Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/095e880c-7046-3b4c-8fb1-5e09bfb5d9a7.roa
File:                     095e880c-7046-3b4c-8fb1-5e09bfb5d9a7.roa (raw, json)
Hash identifier:          IUjbjfDYFqZY3DXV7qzLas2r7a/O1GD99nfKpy960j4=
Subject key identifier:   54:AC:53:D5:26:D9:43:20:2D:F5:2B:E6:60:08:05:CF:18:DA:3A:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B566FFD8BEE7C54DF9500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/095e880c-7046-3b4c-8fb1-5e09bfb5d9a7.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        67.180.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:56:6f:fd:8b:ee:7c:54:df:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=70e93549-6d0b-4f17-abc7-df510bb4bd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:a2:2a:a8:b7:62:85:a4:8d:57:eb:43:ba:
                    0a:d8:66:30:cd:a3:95:19:0e:bd:23:fe:30:98:2c:
                    fe:dc:dd:d2:58:f1:1d:c6:d2:74:bd:e8:6b:08:3e:
                    a5:0f:67:6d:4f:bb:dd:ec:15:1b:bf:4a:e8:4d:ed:
                    d9:6e:46:a2:0c:95:ec:d3:ff:80:03:af:5f:ad:82:
                    bc:c6:1a:c9:5b:e7:30:d7:4d:ae:59:da:0a:9b:6e:
                    c8:c6:9d:1c:04:2a:20:88:4e:8b:15:70:3a:04:98:
                    35:54:95:bb:58:76:89:df:45:07:a5:e0:26:2e:cd:
                    29:a8:e2:0c:86:f4:cf:25:a3:e3:ab:02:4a:98:c2:
                    5e:72:71:40:37:5a:50:81:04:c6:44:64:bc:fe:ff:
                    d3:8c:a5:55:5f:82:6a:46:b9:b2:50:84:8a:44:cd:
                    c4:f6:04:c1:32:07:bf:65:e0:24:3a:9f:32:d1:dd:
                    9a:c1:ff:6e:4e:36:86:b5:78:4b:eb:df:be:f2:d3:
                    6a:31:81:01:77:f9:84:56:b4:fe:f7:15:a7:18:4a:
                    f4:71:aa:51:c6:d0:d8:dc:c4:64:92:fc:1f:e5:d8:
                    e7:05:82:3a:fc:a6:6f:86:f0:16:c6:5b:b4:5e:1d:
                    a8:90:d4:25:04:6d:4e:4d:75:14:91:5b:83:36:47:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:53:D5:26:D9:43:20:2D:F5:2B:E6:60:08:05:CF:18:DA:3A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/095e880c-7046-3b4c-8fb1-5e09bfb5d9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.180.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fd:dd:8f:29:98:65:5c:c4:86:f3:d3:4b:9c:d7:54:bd:9c:
         c4:97:dd:d4:02:2c:68:f4:3a:c8:0e:a6:87:ce:37:53:5f:cd:
         bd:95:d1:7e:0b:32:10:87:c9:15:29:a6:1e:95:0e:dd:4b:53:
         e0:5a:97:f1:64:d9:93:03:29:ed:0a:d0:8d:f3:c3:f6:99:6e:
         fe:14:4b:b8:b1:0a:50:e1:03:50:0b:3a:70:d7:9d:31:69:3c:
         6e:21:16:51:77:87:6e:f9:42:34:e2:9b:b9:e9:8e:cc:99:7a:
         c3:0c:f0:a7:a5:ab:3a:9b:b8:4a:e0:95:75:2b:df:30:21:6f:
         0f:ab:ca:e9:1a:44:72:6c:d8:18:b1:6c:08:1b:54:9d:3c:2a:
         a1:19:aa:95:48:b4:66:13:a0:89:68:19:be:a7:dd:0d:21:cc:
         10:1d:19:10:32:5b:d3:23:03:99:23:0e:b3:a0:f4:71:97:fa:
         5e:0f:14:d1:a3:1d:5d:4d:57:df:01:f5:0b:0b:92:f8:f1:53:
         63:ef:9f:01:e6:e0:dd:35:d5:c3:c2:ad:70:f4:b2:3b:05:71:
         57:86:99:1a:a1:07:54:6c:88:e4:14:d7:54:62:94:4f:b1:7d:
         2f:57:44:0d:96:88:36:55:63:5a:ac:86:d8:06:f3:c5:70:7c:
         1b:41:d6:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO1Zv/YvufFTflQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NzBlOTM1NDktNmQwYi00ZjE3LWFiYzctZGY1MTBiYjRiZDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXCiKqi3YoWkjVfrQ7oK2GYwzaOVGQ69I/4w
mCz+3N3SWPEdxtJ0vehrCD6lD2dtT7vd7BUbv0roTe3ZbkaiDJXs0/+AA69frYK8
xhrJW+cw102uWdoKm27Ixp0cBCogiE6LFXA6BJg1VJW7WHaJ30UHpeAmLs0pqOIM
hvTPJaPjqwJKmMJecnFAN1pQgQTGRGS8/v/TjKVVX4JqRrmyUISKRM3E9gTBMge/
ZeAkOp8y0d2awf9uTjaGtXhL69++8tNqMYEBd/mEVrT+9xWnGEr0capRxtDY3MRk
kvwf5djnBYI6/KZvhvAWxlu0Xh2okNQlBG1OTXUUkVuDNkcelwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSsU9Um2UMgLfUr5mAIBc8Y2jrmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDk1ZTg4MGMtNzA0Ni0z
YjRjLThmYjEtNWUwOWJmYjVkOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7SoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFP93Y8pmGVcxIbz00uc11S9nMSX3dQCLGj0OsgOpofON1Nfzb2V0X4L
MhCHyRUpph6VDt1LU+Bal/Fk2ZMDKe0K0I3zw/aZbv4US7ixClDhA1ALOnDXnTFp
PG4hFlF3h275QjTim7npjsyZesMM8KelqzqbuErglXUr3zAhbw+ryukaRHJs2Bix
bAgbVJ08KqEZqpVItGYToIloGb6n3Q0hzBAdGRAyW9MjA5kjDrOg9HGX+l4PFNGj
HV1NV98B9QsLkvjxU2PvnwHm4N011cPCrXD0sjsFcVeGmRqhB1RsiOQU11RilE+x
fS9XRA2WiDZVY1qshtgG88VwfBtB1g8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:08:35 2026 by rpki-client