Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa
File:                     f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa (raw, json)
Hash identifier:          Bx1Wjfdj+XaYm9pjAdyooRlOEqs1X2eycqmkoqiluxs=
Subject key identifier:   42:69:09:73:88:22:1E:0E:E8:65:14:34:E1:91:A4:EC:5A:81:B4:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49829264CA9251C96B3BEC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        68.86.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:92:64:ca:92:51:c9:6b:3b:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b956e992-4ef6-4c66-8b09-e314f6db6566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:0f:4d:0e:37:62:14:60:4b:fe:71:ee:22:
                    8d:d4:a0:b8:ca:0f:28:93:61:7c:83:05:93:65:f2:
                    ff:21:96:55:fc:f1:65:e3:88:a4:25:38:a5:bf:ef:
                    76:b6:6f:4b:2c:25:f2:66:ad:28:85:16:da:f3:00:
                    f5:3b:80:d0:2a:f8:fd:bf:4e:b1:48:3c:66:2f:cb:
                    ea:fd:bb:44:3d:b2:91:10:21:1a:e7:2d:15:94:9b:
                    13:8f:f0:2a:b8:ef:9a:18:d4:d9:4e:3f:8a:c0:a2:
                    41:ae:a5:11:03:77:80:11:6e:3c:fd:19:df:eb:c6:
                    5f:aa:53:06:7b:04:7f:cd:64:fa:a0:8a:b6:49:a1:
                    ec:7f:38:14:97:40:54:f8:47:6e:a7:04:e6:93:88:
                    7c:86:34:f8:a0:93:67:fe:36:7d:ea:fd:e7:aa:35:
                    f7:c6:e7:e2:66:e8:23:2e:40:1e:00:f4:08:ed:af:
                    5b:b9:ad:1a:2c:79:8d:0c:7f:63:68:ee:96:b0:ea:
                    d5:c2:44:a6:d9:f4:da:8a:31:a6:3a:6b:06:e0:72:
                    7e:36:00:d2:34:59:73:e7:3c:63:ef:7d:19:50:34:
                    17:cb:66:74:41:b3:19:b1:5a:52:08:38:a6:ab:b2:
                    3f:9d:da:24:8e:c4:be:36:b0:d6:c5:78:48:55:c4:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:69:09:73:88:22:1E:0E:E8:65:14:34:E1:91:A4:EC:5A:81:B4:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7d2ae46-3d4c-32c6-a177-8e1328e84dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:52:6f:92:a0:84:96:6b:bd:c5:e7:37:a9:1c:d6:44:34:77:
         67:f4:2b:06:fd:aa:ec:70:43:89:8d:94:f1:4f:c2:f8:1b:9c:
         2a:ff:22:fa:12:af:59:f2:b5:68:a6:b0:95:51:3c:0d:cd:03:
         dd:e6:e0:e9:cd:33:17:ba:7c:e0:36:cc:ec:ab:04:de:63:50:
         6b:e3:e2:a1:20:05:d9:82:8f:9c:12:e1:60:fb:f9:d5:2a:c0:
         b6:61:da:00:d3:fa:c4:45:be:a0:54:44:88:f8:04:dd:7b:a2:
         8e:cc:63:f9:29:71:6f:65:d0:3e:38:dd:5a:b4:62:20:9e:19:
         de:98:72:2c:85:56:ce:a6:c5:14:d6:78:b9:8a:ba:43:f7:3a:
         a4:89:e6:ed:bc:94:d7:09:45:8e:d9:dd:8f:d7:b0:a3:c1:d9:
         8c:25:37:9f:94:22:c2:7e:dc:37:26:6c:1e:d0:e0:d9:18:e7:
         4b:81:45:20:b4:4a:fa:e5:ca:df:da:a4:fa:f0:cf:f2:3a:07:
         39:55:18:52:78:2f:e5:85:57:58:7f:00:28:a5:79:cd:8d:4b:
         a2:3f:e0:fb:2a:88:6d:e7:c3:83:6b:b5:af:98:5b:d6:2f:d3:
         98:b8:c3:2a:71:e7:83:ba:50:b6:f3:5c:e2:89:da:df:65:9f:
         dd:c5:3d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgpJkypJRyWs77AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Yjk1NmU5OTItNGVmNi00YzY2LThiMDktZTMxNGY2ZGI2NTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjAPTQ43YhRgS/5x7iKN1KC4yg8ok2F8gwWT
ZfL/IZZV/PFl44ikJTilv+92tm9LLCXyZq0ohRba8wD1O4DQKvj9v06xSDxmL8vq
/btEPbKRECEa5y0VlJsTj/AquO+aGNTZTj+KwKJBrqURA3eAEW48/Rnf68ZfqlMG
ewR/zWT6oIq2SaHsfzgUl0BU+EdupwTmk4h8hjT4oJNn/jZ96v3nqjX3xufiZugj
LkAeAPQI7a9bua0aLHmNDH9jaO6WsOrVwkSm2fTaijGmOmsG4HJ+NgDSNFlz5zxj
730ZUDQXy2Z0QbMZsVpSCDimq7I/ndokjsS+NrDWxXhIVcTDswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJpCXOIIh4O6GUUNOGRpOxagbTnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdkMmFlNDYtM2Q0Yy0z
MmM2LWExNzctOGUxMzI4ZTg0ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRSb5KghJZrvcXnN6kc1kQ0d2f0Kwb9quxwQ4mNlPFPwvgbnCr/IvoS
r1nytWimsJVRPA3NA93m4OnNMxe6fOA2zOyrBN5jUGvj4qEgBdmCj5wS4WD7+dUq
wLZh2gDT+sRFvqBURIj4BN17oo7MY/kpcW9l0D443Vq0YiCeGd6YciyFVs6mxRTW
eLmKukP3OqSJ5u28lNcJRY7Z3Y/XsKPB2YwlN5+UIsJ+3DcmbB7Q4NkY50uBRSC0
Svrlyt/apPrwz/I6BzlVGFJ4L+WFV1h/ACilec2NS6I/4PsqiG3nw4Nrta+YW9Yv
05i4wypx54O6ULbzXOKJ2t9ln93FPXY=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:07 2026 by rpki-client