Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b8b6ca-64b1-3111-88ca-ee3c5d9e113c.roa
File:                     19b8b6ca-64b1-3111-88ca-ee3c5d9e113c.roa (raw, json)
Hash identifier:          ltLExGpZ/uqC7N0V74JVh8j0gHefkOuQLwDpL8rKtHc=
Subject key identifier:   4A:B9:83:1B:C5:89:C7:A3:11:31:D5:55:F7:C5:05:E0:EB:3B:1D:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF716BEF8284C367600D200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b8b6ca-64b1-3111-88ca-ee3c5d9e113c.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        73.29.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:16:be:f8:28:4c:36:76:00:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=cc62ddfb-483b-4cf8-a739-65daef2995ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:25:98:56:63:c7:4e:ea:43:46:4e:c4:74:
                    a7:51:b6:2d:85:67:bc:6d:2f:9c:21:e1:0c:21:f2:
                    f1:c9:0d:e2:55:eb:5e:2e:b0:9b:91:0a:92:f3:f7:
                    b3:c6:d9:6a:ef:d7:91:e5:45:8b:44:c7:a2:32:15:
                    c8:f7:8e:77:08:ce:aa:75:c7:8d:6a:ec:2f:75:ce:
                    1b:f8:c0:c0:79:0f:1b:82:f0:ed:ad:fb:5d:7a:fb:
                    20:3b:24:4a:1e:18:c0:b7:2f:ec:55:4f:ad:80:75:
                    51:cb:82:78:5c:7c:c6:0b:cb:27:f3:7b:84:07:55:
                    63:67:b9:48:5f:c0:e6:69:aa:a5:29:7c:63:df:20:
                    2c:a8:08:76:0e:fd:32:24:93:82:f0:18:8e:37:fc:
                    7e:ac:ae:fb:06:85:b1:09:07:d9:08:25:f4:f5:91:
                    3a:91:2f:e5:8b:3e:8c:70:b9:64:fd:d6:2a:dd:3a:
                    1a:40:2e:6b:1f:e8:86:8c:e9:0f:83:bc:e5:18:79:
                    f3:4e:28:1a:81:63:9d:76:80:2d:a3:fa:3d:d6:8c:
                    63:e5:6d:65:6b:90:aa:82:f1:6e:6a:d8:7d:15:65:
                    94:88:87:63:7a:9c:f0:5a:1e:c9:67:58:ed:92:5c:
                    af:9c:d5:03:68:48:70:89:53:ad:19:a1:31:a2:12:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B9:83:1B:C5:89:C7:A3:11:31:D5:55:F7:C5:05:E0:EB:3B:1D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19b8b6ca-64b1-3111-88ca-ee3c5d9e113c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.29.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:59:98:c5:64:ad:b1:8c:fb:e2:70:8f:20:19:6d:16:1d:
         4f:c8:07:ac:50:0a:aa:6f:c4:c4:f0:63:ac:83:5b:d5:52:c3:
         3f:00:61:12:ba:96:f5:a2:43:70:c4:65:7c:a2:92:01:83:1b:
         d3:94:fb:62:a4:e3:98:7c:c7:0e:47:4f:2a:22:9c:fb:4a:91:
         02:f2:96:f3:de:cc:a2:a0:e8:56:33:1f:2d:8c:16:6e:c3:9a:
         07:b7:bf:37:b4:b2:bd:85:c1:2b:15:f2:23:d0:3f:c5:36:87:
         09:06:29:8f:83:83:e9:5a:66:c0:b3:29:a0:ea:81:7e:d1:9d:
         51:83:6f:a0:41:a4:d8:59:0c:e8:9b:c8:8f:ee:50:ba:c1:fc:
         34:fe:94:63:82:03:eb:7d:29:de:9b:21:6b:ec:1e:cc:40:00:
         fa:7c:d3:84:a8:3b:fb:1d:a2:25:6f:75:09:27:a4:2e:b2:ef:
         f5:87:dd:f2:77:c4:5b:42:99:5c:fc:2a:ba:db:ce:34:67:aa:
         d4:63:6c:14:91:97:19:90:3b:9d:a8:21:ba:a7:9d:65:93:a0:
         b1:f2:98:d5:7f:ac:1b:48:9a:66:f5:de:ba:26:8d:be:47:37:
         85:43:ff:0a:81:15:59:d0:f5:6f:b1:12:c6:77:b4:44:34:59:
         b5:0d:0c:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9xa++ChMNnYA0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
Y2M2MmRkZmItNDgzYi00Y2Y4LWE3MzktNjVkYWVmMjk5NWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP0lmFZjx07qQ0ZOxHSnUbYthWe8bS+cIeEM
IfLxyQ3iVeteLrCbkQqS8/ezxtlq79eR5UWLRMeiMhXI9453CM6qdceNauwvdc4b
+MDAeQ8bgvDtrftdevsgOyRKHhjAty/sVU+tgHVRy4J4XHzGC8sn83uEB1VjZ7lI
X8DmaaqlKXxj3yAsqAh2Dv0yJJOC8BiON/x+rK77BoWxCQfZCCX09ZE6kS/liz6M
cLlk/dYq3ToaQC5rH+iGjOkPg7zlGHnzTigagWOddoAto/o91oxj5W1la5CqgvFu
ath9FWWUiIdjepzwWh7JZ1jtklyvnNUDaEhwiVOtGaExohKgiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEq5gxvFicejETHVVffFBeDrOx1pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTliOGI2Y2EtNjRiMS0z
MTExLTg4Y2EtZWUzYzVkOWUxMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSR1kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkcWZjFZK2xjPvicI8gGW0WHU/IB6xQCqpvxMTwY6yDW9VSwz8AYRK6
lvWiQ3DEZXyikgGDG9OU+2Kk45h8xw5HTyoinPtKkQLylvPezKKg6FYzHy2MFm7D
mge3vze0sr2FwSsV8iPQP8U2hwkGKY+Dg+laZsCzKaDqgX7RnVGDb6BBpNhZDOib
yI/uULrB/DT+lGOCA+t9Kd6bIWvsHsxAAPp804SoO/sdoiVvdQknpC6y7/WH3fJ3
xFtCmVz8KrrbzjRnqtRjbBSRlxmQO52oIbqnnWWToLHymNV/rBtImmb13romjb5H
N4VD/wqBFVnQ9W+xEsZ3tEQ0WbUNDEc=
-----END CERTIFICATE-----
Generated at Tue Apr 21 20:21:07 2026 by rpki-client