIugDcHdxR8zBwY5iCsnxijlhkwg861NEBgJkoO8ymC6bUPZZTdjm5iOXGwvOOD
jLbwmatHWExCBDgktig9leqAnrXCZqlZKsib3fwAFPev6q3G3DVHlIfsu8b7gpVx
K6lFVfiSCk2IukuZAYKDZVzimzjomeTvQZnpRfredafgyy0jyO2qz0boLvfOFZJk
36vUKYSJNHuz5Tk2SPRkZHLzUvboAfo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:59 2025 by rpki-client