Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55ed6144-5409-36ff-abe6-7d7730c40801.roa
File:                     55ed6144-5409-36ff-abe6-7d7730c40801.roa (raw, json)
Hash identifier:          jV1f7oROH2vdW6EiZszCHx8p/mRa8QzfnncXaktwq98=
Subject key identifier:   76:8E:E0:9A:15:09:A1:71:63:3F:DE:45:78:E7:FC:66:F5:1D:B9:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980E82B3FE5582A25BF1F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55ed6144-5409-36ff-abe6-7d7730c40801.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        174.62.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:e8:2b:3f:e5:58:2a:25:bf:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e9d68b94-0bd0-41f3-83cc-60398e7a6361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0d:f8:c4:a2:7a:7f:63:eb:3c:41:87:07:f6:
                    0c:91:e6:a7:80:7e:0f:41:98:1e:c4:79:07:45:cf:
                    24:51:e3:06:db:14:ad:a9:09:60:27:dd:be:6b:b8:
                    2d:a4:12:f8:65:97:e5:c7:5c:12:63:b7:b1:1a:ab:
                    5a:0b:a4:ff:6f:67:4f:51:2e:2f:fb:88:53:19:f7:
                    42:aa:c2:22:9b:83:55:50:4f:59:d5:0c:75:43:d9:
                    9e:e7:10:c4:4d:ed:c5:cb:4e:11:0b:f7:1e:49:00:
                    49:79:04:01:fe:22:cb:14:60:a8:05:8b:15:45:fc:
                    bc:5b:7b:fe:19:29:1d:29:68:37:b3:ba:53:06:5c:
                    cc:ab:22:b4:02:76:80:65:cb:7d:d7:21:74:26:02:
                    ea:4a:d1:fd:c2:09:04:c3:31:98:df:bb:b0:5c:92:
                    6e:3d:6f:7a:85:c3:ef:ba:94:20:32:d8:24:87:84:
                    f7:69:c8:48:12:38:a3:24:ea:38:4e:40:02:dd:25:
                    32:8a:4f:a6:31:7e:64:9f:48:e2:87:1c:28:8c:80:
                    56:25:33:b0:7b:88:22:65:50:56:ec:88:e7:61:5f:
                    cc:bf:19:58:44:3a:aa:70:00:1d:fc:bd:b6:00:9e:
                    66:f5:a2:87:db:14:63:83:98:84:04:89:51:51:a6:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8E:E0:9A:15:09:A1:71:63:3F:DE:45:78:E7:FC:66:F5:1D:B9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55ed6144-5409-36ff-abe6-7d7730c40801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9e:71:ee:6c:f1:01:f8:ec:2d:a1:8b:ac:eb:61:b9:02:de:
         d5:2b:63:a9:41:20:e7:75:0f:55:8a:eb:9e:30:20:26:6e:f0:
         de:28:b5:c5:7b:ac:de:b1:95:f5:69:f6:f3:41:d0:02:ce:e2:
         f9:f7:81:13:6b:7f:13:f9:7c:71:34:63:3e:9b:b9:e5:d7:98:
         f5:d9:87:bb:c5:8c:50:36:0b:38:4c:c2:99:cb:a8:e6:a3:29:
         b3:81:d4:ac:56:af:a6:b1:56:dd:96:88:fd:f0:83:f3:b4:ba:
         86:e1:02:96:1c:b9:3d:8d:2a:07:69:6a:99:97:f5:ab:db:66:
         20:d0:e7:9a:79:8c:3b:91:2a:ab:74:1e:fb:1c:69:fa:b3:25:
         82:bc:11:43:29:40:66:c4:a5:31:5b:f9:4c:b2:8c:1b:e0:f2:
         85:81:20:1d:a0:cd:e4:f5:12:e1:1c:3e:38:59:0e:46:de:da:
         47:3f:12:e9:ec:99:1e:4f:43:ac:f0:85:61:1e:1f:aa:57:de:
         90:f4:37:f1:05:82:2d:07:d9:b1:11:5b:04:2e:34:13:34:5f:
         77:57:f6:25:17:4e:1c:32:a9:8f:b0:ef:25:e7:85:f5:95:23:
         ba:7e:93:a0:af:91:fa:a1:40:ed:1e:6f:5a:ce:65:b7:6e:62:
         1b:01:14:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgOgrP+VYKiW/HwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTlkNjhiOTQtMGJkMC00MWYzLTgzY2MtNjAzOThlN2E2MzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg34xKJ6f2PrPEGHB/YMkeangH4PQZgexHkH
Rc8kUeMG2xStqQlgJ92+a7gtpBL4ZZflx1wSY7exGqtaC6T/b2dPUS4v+4hTGfdC
qsIim4NVUE9Z1Qx1Q9me5xDETe3Fy04RC/ceSQBJeQQB/iLLFGCoBYsVRfy8W3v+
GSkdKWg3s7pTBlzMqyK0AnaAZct91yF0JgLqStH9wgkEwzGY37uwXJJuPW96hcPv
upQgMtgkh4T3achIEjijJOo4TkAC3SUyik+mMX5kn0jihxwojIBWJTOwe4giZVBW
7IjnYV/MvxlYRDqqcAAd/L22AJ5m9aKH2xRjg5iEBIlRUabNNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHaO4JoVCaFxYz/eRXjn/Gb1HbkpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTVlZDYxNDQtNTQwOS0z
NmZmLWFiZTYtN2Q3NzMwYzQwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrj5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2ece5s8QH47C2hi6zrYbkC3tUrY6lBIOd1D1WK654wICZu8N4otcV7
rN6xlfVp9vNB0ALO4vn3gRNrfxP5fHE0Yz6bueXXmPXZh7vFjFA2CzhMwpnLqOaj
KbOB1KxWr6axVt2WiP3wg/O0uobhApYcuT2NKgdpapmX9avbZiDQ55p5jDuRKqt0
HvscafqzJYK8EUMpQGbEpTFb+UyyjBvg8oWBIB2gzeT1EuEcPjhZDkbe2kc/Euns
mR5PQ6zwhWEeH6pX3pD0N/EFgi0H2bERWwQuNBM0X3dX9iUXThwyqY+w7yXnhfWV
I7p+k6CvkfqhQO0eb1rOZbduYhsBFJc=
-----END CERTIFICATE-----
Generated at Fri Oct 2 18:40:41 2026 by rpki-client