Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/230bec25-d2ea-3a2d-a58e-12a815661fe0.roa
File:                     230bec25-d2ea-3a2d-a58e-12a815661fe0.roa (raw, json)
Hash identifier:          Qe5GdHIOFvL4N3dJvstfDVwnmvgfClI6+WUm4LJB1Jc=
Subject key identifier:   26:FF:15:4E:CF:AF:C1:90:0B:E1:DA:83:11:17:A5:F8:F9:FD:A8:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFD8C1EAF20687E8119380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/230bec25-d2ea-3a2d-a58e-12a815661fe0.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.37.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:d8:c1:ea:f2:06:87:e8:11:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=1512389d-2414-4335-8d9f-3d8cbd46af0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:90:39:a2:cf:d3:e4:b2:9f:83:60:58:c1:
                    c5:b0:dd:1d:7a:c6:6f:08:19:17:4b:cc:28:01:6c:
                    12:3c:49:ac:3d:0c:a4:90:fc:ef:1f:da:99:4f:d1:
                    69:3b:f1:d8:ff:fb:db:46:2e:04:14:43:56:6a:0e:
                    a2:dd:db:3e:b1:27:41:a0:03:0f:2b:63:78:2b:b7:
                    c2:28:ee:73:d8:ee:af:c6:e9:6e:e2:f9:5e:75:67:
                    e8:65:ad:9f:c2:30:a6:8b:9c:4e:30:72:51:74:25:
                    ac:e6:df:87:98:be:d0:72:8c:27:88:6f:44:e2:00:
                    a8:84:ae:17:4e:e1:5b:3f:47:77:30:d2:81:75:60:
                    ec:58:f6:e1:83:5e:ba:23:f5:d6:70:10:c4:e9:9b:
                    eb:90:0f:77:68:20:7e:92:e4:9a:c7:74:7a:9d:66:
                    64:e5:84:8b:69:10:b6:93:b4:d4:90:d4:15:8f:71:
                    28:47:e7:a8:7e:7d:a4:d7:b5:fc:e2:27:ca:a3:04:
                    48:be:95:ad:74:c7:24:1d:b5:2d:93:aa:77:66:35:
                    7b:14:1f:39:32:ab:29:f9:57:0a:9d:f1:ba:2b:80:
                    68:74:9c:f0:26:b6:72:f4:fa:c6:7d:ec:21:b8:7e:
                    ba:a9:6d:85:a8:8c:12:08:6a:4e:51:7e:31:69:cd:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FF:15:4E:CF:AF:C1:90:0B:E1:DA:83:11:17:A5:F8:F9:FD:A8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/230bec25-d2ea-3a2d-a58e-12a815661fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:35:2a:b9:8e:2a:bc:ff:db:57:f5:6d:86:7e:dd:67:d9:
         94:1f:99:d4:5d:25:7a:bf:39:2a:2b:ad:3a:28:f3:e8:1f:84:
         52:ea:95:6a:06:56:c5:a6:de:68:c6:eb:65:b1:f5:5e:0f:04:
         8a:72:86:93:bf:6b:57:a4:d5:25:29:ed:42:bf:be:48:28:e8:
         a9:f0:06:92:e1:aa:f5:37:72:f3:18:3e:f2:c9:57:84:c6:c9:
         7e:cd:3a:df:91:be:aa:7b:48:79:c0:34:53:79:3c:9e:0f:2f:
         ce:68:38:a1:b9:cc:41:f7:ff:ec:23:03:b6:d8:b2:05:cc:1d:
         96:12:47:f2:38:61:63:ba:99:14:63:32:f9:cb:24:79:fd:16:
         f3:8b:ce:77:8c:15:37:4e:ac:58:2a:25:08:ec:bc:6e:74:8c:
         35:b0:07:3e:0a:ee:c2:6e:2b:2c:ea:b4:3a:23:b6:fa:38:b8:
         f2:f7:c9:49:6c:54:aa:63:fe:d7:94:0e:aa:23:b4:5b:75:24:
         13:ba:26:a5:77:63:30:6e:1d:a2:72:69:b7:51:f4:d3:48:74:
         c4:8d:d5:35:ca:9c:75:fe:b0:f0:58:22:5d:8a:55:ac:3b:ff:
         de:38:25:f8:20:a3:f3:6f:e7:0e:dc:e9:78:29:85:71:0b:4d:
         51:42:0f:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/9jB6vIGh+gRk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
MTUxMjM4OWQtMjQxNC00MzM1LThkOWYtM2Q4Y2JkNDZhZjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJaQOaLP0+Syn4NgWMHFsN0desZvCBkXS8wo
AWwSPEmsPQykkPzvH9qZT9FpO/HY//vbRi4EFENWag6i3ds+sSdBoAMPK2N4K7fC
KO5z2O6vxulu4vledWfoZa2fwjCmi5xOMHJRdCWs5t+HmL7QcowniG9E4gCohK4X
TuFbP0d3MNKBdWDsWPbhg166I/XWcBDE6ZvrkA93aCB+kuSax3R6nWZk5YSLaRC2
k7TUkNQVj3EoR+eofn2k17X84ifKowRIvpWtdMckHbUtk6p3ZjV7FB85Mqsp+VcK
nfG6K4BodJzwJrZy9PrGfewhuH66qW2FqIwSCGpOUX4xac2QrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCb/FU7Pr8GQC+HagxEXpfj5/aiMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjMwYmVjMjUtZDJlYS0z
YTJkLWE1OGUtMTJhODE1NjYxZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyjNSq5jiq8/9tX9W2Gft1n2ZQfmdRdJXq/OSorrToo8+gfhFLqlWoG
VsWm3mjG62Wx9V4PBIpyhpO/a1ek1SUp7UK/vkgo6KnwBpLhqvU3cvMYPvLJV4TG
yX7NOt+Rvqp7SHnANFN5PJ4PL85oOKG5zEH3/+wjA7bYsgXMHZYSR/I4YWO6mRRj
MvnLJHn9FvOLzneMFTdOrFgqJQjsvG50jDWwBz4K7sJuKyzqtDojtvo4uPL3yUls
VKpj/teUDqojtFt1JBO6JqV3YzBuHaJyabdR9NNIdMSN1TXKnHX+sPBYIl2KVaw7
/944Jfggo/Nv5w7c6XgphXELTVFCDyw=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:26:30 2026 by rpki-client