Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4b4aa4-4abd-3cb4-b933-05aad20ed95f.roa
File:                     5f4b4aa4-4abd-3cb4-b933-05aad20ed95f.roa (raw, json)
Hash identifier:          GhQKYFQPt+n8OlvT/bucJCMr3dOgLiNlK2OVCX/98zI=
Subject key identifier:   3C:A3:C1:4B:91:87:B4:64:2B:DA:9C:D7:D0:B0:57:30:24:9A:2D:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863EAF37DAEBD93C097CB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4b4aa4-4abd-3cb4-b933-05aad20ed95f.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.61.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:ea:f3:7d:ae:bd:93:c0:97:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=442fecc7-13fb-4a26-9b9f-dabdbdee0164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:12:2a:22:aa:1c:e9:3b:53:bf:62:06:b9:
                    f7:07:72:55:48:d8:89:12:1a:b3:35:b3:10:ef:6e:
                    65:c7:5e:56:31:32:e4:00:4a:ab:5d:65:e4:2b:8e:
                    eb:c8:c1:c0:7e:e5:22:e4:73:8b:b5:25:30:47:69:
                    cc:aa:1d:5f:bd:da:9a:b3:5f:95:de:c7:3e:59:4a:
                    2b:9d:90:f0:d9:14:b3:2b:03:cb:36:b6:c3:16:12:
                    33:af:c7:e5:1d:14:54:5a:27:83:8f:37:87:03:10:
                    10:c3:b6:c1:ea:68:3a:3b:06:c6:0a:81:eb:d7:3a:
                    02:46:25:a6:61:60:2c:30:03:45:45:8f:20:b2:d2:
                    9d:98:43:e4:2c:79:39:4e:49:d7:98:d4:e1:cb:3d:
                    25:c1:c7:70:4c:5f:91:8e:54:3f:8e:c9:92:01:a2:
                    58:0d:b1:6a:86:ff:7c:c4:4a:6a:05:92:ea:87:bc:
                    a2:55:28:c6:4c:41:43:33:a0:43:df:a6:30:9e:8d:
                    4b:18:1a:52:8e:4e:95:0e:27:62:d0:c3:0d:71:3d:
                    ae:df:55:bf:29:04:fa:a8:22:c9:fa:aa:d8:2f:07:
                    98:15:0e:00:a1:96:48:ee:03:e9:51:c6:4b:d9:2e:
                    bc:3e:be:02:91:c5:b5:71:f7:5f:31:7e:48:e2:89:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:C1:4B:91:87:B4:64:2B:DA:9C:D7:D0:B0:57:30:24:9A:2D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f4b4aa4-4abd-3cb4-b933-05aad20ed95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:6e:0e:dd:29:b9:54:ac:0b:bc:9f:88:1f:3a:bc:22:be:d1:
         51:81:70:9f:5e:88:5a:98:a2:0f:4e:69:fc:57:f1:16:9c:03:
         cd:48:86:57:38:df:fb:60:96:d4:72:40:fd:ba:4d:b0:29:74:
         fe:37:90:69:c4:7c:67:25:5b:ad:5b:24:d6:87:2e:3a:f4:08:
         9f:ce:b4:99:ca:ef:e9:5a:53:27:77:3b:fc:e5:68:95:57:93:
         6e:1b:58:5a:54:05:c9:87:e2:b2:6a:19:a9:26:07:dd:df:72:
         8a:b9:8d:d2:fd:2d:9c:bf:df:49:cb:88:2e:4f:4d:7f:1b:d5:
         e2:ae:92:76:0e:74:6b:43:4c:1f:1d:e3:aa:b8:64:20:61:ab:
         4a:66:d0:43:5e:1b:8b:30:5f:37:30:7a:86:43:d1:f8:32:d6:
         e0:48:5b:71:63:c5:3b:1e:c7:a1:18:fc:ca:6e:35:27:4d:74:
         f5:b5:b9:bd:59:9b:66:33:65:83:db:0d:f5:7a:fc:5c:c0:df:
         77:14:cb:75:ff:e6:cf:5c:68:c5:1d:97:e0:da:20:1d:8a:f5:
         ac:5d:3f:33:43:77:a1:44:ea:e7:98:f0:61:29:8d:c1:6b:bf:
         f2:11:e4:32:e3:e2:cf:03:3f:d0:88:35:f8:1d:2e:b3:d1:45:
         7d:10:5a:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY+rzfa69k8CXy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
NDQyZmVjYzctMTNmYi00YTI2LTliOWYtZGFiZGJkZWUwMTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr0SKiKqHOk7U79iBrn3B3JVSNiJEhqzNbMQ
725lx15WMTLkAEqrXWXkK47ryMHAfuUi5HOLtSUwR2nMqh1fvdqas1+V3sc+WUor
nZDw2RSzKwPLNrbDFhIzr8flHRRUWieDjzeHAxAQw7bB6mg6OwbGCoHr1zoCRiWm
YWAsMANFRY8gstKdmEPkLHk5TknXmNThyz0lwcdwTF+RjlQ/jsmSAaJYDbFqhv98
xEpqBZLqh7yiVSjGTEFDM6BD36Ywno1LGBpSjk6VDidi0MMNcT2u31W/KQT6qCLJ
+qrYLweYFQ4AoZZI7gPpUcZL2S68Pr4CkcW1cfdfMX5I4om53wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyjwUuRh7RkK9qc19CwVzAkmi0rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY0YjRhYTQtNGFiZC0z
Y2I0LWI5MzMtMDVhYWQyMGVkOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD1wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN1uDt0puVSsC7yfiB86vCK+0VGBcJ9eiFqYog9OafxX8RacA81Ihlc4
3/tgltRyQP26TbApdP43kGnEfGclW61bJNaHLjr0CJ/OtJnK7+laUyd3O/zlaJVX
k24bWFpUBcmH4rJqGakmB93fcoq5jdL9LZy/30nLiC5PTX8b1eKuknYOdGtDTB8d
46q4ZCBhq0pm0ENeG4swXzcweoZD0fgy1uBIW3FjxTsex6EY/MpuNSdNdPW1ub1Z
m2YzZYPbDfV6/FzA33cUy3X/5s9caMUdl+DaIB2K9axdPzNDd6FE6ueY8GEpjcFr
v/IR5DLj4s8DP9CINfgdLrPRRX0QWqo=
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:33:41 2026 by rpki-client