Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0d9a9b-e249-3166-b9f0-a3acc29b31f4.roa
File:                     2d0d9a9b-e249-3166-b9f0-a3acc29b31f4.roa (raw, json)
Hash identifier:          et0SCQtI7whJaJv69FNRn62JcgeJbMSshfqU3WEB3jo=
Subject key identifier:   16:CC:88:65:B3:D7:C6:83:DE:92:61:A9:8C:DF:F4:65:F0:2E:9A:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144D4154851E494C6667800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0d9a9b-e249-3166-b9f0-a3acc29b31f4.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        67.191.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:d4:15:48:51:e4:94:c6:66:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=dc69987d-dae4-46df-bc5b-57c2c87f2e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:4f:94:c4:ac:75:ef:22:34:3b:51:de:85:
                    59:21:91:f0:2a:ac:a9:48:ad:8d:9d:7b:6f:ed:b8:
                    73:99:ce:51:ce:66:56:06:36:86:d0:a8:dc:82:e2:
                    b9:ee:cb:6c:19:ed:f7:ab:8f:25:3c:52:79:02:48:
                    69:ed:cd:a1:cd:99:85:ac:8e:17:fc:5c:7f:00:c4:
                    1e:af:87:7b:d1:d2:b3:55:14:c3:ba:0e:48:ce:ca:
                    3e:1b:0b:da:5f:82:bc:74:11:da:88:61:3e:5c:8a:
                    27:0d:19:32:ec:23:d6:7e:46:a0:25:31:e2:65:aa:
                    7a:ed:3c:36:20:1f:d5:4b:f1:df:6e:ce:24:93:e5:
                    39:da:73:a8:11:72:28:e0:b0:d2:85:1a:91:4a:05:
                    e3:0e:0f:17:0c:76:fd:f7:e3:a9:ca:79:f9:80:d9:
                    b8:94:54:3b:a7:bd:c8:7c:3f:4e:c0:89:7a:89:3c:
                    09:51:ce:cd:5a:48:97:0b:b4:1a:64:d4:6c:20:64:
                    f0:54:be:e7:34:10:a4:4d:77:63:9f:01:22:58:e7:
                    60:7f:50:92:b4:da:c3:61:84:8b:ce:2d:5f:9c:60:
                    8e:ee:8c:03:3e:14:6b:7a:a5:f8:21:58:3a:ca:14:
                    b9:cf:b9:6d:1c:2c:cf:6d:d0:1b:8e:f4:45:42:2f:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CC:88:65:B3:D7:C6:83:DE:92:61:A9:8C:DF:F4:65:F0:2E:9A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0d9a9b-e249-3166-b9f0-a3acc29b31f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:81:fc:5d:5a:cc:70:c4:8f:26:ef:a8:6e:32:46:5e:93:
         96:5a:af:97:aa:b5:58:4b:38:c2:aa:6f:b2:38:64:c1:4f:ec:
         07:48:5c:0b:76:09:c1:51:f8:a2:c4:d1:f5:b6:0d:d4:f9:a3:
         e8:a3:8b:03:d9:4b:c6:51:61:f1:81:37:0a:fc:b0:3e:f3:56:
         53:71:90:f2:9f:b0:c7:7b:a1:8b:e2:f3:07:85:86:d1:9b:99:
         ee:0b:07:25:af:61:d6:d8:98:d3:4b:6f:07:1c:0e:00:85:66:
         9c:1d:ea:e7:77:4d:72:40:e7:c4:43:09:f7:df:16:0d:7a:63:
         1e:4f:11:46:9a:59:06:0b:83:7f:c2:47:e1:df:eb:30:50:9f:
         55:f2:c5:f3:fc:53:d3:7c:38:ad:9e:aa:4f:31:da:e4:e9:41:
         b0:50:94:da:1d:9d:4c:c9:33:b1:b5:42:e9:aa:c4:ac:c3:5e:
         f9:7c:7c:0a:af:a7:e2:dc:9d:0b:5a:e4:93:6e:06:c7:b2:86:
         5b:88:6d:d1:a8:ed:51:88:e1:1c:44:4c:20:c2:18:6f:8f:97:
         c7:a5:1b:64:90:e7:85:9f:6d:2a:95:22:77:34:72:e8:a2:e4:
         26:04:49:77:0c:18:24:77:27:22:46:63:09:69:ef:a7:ab:1e:
         58:04:9f:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRNQVSFHklMZmeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ZGM2OTk4N2QtZGFlNC00NmRmLWJjNWItNTdjMmM4N2YyZTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR9PlMSsde8iNDtR3oVZIZHwKqypSK2NnXtv
7bhzmc5RzmZWBjaG0KjcguK57stsGe33q48lPFJ5Akhp7c2hzZmFrI4X/Fx/AMQe
r4d70dKzVRTDug5Izso+GwvaX4K8dBHaiGE+XIonDRky7CPWfkagJTHiZap67Tw2
IB/VS/Hfbs4kk+U52nOoEXIo4LDShRqRSgXjDg8XDHb99+Opynn5gNm4lFQ7p73I
fD9OwIl6iTwJUc7NWkiXC7QaZNRsIGTwVL7nNBCkTXdjnwEiWOdgf1CStNrDYYSL
zi1fnGCO7owDPhRreqX4IVg6yhS5z7ltHCzPbdAbjvRFQi/x9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbMiGWz18aD3pJhqYzf9GXwLppdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQwZDlhOWItZTI0OS0z
MTY2LWI5ZjAtYTNhY2MyOWIzMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7+kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP2gfxdWsxwxI8m76huMkZek5Zar5eqtVhLOMKqb7I4ZMFP7AdIXAt2
CcFR+KLE0fW2DdT5o+ijiwPZS8ZRYfGBNwr8sD7zVlNxkPKfsMd7oYvi8weFhtGb
me4LByWvYdbYmNNLbwccDgCFZpwd6ud3TXJA58RDCfffFg16Yx5PEUaaWQYLg3/C
R+Hf6zBQn1XyxfP8U9N8OK2eqk8x2uTpQbBQlNodnUzJM7G1QumqxKzDXvl8fAqv
p+LcnQta5JNuBseyhluIbdGo7VGI4RxETCDCGG+Pl8elG2SQ54WfbSqVInc0cuii
5CYESXcMGCR3JyJGYwlp76erHlgEn6E=
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:30:22 2026 by rpki-client