Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eccf821-aba5-352c-ab9c-3587fe3b6cd4.roa
File:                     0eccf821-aba5-352c-ab9c-3587fe3b6cd4.roa (raw, json)
Hash identifier:          RJMjY2wvgK74moro9eend+5TS58xNo9Hs5w6Yi2oVo8=
Subject key identifier:   DB:C7:61:8C:69:1C:3A:16:D0:1A:78:8C:D6:EE:54:78:B4:9B:CA:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FE21D06511A60FEA3FD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eccf821-aba5-352c-ab9c-3587fe3b6cd4.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33662
IP address blocks:        73.77.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:e2:1d:06:51:1a:60:fe:a3:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=7ac0b06d-d617-4d67-9781-0d779bbdeee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:8f:98:07:d6:b7:75:01:54:3d:95:b8:2f:
                    24:1d:cd:aa:e5:2e:70:8f:38:7a:e5:b2:1c:25:9d:
                    f1:81:67:b3:07:66:a3:8e:ea:b2:60:41:40:53:a4:
                    f0:82:5d:79:de:e2:ca:a8:e0:9b:e7:f2:c8:51:73:
                    da:5e:17:87:3d:a2:1e:51:ed:f1:70:f4:2e:f3:9c:
                    43:f1:42:7c:d5:0d:dd:e0:3e:0a:4f:24:0f:ad:ad:
                    52:07:96:55:d3:bd:8c:7a:fe:a3:dd:6a:53:5e:a6:
                    60:da:f0:72:d8:ae:68:c6:be:50:50:a2:61:d9:52:
                    b5:c0:c4:2b:f0:91:29:b2:70:6b:e1:70:da:c3:04:
                    06:ea:f0:8e:31:e8:de:32:ce:f0:b7:a0:80:17:ae:
                    41:c4:ec:f0:7c:14:bc:53:83:e5:7f:f3:9b:94:ec:
                    b3:79:7d:ab:df:fa:e2:51:b3:ad:68:bb:7d:fd:92:
                    6f:2a:a9:81:44:b2:3b:01:1a:f6:56:1a:bc:90:5a:
                    ae:42:ef:61:3c:75:c3:70:dc:4c:3d:1c:72:60:2b:
                    93:8c:a7:22:eb:32:89:99:3d:4d:d5:15:bc:5f:44:
                    df:64:7e:4d:f3:fa:5f:78:a3:b7:63:35:98:60:f6:
                    5c:c3:73:d6:3d:2f:da:10:13:26:0c:a2:c9:98:8d:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C7:61:8C:69:1C:3A:16:D0:1A:78:8C:D6:EE:54:78:B4:9B:CA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eccf821-aba5-352c-ab9c-3587fe3b6cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.77.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ef:10:a0:0d:ff:2e:61:ab:10:3d:15:f5:60:37:72:f0:80:
         eb:28:58:a8:3d:58:a4:e9:ef:c2:f8:3b:9d:c0:91:e1:df:08:
         bb:4d:c1:e8:9d:37:4f:c1:22:3e:c9:e0:f0:d6:1a:5e:c3:79:
         36:f8:bc:ec:b6:97:f5:13:df:9d:45:7f:df:e3:95:ba:e5:e4:
         eb:02:4b:d5:ee:17:b0:7b:50:7d:c6:2a:c3:a5:ac:3f:80:c6:
         32:51:1d:26:e7:c1:da:f2:3a:59:c7:56:92:2f:55:8f:09:40:
         1a:90:a3:69:7d:6f:ac:d8:43:e1:c6:50:0a:40:cc:7a:80:f6:
         69:d1:3a:3c:a1:f1:3a:71:65:20:d3:fe:4c:74:36:ea:dc:c5:
         26:cd:70:0a:5f:d8:15:e7:df:cf:26:7d:2e:f7:7c:85:de:14:
         0e:cb:25:3f:8a:3f:f0:99:e8:c0:ce:e6:40:07:3f:27:c8:fb:
         fd:07:a3:ac:18:68:05:1c:cd:4b:16:4f:e3:cf:e9:32:a3:fa:
         a3:15:a8:bb:71:f8:b4:ec:78:36:c0:7a:58:2d:ca:d3:c8:c4:
         5e:86:62:42:65:49:0e:b3:bf:27:98:a1:1c:81:b1:08:a7:23:
         cd:11:4b:0b:4f:02:44:5f:88:33:e4:03:9c:33:92:40:13:9d:
         67:12:b4:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T+IdBlEaYP6j/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
N2FjMGIwNmQtZDYxNy00ZDY3LTk3ODEtMGQ3NzliYmRlZWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZyPmAfWt3UBVD2VuC8kHc2q5S5wjzh65bIc
JZ3xgWezB2ajjuqyYEFAU6Twgl153uLKqOCb5/LIUXPaXheHPaIeUe3xcPQu85xD
8UJ81Q3d4D4KTyQPra1SB5ZV072Mev6j3WpTXqZg2vBy2K5oxr5QUKJh2VK1wMQr
8JEpsnBr4XDawwQG6vCOMejeMs7wt6CAF65BxOzwfBS8U4Plf/OblOyzeX2r3/ri
UbOtaLt9/ZJvKqmBRLI7ARr2Vhq8kFquQu9hPHXDcNxMPRxyYCuTjKci6zKJmT1N
1RW8X0TfZH5N8/pfeKO3YzWYYPZcw3PWPS/aEBMmDKLJmI1s3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvHYYxpHDoW0Bp4jNbuVHi0m8oLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGVjY2Y4MjEtYWJhNS0z
NTJjLWFiOWMtMzU4N2ZlM2I2Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSU18MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMHvEKAN/y5hqxA9FfVgN3LwgOsoWKg9WKTp78L4O53AkeHfCLtNweid
N0/BIj7J4PDWGl7DeTb4vOy2l/UT351Ff9/jlbrl5OsCS9XuF7B7UH3GKsOlrD+A
xjJRHSbnwdryOlnHVpIvVY8JQBqQo2l9b6zYQ+HGUApAzHqA9mnROjyh8TpxZSDT
/kx0NurcxSbNcApf2BXn388mfS73fIXeFA7LJT+KP/CZ6MDO5kAHPyfI+/0Ho6wY
aAUczUsWT+PP6TKj+qMVqLtx+LTseDbAelgtytPIxF6GYkJlSQ6zvyeYoRyBsQin
I80RSwtPAkRfiDPkA5wzkkATnWcStO4=
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:50:29 2026 by rpki-client