Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa
File:                     1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa (raw, json)
Hash identifier:          +UsDsJ2TT59OppRWoa9fJc/MAxHVk3lUt7pKXa0EOtc=
Subject key identifier:   6A:9C:F1:31:F9:7A:9A:72:B4:7B:FA:D5:7F:29:11:16:EF:7A:F9:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFEA743DE5C08B509C5F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.58.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:ea:74:3d:e5:c0:8b:50:9c:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=d833c3e7-4472-45f4-81cc-43d67df167bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:fc:7c:2c:af:b2:a1:e8:80:15:df:32:30:
                    4a:64:9e:2e:dc:1e:62:cc:d0:b3:15:d1:e7:07:b7:
                    8e:99:6e:27:33:67:dc:6a:47:e1:9a:da:d8:ac:c3:
                    ef:2e:06:81:be:87:23:97:b7:2d:b4:2a:27:01:b2:
                    c9:3f:38:d8:9e:7f:03:da:a8:89:7f:8c:7a:bb:84:
                    16:38:10:63:0d:c2:cc:d8:ab:72:0d:7b:fd:2e:53:
                    02:41:3b:49:bd:77:be:c7:76:c7:4f:7a:96:6a:48:
                    e4:99:db:b7:85:ef:4f:08:2b:c4:05:2b:fd:25:cd:
                    80:04:2e:46:f7:98:86:1d:e3:e3:f8:90:64:a0:88:
                    a8:cf:dd:54:ed:05:a2:90:c4:1d:bd:da:5f:0e:f9:
                    f2:ed:33:4b:19:3f:d5:bd:f4:13:31:a8:48:96:f1:
                    d0:a4:bd:e5:9f:6c:40:c9:24:95:03:45:7e:11:9c:
                    05:19:df:99:e3:ad:6e:49:b4:7f:c6:08:9a:34:d2:
                    17:f5:f4:4b:f6:19:fd:ee:14:84:d2:21:3b:5b:b6:
                    9c:bb:ab:48:62:10:f8:5f:96:00:0f:55:3c:ee:d0:
                    6c:6e:7f:54:63:bb:3d:9d:d1:27:8e:5c:66:2f:b2:
                    9d:04:af:91:29:8a:04:f8:3a:ea:a3:4b:cb:3c:08:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:F1:31:F9:7A:9A:72:B4:7B:FA:D5:7F:29:11:16:EF:7A:F9:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:e6:79:b2:a3:a4:7c:62:4c:25:0a:4d:5f:25:28:19:a8:
         f3:1c:eb:43:cc:ec:0a:5b:1c:b3:b4:d0:b0:5b:17:3c:c2:ae:
         18:4d:50:cc:a3:15:e1:a6:01:ee:d0:a4:27:50:7e:a2:05:6a:
         e1:f8:15:ca:a8:8c:55:7c:62:80:64:d8:c3:90:6e:69:a0:6b:
         7f:58:49:ef:b6:d9:de:dc:44:3b:51:c3:e2:5b:2f:af:69:4d:
         df:e4:71:b4:f5:53:eb:77:3c:03:ac:c7:0d:19:c7:e1:b7:06:
         3d:ac:c3:71:33:57:0b:d1:c7:41:74:3f:83:11:05:1b:39:8b:
         1d:c6:8e:73:a2:83:da:58:4c:ad:f5:79:1e:c8:93:e9:d0:8b:
         1a:63:6d:f5:67:99:45:82:0b:83:75:35:99:2f:71:30:e9:0d:
         9c:99:f0:ac:e9:b5:df:7d:e7:32:e6:a8:51:fb:03:e4:11:d4:
         f3:57:9e:e6:6c:a2:4e:60:18:82:7f:e6:22:14:16:7d:a6:09:
         c9:90:f9:92:4c:29:85:fc:43:69:09:e4:78:9e:7a:cc:a1:dd:
         e1:52:36:9e:d7:06:3e:6c:22:e7:9e:be:b5:34:ce:6d:79:57:
         9a:8a:4e:88:6d:5a:82:06:b6:c6:1f:48:8c:9c:b1:d0:48:0f:
         88:3d:a6:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/+p0PeXAi1CcX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZDgzM2MzZTctNDQ3Mi00NWY0LTgxY2MtNDNkNjdkZjE2N2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDX8fCyvsqHogBXfMjBKZJ4u3B5izNCzFdHn
B7eOmW4nM2fcakfhmtrYrMPvLgaBvocjl7cttConAbLJPzjYnn8D2qiJf4x6u4QW
OBBjDcLM2KtyDXv9LlMCQTtJvXe+x3bHT3qWakjkmdu3he9PCCvEBSv9Jc2ABC5G
95iGHePj+JBkoIioz91U7QWikMQdvdpfDvny7TNLGT/VvfQTMahIlvHQpL3ln2xA
ySSVA0V+EZwFGd+Z461uSbR/xgiaNNIX9fRL9hn97hSE0iE7W7acu6tIYhD4X5YA
D1U87tBsbn9UY7s9ndEnjlxmL7KdBK+RKYoE+Drqo0vLPAi5kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqc8TH5eppytHv61X8pERbvevkiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI2NTdiMzUtMzEzZi0z
OWMwLTllZTItMWNkZjUwODJlM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDqkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhM5nmyo6R8YkwlCk1fJSgZqPMc60PM7ApbHLO00LBbFzzCrhhNUMyj
FeGmAe7QpCdQfqIFauH4FcqojFV8YoBk2MOQbmmga39YSe+22d7cRDtRw+JbL69p
Td/kcbT1U+t3PAOsxw0Zx+G3Bj2sw3EzVwvRx0F0P4MRBRs5ix3GjnOig9pYTK31
eR7Ik+nQixpjbfVnmUWCC4N1NZkvcTDpDZyZ8Kzptd995zLmqFH7A+QR1PNXnuZs
ok5gGIJ/5iIUFn2mCcmQ+ZJMKYX8Q2kJ5Hieesyh3eFSNp7XBj5sIueevrU0zm15
V5qKTohtWoIGtsYfSIycsdBID4g9poI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:29:27 2026 by rpki-client