Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0490fa1e-a9d0-39e8-aaa6-d4fe0b160e17.roa
File:                     0490fa1e-a9d0-39e8-aaa6-d4fe0b160e17.roa (raw, json)
Hash identifier:          JW5pOy5NoobkDa3EchIrh7ZBhwfgHC8+y6kiKJYaNXM=
Subject key identifier:   7F:DC:F3:70:51:79:03:4C:5B:2E:8C:97:A6:B0:C8:2D:FD:8A:17:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4F4DC7F046F67646DA8F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0490fa1e-a9d0-39e8-aaa6-d4fe0b160e17.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7015
IP address blocks:        73.227.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:4d:c7:f0:46:f6:76:46:da:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=3a7893a0-623f-41a5-af3b-36cf2cb3e5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:1e:8d:83:f7:03:a6:4e:88:a2:d3:44:b1:
                    6d:f4:59:57:93:d1:ef:b7:1e:cf:f8:6c:39:34:72:
                    59:99:62:5b:b6:b6:01:f0:76:a6:b4:df:05:b0:30:
                    9e:9b:82:d3:08:6c:c9:a1:db:a1:cf:72:22:5d:aa:
                    a0:82:3a:2c:05:70:9c:7c:64:31:96:7e:2a:a7:22:
                    c6:46:3c:e7:3f:66:6a:6d:15:f0:ac:8b:c3:4b:64:
                    bf:aa:af:7d:8e:57:c8:70:76:0b:92:e4:0e:14:d5:
                    95:69:a2:a0:cd:78:99:82:ca:76:7c:ab:00:ec:6c:
                    7e:7a:b7:90:0c:19:e6:d4:83:ed:bc:33:01:de:e2:
                    73:9b:2b:8f:f4:e8:08:16:c2:bb:b6:7e:95:79:f7:
                    ef:a1:63:20:29:b4:77:e6:ee:9f:25:1e:8b:22:d4:
                    3b:3c:53:8b:3c:47:a0:ef:c4:f7:7a:5d:83:2f:c0:
                    56:66:09:94:22:13:88:ed:f1:55:26:a9:bc:78:df:
                    26:1f:36:08:a6:98:4d:ba:42:b6:00:b4:d7:02:60:
                    ab:ac:df:60:a0:ac:2b:bf:be:9e:f2:a7:9e:2a:e9:
                    fa:41:05:2f:9c:d6:b2:ac:1f:90:f9:49:73:f0:09:
                    e7:ba:f9:1d:3c:70:f6:e8:8d:c8:85:2f:70:bf:e6:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:F3:70:51:79:03:4C:5B:2E:8C:97:A6:B0:C8:2D:FD:8A:17:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0490fa1e-a9d0-39e8-aaa6-d4fe0b160e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.227.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:cb:c9:48:44:5a:86:b8:e5:0f:f6:24:45:ea:b5:4d:c8:
         d0:72:ca:67:e3:66:af:86:f8:4f:82:73:e5:3a:88:e4:4b:8c:
         7a:4d:19:8c:c4:1d:2e:d5:1d:bc:30:6d:97:6f:f0:3b:5b:1e:
         1e:d3:d3:de:fb:65:0b:6d:51:86:4f:67:5f:71:ce:98:e1:58:
         6a:03:e1:81:09:05:81:de:38:b3:28:92:f1:66:0f:a8:d1:67:
         6c:73:4e:01:ae:ec:d5:ce:76:80:21:25:73:d9:96:89:02:24:
         36:bd:56:83:af:d3:f2:b3:97:60:83:f9:9c:6c:f0:62:e8:ec:
         75:f2:1a:5f:72:56:97:4d:dc:af:ba:dd:5b:db:e4:9b:7e:8d:
         96:77:02:f9:0e:52:b4:e1:a8:f5:3d:e8:e7:50:dc:fd:64:1a:
         8e:14:e7:c0:22:e0:79:19:be:22:58:0d:1c:18:27:02:d7:1f:
         ee:ed:84:e9:6f:74:95:f5:e9:e2:14:60:8e:8a:2f:3a:18:00:
         8f:66:da:c4:56:f4:d0:a1:26:31:98:6f:db:dc:13:1d:39:5b:
         c2:b4:60:39:66:84:32:3f:04:b9:07:69:d4:49:2e:66:d4:67:
         20:79:5c:10:bc:93:d6:b4:b0:9a:aa:29:9b:7f:51:38:87:f3:
         62:37:8d:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T03H8Eb2dkbaj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
M2E3ODkzYTAtNjIzZi00MWE1LWFmM2ItMzZjZjJjYjNlNWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvQejYP3A6ZOiKLTRLFt9FlXk9Hvtx7P+Gw5
NHJZmWJbtrYB8HamtN8FsDCem4LTCGzJoduhz3IiXaqggjosBXCcfGQxln4qpyLG
RjznP2ZqbRXwrIvDS2S/qq99jlfIcHYLkuQOFNWVaaKgzXiZgsp2fKsA7Gx+ereQ
DBnm1IPtvDMB3uJzmyuP9OgIFsK7tn6VeffvoWMgKbR35u6fJR6LItQ7PFOLPEeg
78T3el2DL8BWZgmUIhOI7fFVJqm8eN8mHzYIpphNukK2ALTXAmCrrN9goKwrv76e
8qeeKun6QQUvnNayrB+Q+Ulz8AnnuvkdPHD26I3IhS9wv+b9hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/c83BReQNMWy6Ml6awyC39ihcRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ5MGZhMWUtYTlkMC0z
OWU4LWFhYTYtZDRmZTBiMTYwZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvJy8lIRFqGuOUP9iRF6rVNyNByymfjZq+G+E+Cc+U6iORLjHpNGYzE
HS7VHbwwbZdv8DtbHh7T0977ZQttUYZPZ19xzpjhWGoD4YEJBYHeOLMokvFmD6jR
Z2xzTgGu7NXOdoAhJXPZlokCJDa9VoOv0/Kzl2CD+Zxs8GLo7HXyGl9yVpdN3K+6
3Vvb5Jt+jZZ3AvkOUrThqPU96OdQ3P1kGo4U58Ai4HkZviJYDRwYJwLXH+7thOlv
dJX16eIUYI6KLzoYAI9m2sRW9NChJjGYb9vcEx05W8K0YDlmhDI/BLkHadRJLmbU
ZyB5XBC8k9a0sJqqKZt/UTiH82I3jaI=
-----END CERTIFICATE-----
Generated at Tue Oct 20 23:48:43 2026 by rpki-client