Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d48cb2d-7e65-3fa9-bba5-9d67b4a91be7.roa
File:                     8d48cb2d-7e65-3fa9-bba5-9d67b4a91be7.roa (raw, json)
Hash identifier:          MIdCm20432vVYkfk5azRf5NOMAeS6Mg9HpGpXoagFeI=
Subject key identifier:   02:1D:83:44:DE:0A:B6:CC:48:3A:03:E3:2D:B3:86:4C:3E:D3:E0:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584FB3A6C1CA9FF93B21F9F5E400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d48cb2d-7e65-3fa9-bba5-9d67b4a91be7.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     33659
IP address blocks:        73.112.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:c1:ca:9f:f9:3b:21:f9:f5:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=a65a8b13-1604-4a6d-92df-2e03fb6ac789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:83:45:2b:89:80:c0:95:81:88:65:6f:8f:
                    f4:0a:48:83:17:3c:32:56:7e:3d:98:ec:be:a8:41:
                    e7:c9:f3:16:fb:9c:12:67:3a:96:47:ac:24:6e:63:
                    c2:29:2a:7e:f8:d7:d5:fc:66:2d:ae:95:b2:b4:a1:
                    a7:a3:16:67:06:04:96:27:da:11:1b:27:c6:81:b2:
                    6d:eb:e4:ec:f4:46:be:49:f4:d9:53:aa:3c:61:ba:
                    14:48:9b:6d:35:4e:9b:77:90:99:3f:97:0b:09:7a:
                    1d:59:f6:d5:d9:96:91:e5:a5:5e:0d:03:4e:91:4c:
                    44:33:ee:4a:3c:c9:97:d1:e1:23:71:a0:06:63:d8:
                    fd:aa:82:ae:84:1c:d7:e6:39:62:9c:f7:e3:f7:3b:
                    f2:35:69:98:a8:d5:67:c7:54:f7:55:5b:1b:15:5c:
                    15:cb:7b:04:3e:5c:9c:b0:61:23:58:98:0d:fe:1e:
                    25:3a:bc:db:5a:11:9b:2e:e4:8b:5c:a9:d5:9a:c8:
                    a4:c0:a9:4c:ab:20:cb:0c:b8:dd:b5:29:47:20:3b:
                    aa:0c:d2:e0:77:69:5c:68:27:43:98:06:12:89:8c:
                    c3:b1:c3:5e:91:7f:53:24:a2:f6:59:5c:d6:79:8b:
                    96:d1:aa:6b:34:4a:d6:33:58:ef:fc:cb:e4:4f:89:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:83:44:DE:0A:B6:CC:48:3A:03:E3:2D:B3:86:4C:3E:D3:E0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d48cb2d-7e65-3fa9-bba5-9d67b4a91be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.112.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:7f:84:a5:a0:65:08:17:09:e3:2f:ee:ed:01:4f:a6:02:
         4f:44:92:42:8a:bb:5d:c1:bf:dc:52:87:73:43:6d:8d:90:a6:
         f8:d1:a6:8b:3c:3f:b8:bb:98:f7:e8:1f:64:ad:37:3a:cf:d9:
         f6:92:e8:58:e6:98:41:d6:b9:5e:8d:05:1d:d9:c8:18:16:16:
         98:c4:45:f1:b0:c9:84:a7:47:8b:3f:bd:41:db:23:95:4a:f7:
         e6:b3:d5:3d:dd:dd:b4:56:a9:51:1c:ad:1a:19:b4:6c:31:f9:
         e5:23:01:88:3c:96:2c:98:ef:b6:ca:bd:78:ea:6e:5f:94:eb:
         94:d5:f1:69:3a:02:1d:6c:92:2b:8d:cf:61:47:6c:5b:0c:0d:
         df:5d:9b:d1:8f:bb:7b:51:09:49:38:95:08:4a:42:ac:ca:02:
         50:77:49:57:ae:ae:0f:cd:fa:c7:41:05:b4:65:8a:9a:73:16:
         ca:a1:07:47:eb:e8:0b:d7:3c:2c:12:8b:35:5f:f0:8d:6b:a9:
         0b:14:98:46:6c:10:9f:62:ac:f7:b3:d8:af:6b:a9:f0:5e:27:
         30:d7:d3:20:a7:5d:c4:05:e6:38:73:3d:97:19:67:81:cd:f5:
         9a:68:11:19:71:75:b6:fb:e7:d8:7e:fa:e0:63:f7:21:b4:7d:
         0e:ca:1b:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpsHKn/k7Ifn15AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk
YTY1YThiMTMtMTYwNC00YTZkLTkyZGYtMmUwM2ZiNmFjNzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+uDRSuJgMCVgYhlb4/0CkiDFzwyVn49mOy+
qEHnyfMW+5wSZzqWR6wkbmPCKSp++NfV/GYtrpWytKGnoxZnBgSWJ9oRGyfGgbJt
6+Ts9Ea+SfTZU6o8YboUSJttNU6bd5CZP5cLCXodWfbV2ZaR5aVeDQNOkUxEM+5K
PMmX0eEjcaAGY9j9qoKuhBzX5jlinPfj9zvyNWmYqNVnx1T3VVsbFVwVy3sEPlyc
sGEjWJgN/h4lOrzbWhGbLuSLXKnVmsikwKlMqyDLDLjdtSlHIDuqDNLgd2lcaCdD
mAYSiYzDscNekX9TJKL2WVzWeYuW0aprNErWM1jv/MvkT4l0ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIdg0TeCrbMSDoD4y2zhkw+0+CnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ0OGNiMmQtN2U2NS0z
ZmE5LWJiYTUtOWQ2N2I0YTkxYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSXA+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1Of4SloGUIFwnjL+7tAU+mAk9EkkKKu13Bv9xSh3NDbY2QpvjRpos8
P7i7mPfoH2StNzrP2faS6FjmmEHWuV6NBR3ZyBgWFpjERfGwyYSnR4s/vUHbI5VK
9+az1T3d3bRWqVEcrRoZtGwx+eUjAYg8liyY77bKvXjqbl+U65TV8Wk6Ah1skiuN
z2FHbFsMDd9dm9GPu3tRCUk4lQhKQqzKAlB3SVeurg/N+sdBBbRlippzFsqhB0fr
6AvXPCwSizVf8I1rqQsUmEZsEJ9irPez2K9rqfBeJzDX0yCnXcQF5jhzPZcZZ4HN
9ZpoERlxdbb759h++uBj9yG0fQ7KGx0=
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:36:11 2026 by rpki-client