Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa
File:                     0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa (raw, json)
Hash identifier:          2hqzUQrxihL3Vjfgc7YOBZPFiFzw12DQ7Rae/Cc9xEU=
Subject key identifier:   2D:DD:5B:7F:C8:93:A6:FE:AA:57:26:EA:03:25:BE:46:6C:65:99:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF70F3E48F2056AD1E7C8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        69.141.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:0f:3e:48:f2:05:6a:d1:e7:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f34f1283-6882-470d-8c03-7d40e4341b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:12:0c:44:f9:28:f5:ba:1d:aa:69:c1:42:
                    24:b5:0b:dc:50:4e:c4:81:47:6b:d9:72:87:4f:da:
                    a5:2a:26:7e:db:c5:28:f5:1c:ad:51:54:27:f4:3a:
                    44:f4:81:41:76:c4:e4:f2:76:97:4b:db:7f:d2:f6:
                    f8:4d:2c:ca:b6:eb:75:dd:b2:3a:9f:f3:ba:21:9e:
                    57:9c:6f:b9:ea:67:6f:71:4d:1d:b1:5a:5a:f1:45:
                    75:da:b8:28:ec:e5:5e:e2:61:de:37:01:f9:24:09:
                    cb:c9:41:cb:87:a3:5b:8f:06:ab:c3:75:8b:93:54:
                    43:2c:6e:14:f4:36:5d:b2:6e:7d:fa:5d:ea:4c:0b:
                    fb:59:71:17:cb:d9:32:ed:bd:7f:c5:b0:ec:72:f3:
                    78:80:86:ab:8b:d1:4d:56:62:aa:7d:44:6c:00:d7:
                    98:19:1b:5c:4f:46:99:43:4f:b6:35:e0:6e:35:b1:
                    64:9b:6b:cf:d2:01:15:f9:cb:f9:37:7c:c4:e7:48:
                    7f:8f:67:60:66:00:f9:11:a3:dc:1f:c8:6c:e8:b2:
                    ca:54:5f:a1:b5:bb:1e:df:a3:c1:da:c0:90:9e:47:
                    bf:d4:48:9c:bb:db:3b:9b:76:03:6f:ef:99:a1:fa:
                    09:68:fa:ad:c4:b5:8f:7e:b5:8f:09:b9:72:a8:3b:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DD:5B:7F:C8:93:A6:FE:AA:57:26:EA:03:25:BE:46:6C:65:99:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dcfbf89-a220-3a9f-a1d2-e9c5e3a4937b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.141.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:0b:f5:fe:d9:42:ba:b0:03:40:48:28:c0:39:3d:f1:34:4e:
         43:09:28:86:bb:35:7d:aa:1e:0f:1a:a4:3d:ce:b2:76:93:55:
         59:47:e0:e8:cf:0f:f4:73:ec:a9:df:d2:79:33:c4:fd:bc:81:
         d4:4b:0f:c7:32:c5:e8:91:eb:fa:b1:94:78:43:c3:02:78:d9:
         d9:fd:53:da:fc:5f:c1:1d:83:c1:c9:db:e1:83:bc:69:71:3a:
         33:e9:fb:b4:dc:9c:67:6f:5c:fc:47:37:98:06:25:8d:b0:7e:
         fa:48:cd:64:99:b4:46:e3:8f:61:a7:93:a3:73:ce:6b:f0:86:
         00:95:53:5f:36:ee:4a:8e:da:3c:32:8c:64:3b:55:c5:1e:ab:
         db:28:84:a8:08:48:7e:cb:b7:53:0d:53:08:89:fb:75:fb:30:
         93:6e:48:6c:da:61:8e:24:37:b0:2e:65:dc:6d:71:24:60:89:
         24:8f:0d:73:f3:7a:29:c2:3b:53:06:a7:dc:47:8d:25:9d:36:
         c4:1d:93:8e:54:18:72:f6:35:da:0d:9c:f2:1f:57:42:9c:54:
         0f:98:84:ae:35:d0:e6:e7:7b:26:4b:cd:49:a1:47:13:5d:d4:
         cc:11:fb:95:ba:12:75:9a:23:e8:2f:18:7b:17:00:56:de:cd:
         f6:eb:11:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9w8+SPIFatHnyMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZjM0ZjEyODMtNjg4Mi00NzBkLThjMDMtN2Q0MGU0MzQxYjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroUSDET5KPW6HappwUIktQvcUE7EgUdr2XKH
T9qlKiZ+28Uo9RytUVQn9DpE9IFBdsTk8naXS9t/0vb4TSzKtut13bI6n/O6IZ5X
nG+56mdvcU0dsVpa8UV12rgo7OVe4mHeNwH5JAnLyUHLh6Nbjwarw3WLk1RDLG4U
9DZdsm59+l3qTAv7WXEXy9ky7b1/xbDscvN4gIari9FNVmKqfURsANeYGRtcT0aZ
Q0+2NeBuNbFkm2vP0gEV+cv5N3zE50h/j2dgZgD5EaPcH8hs6LLKVF+htbse36PB
2sCQnke/1Eicu9s7m3YDb++ZofoJaPqtxLWPfrWPCblyqDtiZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3dW3/Ik6b+qlcm6gMlvkZsZZluMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRjZmJmODktYTIyMC0z
YTlmLWExZDItZTljNWUzYTQ5MzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRY1cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwL9f7ZQrqwA0BIKMA5PfE0TkMJKIa7NX2qHg8apD3OsnaTVVlH4OjP
D/Rz7Knf0nkzxP28gdRLD8cyxeiR6/qxlHhDwwJ42dn9U9r8X8Edg8HJ2+GDvGlx
OjPp+7TcnGdvXPxHN5gGJY2wfvpIzWSZtEbjj2Gnk6NzzmvwhgCVU1827kqO2jwy
jGQ7VcUeq9sohKgISH7Lt1MNUwiJ+3X7MJNuSGzaYY4kN7AuZdxtcSRgiSSPDXPz
einCO1MGp9xHjSWdNsQdk45UGHL2NdoNnPIfV0KcVA+YhK410ObneyZLzUmhRxNd
1MwR+5W6EnWaI+gvGHsXAFbezfbrEdk=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:16:14 2026 by rpki-client