Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0447ef01-6e50-3dd0-b123-8513a94049d4.roa
File:                     0447ef01-6e50-3dd0-b123-8513a94049d4.roa (raw, json)
Hash identifier:          Tn1wF/bsSqI8xqOkoZ6SHiU3LYR8Ib43H7x9rWmRUro=
Subject key identifier:   E3:0A:7A:6E:B6:EF:7D:5D:62:2C:BF:05:EF:77:E8:72:C6:E1:AA:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EF78A11F47451A1945920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0447ef01-6e50-3dd0-b123-8513a94049d4.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        174.62.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:f7:8a:11:f4:74:51:a1:94:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5ed2ab51-ec6c-4399-a21e-5c3f23cf250a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:36:b7:f7:79:ad:62:07:c3:57:14:13:58:
                    0e:89:42:ab:f0:f9:a0:af:37:a2:31:6b:dc:e4:04:
                    b7:13:2a:8f:d6:6f:d6:1e:ac:ca:a4:62:e8:3e:02:
                    a3:91:56:b4:5e:aa:40:8b:31:ae:72:aa:d3:4c:79:
                    a4:38:88:7d:95:87:39:fb:c7:d8:ee:66:55:5e:f1:
                    f5:44:cc:75:24:ef:64:26:79:33:26:b9:54:4c:19:
                    6a:c5:11:9e:6e:1e:82:e6:b3:f0:a3:8b:fc:b0:27:
                    ba:47:17:23:ea:f2:91:43:ad:b1:9b:c5:78:75:b5:
                    02:bf:61:a5:47:aa:d0:5c:c1:bb:63:ef:31:a0:ed:
                    a5:7c:29:26:b8:c6:e2:04:df:f8:b2:dd:9e:cf:58:
                    db:f5:3b:9c:d9:75:76:be:36:b5:a7:63:50:41:ed:
                    c6:f9:fb:d6:60:49:c7:f8:df:d3:df:8e:89:9f:0c:
                    9a:ea:17:f9:5e:ca:5f:07:8d:b9:cc:27:91:69:dd:
                    f2:72:50:06:03:2e:5b:1f:36:c4:8d:c9:b6:e3:9f:
                    23:71:0d:7f:cf:8a:a9:4a:91:37:3a:7a:75:74:dc:
                    a5:2c:a1:7d:4f:91:58:78:27:f8:ae:8c:5a:84:d5:
                    ed:fa:29:ef:05:dd:13:30:cc:65:bb:81:e1:62:fe:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0A:7A:6E:B6:EF:7D:5D:62:2C:BF:05:EF:77:E8:72:C6:E1:AA:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0447ef01-6e50-3dd0-b123-8513a94049d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:fa:f5:0f:8c:42:7c:a4:f6:20:ae:8d:e3:fb:01:37:ac:
         ea:fd:cf:2f:9c:5d:47:e9:90:a3:89:e7:4a:bd:fc:1b:7c:03:
         b0:a8:3d:b2:a3:be:22:7e:5f:07:65:55:d4:7d:e2:18:8d:ea:
         d3:bf:74:5b:28:92:02:f5:f9:b6:e5:f8:ba:c3:b5:0b:f1:58:
         f5:17:be:f1:5a:c9:bb:26:66:8b:1e:7a:f2:d1:0c:5b:33:75:
         fe:27:31:9b:e4:66:4c:cc:8d:02:e3:b4:e4:c7:03:c3:ee:8d:
         1d:0e:16:6d:7a:ef:1c:fb:14:ab:53:05:1f:c3:4d:38:af:08:
         ba:2f:33:ae:3c:17:ea:0f:b9:50:b0:ba:95:94:f8:59:9a:6b:
         a3:c2:8f:7f:d8:d6:45:37:dc:e8:0b:66:c3:81:9e:8e:5b:00:
         19:b1:06:26:f0:0f:8d:54:a9:d7:87:cd:6a:2e:66:77:2f:e0:
         b4:27:b2:54:81:0e:43:49:e8:25:a4:fc:79:49:c4:cc:52:35:
         07:04:e6:21:fe:65:3d:e2:50:b4:60:57:d3:3d:8b:fd:e8:2e:
         b0:02:a5:e2:b1:b4:82:b6:23:3e:dc:96:3e:7c:7d:93:e4:e2:
         fb:f2:fd:a4:c8:52:e1:f3:15:69:50:15:e9:65:91:b8:51:79:
         f7:e2:0f:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnveKEfR0UaGUWSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWVkMmFiNTEtZWM2Yy00Mzk5LWEyMWUtNWMzZjIzY2YyNTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt942t/d5rWIHw1cUE1gOiUKr8PmgrzeiMWvc
5AS3EyqP1m/WHqzKpGLoPgKjkVa0XqpAizGucqrTTHmkOIh9lYc5+8fY7mZVXvH1
RMx1JO9kJnkzJrlUTBlqxRGebh6C5rPwo4v8sCe6Rxcj6vKRQ62xm8V4dbUCv2Gl
R6rQXMG7Y+8xoO2lfCkmuMbiBN/4st2ez1jb9Tuc2XV2vja1p2NQQe3G+fvWYEnH
+N/T346Jnwya6hf5XspfB425zCeRad3yclAGAy5bHzbEjcm2458jcQ1/z4qpSpE3
Onp1dNylLKF9T5FYeCf4roxahNXt+invBd0TMMxlu4HhYv4b0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMKem62731dYiy/Be936HLG4aofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ0N2VmMDEtNmU1MC0z
ZGQwLWIxMjMtODUxM2E5NDA0OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrj6IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+u+vUPjEJ8pPYgro3j+wE3rOr9zy+cXUfpkKOJ50q9/Bt8A7CoPbKj
viJ+XwdlVdR94hiN6tO/dFsokgL1+bbl+LrDtQvxWPUXvvFaybsmZoseevLRDFsz
df4nMZvkZkzMjQLjtOTHA8PujR0OFm167xz7FKtTBR/DTTivCLovM648F+oPuVCw
upWU+Fmaa6PCj3/Y1kU33OgLZsOBno5bABmxBibwD41UqdeHzWouZncv4LQnslSB
DkNJ6CWk/HlJxMxSNQcE5iH+ZT3iULRgV9M9i/3oLrACpeKxtIK2Iz7clj58fZPk
4vvy/aTIUuHzFWlQFellkbhReffiD5k=
-----END CERTIFICATE-----
Generated at Sat Sep 5 12:45:02 2026 by rpki-client