Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa
File:                     d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa (raw, json)
Hash identifier:          rJOzh4lfo17rwkxLfeEftVAXtHM0qxMNP7PHlOEnXIA=
Subject key identifier:   93:7C:69:65:2E:1C:89:88:8A:D6:E5:82:DD:F7:D3:82:79:AF:4D:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8641D7E5650943EA8E7A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33662
IP address blocks:        73.55.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:1d:7e:56:50:94:3e:a8:e7:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=d80ea939-0416-4b24-97b5-dd91604beae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:e4:62:a6:23:80:df:9b:08:13:bd:fb:b8:
                    50:9e:a8:26:a8:45:ef:45:6f:ed:f6:b8:92:c0:ae:
                    51:a1:a0:bc:68:f0:63:58:2f:34:51:02:f1:13:fe:
                    33:79:4a:02:f2:ed:2f:51:0d:84:c1:f1:d6:23:c4:
                    38:d0:e3:1c:41:17:ce:97:23:c0:fe:f2:62:fc:5b:
                    32:77:63:fc:0d:5d:c9:8b:28:51:02:5a:31:11:30:
                    39:52:17:f7:c7:d7:ed:85:4e:52:de:63:a3:1c:8e:
                    8c:c3:05:bd:a8:c6:9f:03:97:55:64:20:40:d4:ff:
                    3c:03:58:26:0b:b1:dc:dc:db:b8:45:fb:bf:72:6c:
                    cd:9f:36:c8:46:8e:8f:ea:4a:dc:f3:53:7b:42:0e:
                    5f:61:4c:bb:a2:dc:65:7c:f2:ac:5c:7c:28:09:9a:
                    4b:36:d2:86:bd:f7:30:3b:5c:0e:0a:37:6b:6b:83:
                    a3:5e:8c:a6:77:92:62:b0:24:ad:15:5e:62:a1:2c:
                    34:3f:b5:2a:af:f8:8c:7d:ca:1e:a4:17:a9:fd:da:
                    5a:18:69:0e:d6:5d:35:ec:a2:c8:5c:4d:42:3f:7a:
                    9d:68:e5:35:b7:cc:68:19:2c:9d:6c:a6:37:a1:15:
                    cd:a1:fe:33:b1:b2:43:95:21:f4:ab:40:68:67:2d:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7C:69:65:2E:1C:89:88:8A:D6:E5:82:DD:F7:D3:82:79:AF:4D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ec3ae0-5f65-33b9-91d8-1dd94283bd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.55.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:81:1e:d9:a5:96:1f:5c:d9:cf:56:67:ef:8b:87:78:a7:d2:
         30:85:4c:dd:7e:42:7e:b7:8f:cd:12:d6:d5:5b:0a:be:44:ff:
         98:16:0a:f7:c4:2a:a2:99:9b:b1:e8:8e:b5:e9:90:ab:ba:da:
         e4:d1:db:ad:00:4a:58:7f:6b:30:3a:bb:bd:f8:4f:f6:46:0c:
         1b:48:25:da:02:37:af:63:ba:e3:56:2d:94:81:06:d9:64:89:
         52:6e:aa:c3:d9:c8:56:05:5a:31:7a:d4:97:0d:62:c2:26:6d:
         87:45:4a:24:7f:cb:51:ee:01:5c:17:b7:d4:73:ff:a3:d9:b1:
         1b:c1:a5:30:dd:6e:94:75:eb:7b:50:d7:e1:a0:9a:60:9c:42:
         70:bb:e4:7d:64:d9:13:aa:f5:ce:27:e3:53:a1:80:72:f3:e6:
         e1:aa:4d:92:b6:ce:45:4e:5a:13:79:5b:70:40:2b:95:10:c2:
         c1:8a:33:19:9c:99:42:84:6a:21:a4:c6:35:55:4c:eb:71:96:
         c7:17:c6:19:76:5b:20:b5:69:ba:f0:de:c8:62:2a:d5:e1:cd:
         9c:dc:e3:8f:29:8b:ee:2a:bf:5b:77:56:3f:73:6d:65:d1:2a:
         af:8c:6e:34:55:89:d2:78:97:ef:e1:2b:13:8b:9a:d5:c4:7f:
         84:c1:45:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZB1+VlCUPqjnogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
ZDgwZWE5MzktMDQxNi00YjI0LTk3YjUtZGQ5MTYwNGJlYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3kYqYjgN+bCBO9+7hQnqgmqEXvRW/t9riS
wK5RoaC8aPBjWC80UQLxE/4zeUoC8u0vUQ2EwfHWI8Q40OMcQRfOlyPA/vJi/Fsy
d2P8DV3JiyhRAloxETA5Uhf3x9fthU5S3mOjHI6MwwW9qMafA5dVZCBA1P88A1gm
C7Hc3Nu4Rfu/cmzNnzbIRo6P6krc81N7Qg5fYUy7otxlfPKsXHwoCZpLNtKGvfcw
O1wOCjdra4OjXoymd5JisCStFV5ioSw0P7Uqr/iMfcoepBep/dpaGGkO1l017KLI
XE1CP3qdaOU1t8xoGSydbKY3oRXNof4zsbJDlSH0q0BoZy1YSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJN8aWUuHImIitblgt3304J5r01FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNlYzNhZTAtNWY2NS0z
M2I5LTkxZDgtMWRkOTQyODNiZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASTeLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmBHtmllh9c2c9WZ++Lh3in0jCFTN1+Qn63j80S1tVbCr5E/5gWCvfE
KqKZm7HojrXpkKu62uTR260ASlh/azA6u734T/ZGDBtIJdoCN69juuNWLZSBBtlk
iVJuqsPZyFYFWjF61JcNYsImbYdFSiR/y1HuAVwXt9Rz/6PZsRvBpTDdbpR163tQ
1+GgmmCcQnC75H1k2ROq9c4n41OhgHLz5uGqTZK2zkVOWhN5W3BAK5UQwsGKMxmc
mUKEaiGkxjVVTOtxlscXxhl2WyC1abrw3shiKtXhzZzc448pi+4qv1t3Vj9zbWXR
Kq+MbjRVidJ4l+/hKxOLmtXEf4TBRVI=
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:20:10 2026 by rpki-client