Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f6b5f1-654c-3a58-b880-7a6d28ca6a1c.roa
File:                     06f6b5f1-654c-3a58-b880-7a6d28ca6a1c.roa (raw, json)
Hash identifier:          cz3Gynppl6IjZfAvpyWoHJmhRZLbTpRuy6oYdUreEXY=
Subject key identifier:   5C:2E:F1:26:D2:BF:22:40:9A:F1:C3:80:3E:F1:E3:C8:B2:D4:81:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86323E9C0E885E0327E4EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f6b5f1-654c-3a58-b880-7a6d28ca6a1c.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        174.174.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:23:e9:c0:e8:85:e0:32:7e:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=b23a707d-9766-43e4-b22a-e93ddaa89361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:4b:db:d4:cc:45:ad:9a:64:70:36:11:dd:
                    d6:bd:28:43:a7:9e:0d:9f:68:72:58:6d:ce:2d:16:
                    43:6a:29:23:21:35:0d:fa:79:7c:d3:c8:4d:10:af:
                    2e:f3:86:79:20:1f:1b:12:49:43:07:4b:e4:ff:c5:
                    49:58:f9:a3:88:d6:0b:3e:ad:39:7e:40:c6:71:f0:
                    14:a8:ab:4c:b7:30:35:69:4d:66:09:37:60:3c:ba:
                    17:e9:6a:6d:34:76:66:32:58:80:8d:43:72:7e:d5:
                    3f:a2:6c:2d:33:2e:b9:ca:2c:bd:a9:2b:f6:3b:74:
                    cb:b8:91:cc:ab:ef:84:20:28:2d:23:85:82:c4:78:
                    1b:5d:86:cf:0e:bc:1d:ce:f4:6b:82:c4:3d:f3:f9:
                    c9:eb:23:77:b2:66:7d:47:ec:a0:fb:78:c8:ab:fc:
                    03:f3:b0:c0:1e:6e:5e:1b:d2:25:32:dc:ce:97:b0:
                    21:c6:94:7f:e2:9f:26:84:14:f3:4d:31:e8:16:56:
                    ac:53:73:a3:d5:29:cf:1b:fd:c4:84:6c:57:23:6b:
                    2d:f6:28:60:c3:65:bd:90:2e:46:84:52:6a:7a:6b:
                    0c:4a:e1:c8:a1:4c:58:4a:82:5e:53:bd:ce:8b:f8:
                    fa:46:23:9d:7a:66:e2:39:99:a1:6a:5e:96:c9:a7:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2E:F1:26:D2:BF:22:40:9A:F1:C3:80:3E:F1:E3:C8:B2:D4:81:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f6b5f1-654c-3a58-b880-7a6d28ca6a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.174.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:28:4d:f1:a4:96:d9:89:39:f9:4a:de:4d:b8:5a:13:c9:e2:
         19:5a:00:5f:7b:3a:03:d0:a4:1b:52:5e:d3:6a:47:c4:d8:97:
         0e:3a:ed:55:90:5c:d1:1f:2c:48:e3:be:04:89:ff:05:29:31:
         1b:37:6f:ec:68:a3:14:52:9d:6f:1a:82:ae:b3:a2:ac:ba:6b:
         b3:f8:24:8e:7a:5a:47:3e:5b:12:11:5d:e4:c7:d0:4a:53:b1:
         33:0a:de:09:3c:a8:25:e4:88:94:e7:e5:3f:89:29:75:4f:ea:
         5e:f2:a5:a4:79:6e:58:d8:5c:5b:29:3c:2f:58:72:40:6c:5b:
         e0:6c:91:be:68:4b:b8:06:e4:fc:d8:b2:58:7c:64:cc:bc:2d:
         3a:3d:6c:90:67:35:05:3e:37:89:47:84:f3:f3:81:85:75:b0:
         73:69:49:9c:90:f2:20:97:25:9b:ae:a8:e9:df:a5:60:c5:7f:
         cc:e0:02:1b:71:88:41:25:c4:55:ce:91:59:fb:2b:7a:1f:c8:
         af:c8:f7:58:45:29:95:9b:71:71:41:bb:d1:ac:12:c8:23:10:
         bd:79:b9:2f:5a:30:9d:81:87:1c:15:70:ce:16:1b:97:25:58:
         85:bb:e3:d7:3d:84:3b:6e:82:13:61:1d:f9:a9:da:e4:e1:b1:
         6b:58:eb:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYyPpwOiF4DJ+TsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
YjIzYTcwN2QtOTc2Ni00M2U0LWIyMmEtZTkzZGRhYTg5MzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ZL29TMRa2aZHA2Ed3WvShDp54Nn2hyWG3O
LRZDaikjITUN+nl808hNEK8u84Z5IB8bEklDB0vk/8VJWPmjiNYLPq05fkDGcfAU
qKtMtzA1aU1mCTdgPLoX6WptNHZmMliAjUNyftU/omwtMy65yiy9qSv2O3TLuJHM
q++EICgtI4WCxHgbXYbPDrwdzvRrgsQ98/nJ6yN3smZ9R+yg+3jIq/wD87DAHm5e
G9IlMtzOl7AhxpR/4p8mhBTzTTHoFlasU3Oj1SnPG/3EhGxXI2st9ihgw2W9kC5G
hFJqemsMSuHIoUxYSoJeU73Oi/j6RiOdembiOZmhal6Wyaf/aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwu8SbSvyJAmvHDgD7x48iy1IH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDZmNmI1ZjEtNjU0Yy0z
YTU4LWI4ODAtN2E2ZDI4Y2E2YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8oTfGkltmJOflK3k24WhPJ4hlaAF97OgPQpBtSXtNqR8TYlw467VWQ
XNEfLEjjvgSJ/wUpMRs3b+xooxRSnW8agq6zoqy6a7P4JI56Wkc+WxIRXeTH0EpT
sTMK3gk8qCXkiJTn5T+JKXVP6l7ypaR5bljYXFspPC9YckBsW+Bskb5oS7gG5PzY
slh8ZMy8LTo9bJBnNQU+N4lHhPPzgYV1sHNpSZyQ8iCXJZuuqOnfpWDFf8zgAhtx
iEElxFXOkVn7K3ofyK/I91hFKZWbcXFBu9GsEsgjEL15uS9aMJ2BhxwVcM4WG5cl
WIW749c9hDtughNhHfmp2uThsWtY68Y=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:20:16 2026 by rpki-client