Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/574f75ac-1d0b-371f-b87a-4f3431083c8d.roa
File:                     574f75ac-1d0b-371f-b87a-4f3431083c8d.roa (raw, json)
Hash identifier:          O7QxVQrhod2+6pyTXvpHceYnYGiBGF/nPj7ZDCcs2JM=
Subject key identifier:   E7:05:90:7E:D6:E6:B2:60:92:A0:C9:03:52:90:1C:B5:55:54:86:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863E3D82E23171FE1814FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/574f75ac-1d0b-371f-b87a-4f3431083c8d.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.49.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:e3:d8:2e:23:17:1f:e1:81:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=27a40357-8ffb-4cac-aad0-a193fc4304da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:0f:23:88:9f:ca:7d:ac:67:58:1f:ca:4b:
                    9c:5b:dc:8d:99:c8:d4:0b:fa:80:84:7b:78:cf:86:
                    00:df:a0:e7:06:b8:a8:17:9f:76:0c:c7:83:24:12:
                    e4:77:71:2e:e5:a4:a9:70:d3:7a:48:b7:cf:62:af:
                    aa:e7:4a:dc:c6:5c:21:0f:32:fe:54:46:3c:b2:c2:
                    93:84:e3:bc:4a:f7:76:4b:31:e6:91:18:29:47:ec:
                    79:8a:93:38:f4:3d:e8:1b:e8:cc:71:c8:28:c4:11:
                    85:fc:cf:61:2a:be:9d:34:d6:77:68:a9:2a:5a:ad:
                    c7:c0:03:61:28:d5:31:94:d9:d0:ed:e9:d1:8e:4f:
                    52:a7:71:cf:62:5e:ac:6a:e0:6e:35:62:07:e1:21:
                    b9:05:48:aa:53:97:e9:99:fc:b0:40:ef:5d:79:17:
                    f4:ea:39:54:20:25:66:d6:4a:1c:9f:8f:e2:b5:ee:
                    d9:4f:61:52:30:f5:fd:e3:90:67:a2:0b:cf:d8:49:
                    81:47:54:e2:9f:38:a0:ed:14:ab:c2:7f:bb:04:36:
                    ab:11:e0:5a:3f:25:36:cd:08:18:2c:86:69:19:58:
                    20:cc:b4:48:13:3d:64:29:67:53:41:0e:4b:89:c8:
                    f2:b2:40:29:71:33:55:b3:48:f6:8c:08:72:a5:c4:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:90:7E:D6:E6:B2:60:92:A0:C9:03:52:90:1C:B5:55:54:86:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/574f75ac-1d0b-371f-b87a-4f3431083c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.49.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:7e:18:17:71:fd:ee:4f:cc:39:46:8d:a2:91:27:b0:d1:
         d9:f2:09:8e:e5:26:32:30:64:f7:40:de:7f:cc:41:1c:6b:74:
         28:a8:d1:c5:38:c3:3e:ac:a8:2f:64:1c:63:06:98:7f:63:72:
         f6:4c:7e:b3:17:6a:39:c2:cc:cf:a0:ff:2a:1b:6e:d6:3d:b4:
         fd:4a:e1:4f:96:eb:6a:92:91:9a:89:22:e6:f7:6c:68:58:4a:
         f5:15:1b:db:a4:9f:83:06:0d:e3:6f:c0:64:1c:4f:76:7a:38:
         26:45:ee:b7:0f:7d:95:56:df:b4:76:68:cd:85:1a:4d:72:92:
         c2:21:70:7f:e7:0d:2e:0d:f0:ff:31:09:55:4c:bd:5b:7b:3a:
         d8:ec:46:42:ed:79:82:12:7a:f0:a7:02:fc:0a:5e:2e:31:88:
         2e:50:a6:f4:c8:aa:d3:bc:6f:90:fd:65:f8:43:a2:98:87:68:
         cd:86:14:13:8d:a6:2b:ce:c6:af:76:a5:2a:fc:be:3b:b6:a8:
         ab:cb:5f:dc:df:c5:04:98:84:91:19:29:a7:38:fb:24:7b:ee:
         50:49:cc:3f:a3:28:ad:fa:11:e3:93:01:90:28:55:97:48:98:
         a7:05:22:78:b0:de:e7:2c:43:e1:42:c5:41:e0:91:3c:04:fe:
         b3:38:c5:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY+PYLiMXH+GBT8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MjdhNDAzNTctOGZmYi00Y2FjLWFhZDAtYTE5M2ZjNDMwNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAYPI4ifyn2sZ1gfykucW9yNmcjUC/qAhHt4
z4YA36DnBrioF592DMeDJBLkd3Eu5aSpcNN6SLfPYq+q50rcxlwhDzL+VEY8ssKT
hOO8Svd2SzHmkRgpR+x5ipM49D3oG+jMccgoxBGF/M9hKr6dNNZ3aKkqWq3HwANh
KNUxlNnQ7enRjk9Sp3HPYl6sauBuNWIH4SG5BUiqU5fpmfywQO9deRf06jlUICVm
1kocn4/ite7ZT2FSMPX945BnogvP2EmBR1Tinzig7RSrwn+7BDarEeBaPyU2zQgY
LIZpGVggzLRIEz1kKWdTQQ5LicjyskApcTNVs0j2jAhypcR4twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcFkH7W5rJgkqDJA1KQHLVVVIZZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTc0Zjc1YWMtMWQwYi0z
NzFmLWI4N2EtNGYzNDMxMDgzYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDGTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGovfhgXcf3uT8w5Ro2ikSew0dnyCY7lJjIwZPdA3n/MQRxrdCio0cU4
wz6sqC9kHGMGmH9jcvZMfrMXajnCzM+g/yobbtY9tP1K4U+W62qSkZqJIub3bGhY
SvUVG9ukn4MGDeNvwGQcT3Z6OCZF7rcPfZVW37R2aM2FGk1yksIhcH/nDS4N8P8x
CVVMvVt7OtjsRkLteYISevCnAvwKXi4xiC5QpvTIqtO8b5D9ZfhDopiHaM2GFBON
pivOxq92pSr8vju2qKvLX9zfxQSYhJEZKac4+yR77lBJzD+jKK36EeOTAZAoVZdI
mKcFIniw3ucsQ+FCxUHgkTwE/rM4xQA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:03:34 2026 by rpki-client