Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba5f5f6b-d7ee-35d7-87a7-9c1a74244b48.roa
File:                     ba5f5f6b-d7ee-35d7-87a7-9c1a74244b48.roa (raw, json)
Hash identifier:          167KEBwVN9d3BR27lzr6Gc1jDhMh1DScCdVDNqUQJxs=
Subject key identifier:   7D:69:FA:93:DE:2B:B5:18:42:8B:4F:59:D3:7A:DB:4B:B7:BD:E5:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600B4B5633A8BDB580C3940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba5f5f6b-d7ee-35d7-87a7-9c1a74244b48.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        73.227.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:b4:b5:63:3a:8b:db:58:0c:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=0e619f62-e2d2-4d14-a1e6-e660092fc6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d3:73:9b:86:d1:6e:35:09:9a:8e:56:62:57:
                    89:ac:75:8c:22:25:9b:c3:56:62:a8:fe:85:d5:23:
                    ef:c5:d8:f5:53:d4:72:e2:83:7d:42:16:1b:fe:2c:
                    85:92:8c:b7:aa:63:8b:f4:e7:2b:71:90:9a:46:9c:
                    50:bc:37:4d:99:bb:5e:52:fa:70:b0:86:f6:88:d2:
                    45:ff:9d:5a:be:bd:ef:26:b5:24:9d:10:40:a4:ab:
                    ad:71:70:c5:08:3a:c2:64:2c:c2:e1:b7:8f:34:6b:
                    16:93:bb:c3:56:c3:96:b0:4f:56:c7:65:29:64:ec:
                    70:c0:9b:10:69:d7:50:80:a1:1c:f5:8f:f3:0c:5c:
                    a2:23:ec:5f:17:a6:e4:19:7d:82:eb:1f:7b:78:33:
                    d4:14:e0:12:ea:96:92:a2:03:fe:15:37:89:4a:2e:
                    7b:87:64:ab:d4:18:1d:f0:84:e8:98:2f:ff:7a:b6:
                    d4:fe:8d:68:27:07:6e:1f:4c:6e:93:ff:12:5d:b4:
                    e6:b9:db:2e:91:d8:c9:aa:4f:cb:87:fd:f3:ba:9c:
                    eb:eb:1b:eb:7f:c2:ef:95:a4:77:79:93:df:6f:b5:
                    29:fe:cf:5d:70:0f:34:4f:e6:3b:a1:f2:59:cc:5b:
                    02:74:05:fd:d4:17:69:81:03:db:df:8b:bd:70:83:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:FA:93:DE:2B:B5:18:42:8B:4F:59:D3:7A:DB:4B:B7:BD:E5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba5f5f6b-d7ee-35d7-87a7-9c1a74244b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:96:eb:ba:14:35:e2:2b:28:3c:e5:ee:dc:2b:88:e4:d0:97:
         98:b2:0a:87:17:3f:0a:ff:d9:85:13:9f:ba:3a:76:d6:33:7c:
         af:33:cc:2a:56:47:5f:19:e6:c6:5f:a0:d3:55:f8:fd:dc:7e:
         3d:e0:ce:a0:38:db:d8:63:e3:66:7e:99:75:49:db:87:15:da:
         f4:87:e0:7b:ae:54:2c:6a:b8:a7:9c:11:c3:2b:dd:21:80:4c:
         fd:e2:cb:93:2c:b2:ef:cf:90:02:55:4d:3a:cc:82:86:f6:ec:
         67:f0:cc:ba:e8:ba:40:45:1a:55:ba:a0:79:46:05:e0:cd:b2:
         9a:73:dd:22:c3:4b:98:0c:9a:aa:a5:98:23:be:b9:0e:27:48:
         91:83:b8:3b:2f:f7:a1:3e:8e:73:94:39:99:68:80:e4:5c:88:
         32:74:d1:bd:a0:50:45:a5:23:78:63:6a:f4:d8:68:18:9d:4d:
         0a:65:d9:c9:8f:1a:9c:8b:9a:9d:11:e3:17:65:8f:e7:e7:33:
         df:a7:62:94:32:d8:6a:bc:f8:54:92:30:3e:aa:5d:df:5a:2f:
         c2:6d:b6:a0:24:29:27:2e:8c:b2:5d:80:e9:ef:5e:d8:1b:a1:
         33:80:cb:18:6d:ed:cc:82:99:db:a9:86:23:2a:34:04:6b:45:
         21:27:2e:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42ALS1YzqL21gMOUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
MGU2MTlmNjItZTJkMi00ZDE0LWExZTYtZTY2MDA5MmZjNmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Nzm4bRbjUJmo5WYleJrHWMIiWbw1ZiqP6F
1SPvxdj1U9Ry4oN9QhYb/iyFkoy3qmOL9OcrcZCaRpxQvDdNmbteUvpwsIb2iNJF
/51avr3vJrUknRBApKutcXDFCDrCZCzC4bePNGsWk7vDVsOWsE9Wx2UpZOxwwJsQ
addQgKEc9Y/zDFyiI+xfF6bkGX2C6x97eDPUFOAS6paSogP+FTeJSi57h2Sr1Bgd
8ITomC//erbU/o1oJwduH0xuk/8SXbTmudsukdjJqk/Lh/3zupzr6xvrf8LvlaR3
eZPfb7Up/s9dcA80T+Y7ofJZzFsCdAX91BdpgQPb34u9cINnXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1p+pPeK7UYQotPWdN620u3veVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE1ZjVmNmItZDdlZS0z
NWQ3LTg3YTctOWMxYTc0MjQ0YjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMyW67oUNeIrKDzl7twriOTQl5iyCocXPwr/2YUTn7o6dtYzfK8zzCpW
R18Z5sZfoNNV+P3cfj3gzqA429hj42Z+mXVJ24cV2vSH4HuuVCxquKecEcMr3SGA
TP3iy5Mssu/PkAJVTTrMgob27GfwzLroukBFGlW6oHlGBeDNsppz3SLDS5gMmqql
mCO+uQ4nSJGDuDsv96E+jnOUOZlogORciDJ00b2gUEWlI3hjavTYaBidTQpl2cmP
GpyLmp0R4xdlj+fnM9+nYpQy2Gq8+FSSMD6qXd9aL8JttqAkKScujLJdgOnvXtgb
oTOAyxht7cyCmduphiMqNARrRSEnLlo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:08 2026 by rpki-client